General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is the toughest privacy and security law in the world. Though it was drafted and passed by the European Union (EU), it imposes obligations onto organizations anywhere, so long as they target or collect data related to natural people.
Data protection has become a truly global phenomenon as people around the world increasingly cherish and value the protection and security of their data. Many countries have adopted or are in the process of adopting comprehensive data protection rules based on principles similar to those of the Regulation, resulting in a global convergence of data
protection rules. This offers new opportunities to facilitate data flows, between commercial operators or public authorities, while improving the level of protection for the personal data in the EU and across the globe.
Appendix – Definitions of certain terms referred to above:
Personal Data:
(Article 4 of the GDPR): ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing:
(Article 4 of the GDPR): means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, erasure or destruction.
Legal Basis for Processing:
(Article 6 of the GDPR): At least one of these must apply whenever personal data is processed:
- Consent: the individual has given clear consent for the processing of their personal data for a specific purpose.
- Contract: the processing is necessary for compliance with a contract.
- Legal obligation: the processing is necessary to comply with the law (not including contractual obligations).
- Vital interests: the processing is necessary to protect someone’s life.
- Public task: the processing is necessary to perform a task in the public interest, and the task or function has a clear basis in law.
- Legitimate interests: the processing is necessary for the legitimate interests of the Data Controller unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Data Controller:
(Article 4 of the GDPR): this means the person or company that determines the purposes and the means of processing personal data.
Data Processor:
(Article 4 of the GDPR): means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
What are your data protection rights?
Africa Surveyors would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:
- The right to access – You have the right to request that Africa Surveyors for copies of your personal data. We may charge you a small fee for this service.
2. The right to rectification – You have the right to request that Africa Surveyors correct any information you believe is inaccurate. You also have the right to request Africa Surveyors to complete information you believe is incomplete.
3. The right to erasure – You have the right to request that Africa Surveyors erase your personal data, under certain conditions.
4. The right to restrict processing – You have the right to request that Africa Surveyors restrict the processing of your personal data, under certain conditions.
5. The right to object to processing – You have the right to object to Africa Surveyors’ processing of your personal data, under certain conditions.
6. The right to data portability – You have the right to request that Africa Surveyors transfer the data that we have collected to another organization, or directly to you, under certain conditions.
7. The right to be informed –You have the right to know how Africa Surveyors processes your personal data why, and who else the data may be passed to.
8. The Right in relation to automated decision making and profiling – You have the right not to be subject to a decision based solely on automated processing.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact our Data Protection Officer at: privacy@africasurveyorsonline.com Or call us at: +254 774 288 100
