Information that we collect from you and how we use it
The General Data Protection Regulation sets out clear expectations on Data controllers to offer transparency around their data processing activities, this section details how we will use your data, how it is categorised and our legal basis for processing it.
When you visit, register or order products and services from our website, we will collect and process data about your use of our website and services (Usage Data), such as your IP address, time spent on site, pages visited and so forth.
Usage data is collected using Google Analytics. The legal basis for this processing is our legitimate interests, which are monitoring and improving our website.
We may also collect information about your education, work and military history, legal work eligibility status, and other information relevant to specific jobs for which you may apply.
Other uses of your information
We collect information from you when you fill out a form or enter information on our website. This is used to understand the nature of your query and respond accordingly.
The legal basis for this processing is our responding to a query made from you.
In addition to the specific purposes for which we may process any of the data categories set out in this section, we may also process any the data categories if processing is necessary to comply with a legal obligation, to protect your vital interests of you or another natural person.
Information that we collect from you and how we use it
Data supplied to us for the purposes in this section should only be submitted by the data subject or with their knowledge and agreement to our processing activities. We are not liable for any harm, damage or infringement of the rights, freedoms and/or vital interests of any natural persons as a result of the necessary permissions not being obtaining before submitting personal data for processing. Please do not supply any other person’s personal data to us without their full understanding of our processing activities.
Disclosure of your information
The information you provide to us will be held on servers in an access-controlled office environment and will be shared with the third parties listed in this section.
Djibouti Telecom does not sell or share your information with third parties for the purpose of Direct Marketing.
We will disclose your personal data to our suppliers, for the necessary purposes detailed below and on the legal bases set out in this policy for each data category:
Other disclosures we may make
In addition to the specific purposes for which we may process any of the data categories set out in this Section, we may also process any the data categories if processing is necessary for compliance with a legal obligation, or in order to protect the vital interests of you or another natural person. We may also disclose your personal data where such disclosure is necessary to establish, exercise or in the defence of legal claims, whether they are in court proceedings or in an administrative or out-of- court procedure.
We may disclose your personal data to our insurers and/or professional advisers for insurance cover purposes (either obtaining or maintaining), to manage risk, to obtain professional advice, or in defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
Retaining and deleting personal data
This Section sets out our policy on the retention of Your data, this helps to ensure that we are compliant with our legal obligations for the retention and deletion of personal data.
Personal data that we process for any purpose or purposes will not be kept for longer than is necessary for that purpose or those purposes.
Due to the nature of us performing an ongoing contract and service to You, it is not possible for us to specify in advance how long we will retain your personal data. As such, the period of retention will be determined based on the following criteria:
- Account Data retention periods will be determined based on the continued performance of a contract between you and us.
- Subscription Data retention periods will be determined based on the continued performance of a contract between you and us.
- Usage Data retention periods will be determined based on our continued legitimate interest in the proper administration of our website and business and monitoring and improving our website and services.
Notwithstanding the other provisions of this section, we may retain your personal data where retention is necessary for compliance with a legal obligation to which we are subject, or to protect the vital interests of you or another natural person.
We may update this policy from time to time by publishing a new version on our website.
You should check this page occasionally to ensure you are happy with any changes to this policy.
We may notify you of changes to this policy by email or through notification via our web portal.
In this Section, we provide a summary the rights that you have under data protection law (including GDPR). Not all of the details have been included here and if you need further clarity, you should seek guidance from the regulatory bodies for full information on these rights.
Your principal rights under data protection law are:
The right to access
You have the right to request confirmation from us as to whether we process your personal data and if we do, you may request access to your data, together with applicable additional information related to it. The additional information will include details of the processing purpose(s), personal data categories that we process and any recipients of the your personal data. As long as the rights and freedoms of others are not affected, we will provide a copy of your personal data to you.
The first copy will be provided free of charge, subsequent copies may be subject to a reasonable fee.
The right to rectification
This provides the right to have any inaccurate personal data about you rectified and, subject to the consideration of the purposes of processing, to have any incomplete personal data about we hold about you completed.
The right to erasure
In certain circumstances you will have the right to request the erasure of your personal data. Those circumstances include:
The personal data we hold is no longer necessary to the purposes for which it was collected or processed;
- You want to withdraw consent to any consent-based processing;
- You object to the processing of your data under applicable rules of data protection law;
- The processing is for direct marketing;
- The personal data that we hold has been processed unlawfully.
There are exclusions on the right to erasure. General exclusions include where processing is necessary for the following purposes:
- To exercise the right of freedom of expression and information;
- For compliance with a legal obligation; or
- To establish, exercise or in defence of legal claims.
The right to restrict processing
In certain circumstances you have the right to restrict processing of your personal data. Circumstances that would apply are:
- You dispute the accuracy of the personal data we hold;
- The data has been processed unlawfully, but you do not want us to erase the data;
- We no longer need to process personal data for the purposes that we collected it for, but you require personal data to establish, exercise or in defence of legal claims; and
- You object to processing and we are in the process of verifying that objection.
Where processing has been restricted for one of the above reasons, we may still store your personal data. We will only process it:
- If we have your consent to do so;
- To establish, exercise or in the defence of legal claims
- To the protect of the rights of another natural or legal person
- For reasons of important public interest.
The right to object to processing
You have the right to object to us processing your personal data on grounds that relate to your situation, however this is limited to the extent that legal basis for the processing is necessary for:
- the performance of a task carried out in public interests or in the exercise of any official authority vested in us; or
- the purposes of the legitimate interests, either ours us or by a third party.
If you do object to our processing, we will cease our processing activities of your personal information, unless we are able to demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
You have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes).
The right to data portability
To the extent that the legal basis for our processing of your personal data is:
- consent; or
- that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract
- and such processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.
The right to complaing to a supervisory authority
If you believe our processing of your personal information constitutes an infringement of data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection.
To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
Questions and contact information
If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Data Controller Officer at firstname.lastname@example.org