Galerie Des Objets D’art Africain www.goda-burundi.com

Last Updated: Monday, 29th July 2024

INTRODUCTION

Galerie Des Objets D’art Africain is committed to protecting the personal data of our customers, employees, and partners. This Data Protection Policy outlines how we collect, use, store, and protect personal data in compliance with applicable data protection laws and regulations.

SCOPE OF THE POLICY

This policy applies to all personal data processed by Galerie Des Objets D’art Africain, including data related to customers, employees, suppliers, and partners. It covers all forms of data processing, including automated and manual processing.

DEFINITIONS

Personal Data - Any information relating to an identified or identifiable natural person;

Data Subject - The individual to whom the personal data relates;

Processing - Any operation performed on personal data, including collection, storage, use, transfer, and deletion;

Data Controller - The entity that determines the purposes and means of processing personal data; and

Data Processor - The entity that processes personal data on behalf of the data controller.

DATA COLLECTION

We collect personal data through various means, including but not limited to:

• Online forms and applications;

• Customer service interactions;

• Employment applications; and

• Business partnerships.

LAWFUL BASIS FOR PROCESSING

We process personal data based on one or more of the following legal grounds:

• Consent - The data subject has given consent to the processing of their personal data.

• Contractual Necessity - Processing is necessary for the performance of a contract to which the data subject is a party.

• Legal Obligation - Processing is necessary to comply with a legal obligation.

• Legitimate Interests - Processing is necessary for the purposes of legitimate interests pursued by Galerie Des Objets D’art Africain or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

USE OF PERSONAL DATA

We use personal data for the following purposes:

• To provide and manage our services and products;

• To communicate with customers and respond to inquiries;

• To process transactions and manage accounts;

• To comply with legal and regulatory requirements; and

• To improve our services and website for employment and recruitment purposes.

DATA SHARING

We may share personal data with:

• Service Providers - Third-party vendors who perform services on our behalf;

• Affiliates and Partners - Entities affiliated with us for business purposes; and

• Legal Authorities - If required by law or to protect our rights, property, or safety.

We ensure that any third parties with whom we share personal data comply with data protection standards.

DATA SECURITY

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data;

• Access controls and authentication protocols;

• Regular security assessments and audits; and

• Employee training on data protection practices.

DATA RETENTION

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal data is no longer needed, we securely delete or anonymize it.

DATA SUBJECT RIGHTS

Data subjects have the following rights regarding their personal data:

• Access - Request access to their personal data and receive a copy;

• Rectification - Request correction of inaccurate or incomplete data;

• Erasure - Request deletion of their personal data under certain circumstances;

• Restriction - Request restriction of processing of their personal data;

• Portability - Request transfer of their data to another service provider; and

• Objection - Object to the processing of their personal data.

To exercise these rights, data subjects can contact us using the contact information provided below.

INTERNATIONAL DATA TRANSFER

If personal data is transferred to a country outside the East African Community (EAC), we ensure that appropriate safeguards are in place to protect the data, such as standard contractual clauses or binding corporate rules.

CHANGES TO POLICY

We may update this Data Protection Policy from time to time. Any changes will be posted on this page, and the effective date will be updated accordingly. We encourage you to review this policy periodically.

If you have any questions or concerns about this Data Protection Policy or our data practices, please contact us at info@goda-burundi.com.

Galerie Des Objets D’art Africain Monday, July 29th 2024

By using our website and services, you acknowledge that you have read and understood this Data Protection Policy and agree to its terms. If you do not agree, please discontinue use of our website and services.