Updated: April 2024
ABOUT
The PRIVACY SYMPOSIUM AFRICA (PSA) is a Pan African Privacy and Data Protection platform established in 2019 by Unwanted Witness to attract, present, and discuss original research results and latest technology developments related to personal data protection and privacy. The Privacy Symposium Africa since establishment has offered innovative propositions in legal, regulatory, academic, policy and technological development in the area of Privacy and Data Protection. The platform gathers Business community, ICT experts, academics, lawyers, regulators, policy-makers, and civil society for three days of inspiring keynote addresses, thought-provoking panels, master classes and limitless high-value networking.
This Privacy Policy aims to give you information on how we collect and process your personal data through your use of this website, including any data you may provide through this website.
TYPES OF PERSONAL DATA WE COLLECT
Where in this Policy reference is made to “personal data” this expression means any information which identifies (or from which it is possible for us to identify) a natural person.
We may collect, use, store and transfer different kinds of personal data about you, as follows:
- “Identity Data”, which comprises your first name, any middle names and surname, your title and gender;
- “Contact Data”, which comprises your email address and one or more contact telephone numbers;
- “Special Category Data”, which comprises details of any medical conditions of allergies to which you may be susceptible, or any dietary requirements which you may have.
Except as specified above, we do not collect any Special Categories of personal data (this expression covers details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Also, we do not collect any information about criminal convictions or offenses, neither do we knowingly collect any personal data relating to children.
The above information constitutes the minimum information that we need from you in order to arrange your participation in our events. Consequently, if you do not provide the above information, or the information which you provide is incorrect or out of date, it might not be possible for us to allow you to participate in the event, in which case we would notify you accordingly. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
WHY DO WE COLLECT INFORMATION?
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances, and on the following lawful bases:
- Where we need to use your personal data for the purpose of fulfilling the contract into which we intend to enter with you for your participation in the event. For that purpose it will be necessary for us to process all of the kinds of personal data about you that we have listed above.
- Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. For this purpose, “legitimate interests” means our interest in conducting and managing our business in such manner as to enable us to give you the best customer experience, and the interest of our business generally. We shall always consider and balance any potential impact upon you and your rights before we process any personal data for our legitimate interests. We shall not use your personal data for any purpose if our interests in so doing are over-ridden by any adverse impact on you or your rights, unless we have your consent to do so or we are otherwise required or permitted to do so by law; and
- Where we need to comply with a legal or regulatory obligation.
- We shall not use your personal data for any other purpose except where we wish to submit to you a post event questionnaire
WHEN DO WE COLLECT INFORMATION?
We only collect personal data that you voluntarily provide to us. Whenever you send us an email, consult with our team or request information about the Privacy Symposium Africa, or indeed communicate with us in any other way, you are voluntarily giving us information which we collect. We shall also collect information about you as part of the process of fulfilling a request from you for providing you with information about our the PSA that you have requested. This information may include your Identity Data and your Contact Data.
WHEN WILL WE SHARE YOUR PERSONAL DATA?
We shall not share your personal data with any third parties for marketing purposes without your express consent. We shall however share your personal data with service providers when it is necessary in order to register you as an attendee at PSA and to provide you with the various services that together comprise the event package. Examples of these service providers include hotels, providers of airport transfer services, airlines, restaurants, venue operators.
We reserve the right to disclose or share your personal data in order to comply with any legal requirements, enforce our terms and conditions, or any other agreement we enter into with you, or to protect the rights, property, or safety of the PSA and other participants. This includes exchanging information with other organisations for the purposes of fraud protection.
WHERE WILL YOUR PERSONAL DATA BE STORED?
All personal data that you provide to us is stored on our server. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. Whenever we transfer your personal data outside Uganda, we shall ensure that an adequate degree of protection is afforded to it by first obtaining from each such third party a written declaration of compliance with the data protection rules applicable in Uganda.
HOW LONG WILL WE KEEP YOUR PERSONAL DATA?
How long we store your personal information depends upon the type of information we are holding and the purpose for which we need it, and in accordance with our Data Retention Policy from time to time, details of which are available on request.
We would not normally keep your personal data for more than one year from when we first receive it.
We shall keep your data for the period of time you hold an account with us, to enable us to contact you, keep a record of your past requests and supply you with any new orders.
We shall not keep your personal information for any longer than necessary to fulfil our obligations to you or to meet our legitimate business interests or legal requirements.
YOUR RIGHTS
Under certain circumstances, you have the following rights:
- To request that we provide you with a copy of the information we hold about you (“Access Request”);
- To request that we rectify any information we hold about you (“Right to Rectification”);
- To request that we erase any information we hold about you (“Right to Erasure”);
- To restrict the level of processing we carry out with your information (“Restriction of Processing”);
- To obtain from us all personal data we hold about you in a structured, machine readable form, and have this information transmitted to another organization (“Data Portability”);
- To object to our processing your information in certain ways (“Right to Object”); and
- To withdraw your consent at any time to our processing of your data.
Please see the relevant sections below for further details on your rights as a data subject. You can exercise any of the above rights by emailing us at info@unwantedwitness.com.
You also have the right to lodge a complaint with the Personal Data Protection Office, Uganda if you are unhappy in any way with how we treat your personal information.
We shall comply with any request made under this section as soon as possible, and normally within one month from the date of your request. However, if necessary, for example if your request is particularly complex or we receive a number of similar requests, we may extend this period by an additional two months, but we shall notify you if we need to do this.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). Please note that where we receive requests under this section which are manifestly unfounded or excessive, for example because they are repetitive in nature, we may charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested or refuse to act on the request.
ACCESS REQUEST
You have the right to request a copy of the information that we hold about you at any time.
Please note that in most circumstances, we shall not make a charge for this, however we may make a reasonable fee based on administrative costs for any further copies requested.
This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
RIGHT TO RECTIFICATION
You have the right at any time to ask us to rectify any personal data that we hold for you which is incorrect or incomplete.
This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
If we have disclosed any incorrect or incomplete data to any third parties, we shall inform them of any necessary amendments or corrections made to your personal data under this section.
RIGHT TO BE FORGOTTEN/ ERASURE
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.
You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
RESTRICTION OF PROCESSING
You can ask us to restrict how we use your data in the following circumstances:
- Where you believe that the information we hold about you is inaccurate, you can ask that we refrain from using your data until we can verify the accuracy of it;
- Where we have unlawfully processed your data, you can ask that we restrict our usage of it rather than erase it completely; or
- Where we no longer need to hold your information, but you wish us to retain your information for the purpose of establishing, exercising or defending a legal claim.
RIGHT TO OBJECT
You have the right to object, on grounds relating to your particular situation, to our processing of your personal data where we are doing this for the performance of a task carried out in the public interest (which we shall have told you about, if applicable), or where we are carrying out processing for the purposes of legitimate interests pursued by us.
You also have the right at any time to ask us not to process your personal data for direct marketing or profiling purposes (to the extent that such profiling is related to such direct marketing).
We shall have informed you before the time we obtained your personal data whether we intend to process your personal data for this purpose, or if we intend to disclose your information to any third party for such purposes.
If we process your personal data for automatic decision making or profiling purposes (i.e. to analyse or predict your personal preferences and purchase behaviour, and such profiling is automated), we shall ensure that we tell you about this beforehand, and will only do this where this is a necessary condition of entering into a contract between you and us, or where you have given us your explicit consent to do this.
RIGHT TO WITHDRAW CONSENT
Where you have given us your consent to our processing of any of your personal data, you have the right to withdraw your consent at any time, for example if you no longer wish for us to share your information with third parties for marketing purposes (where you have previously consented to this).
However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
THIRD PARTY WEBSITES
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.
We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
CHANGES TO THIS POLICY
We may update this policy to reflect changes to our information practices. If we make any material changes we will notify you by means of a notice on our site prior to the change becoming effective.
We encourage you to periodically review this page for the latest information on our privacy practices.