PART 1 – Privacy Policy Introduction

 

Endelea is committed to achieving and maintaining industry leading standards in relation to the privacy of personal data. 

In order to maintain this Endelea is transparent about how it collects and uses any personal data which, in turn, ensures its data protection obligations are met. 

This notice provides all of the relevant information that is needed to understand Endelea’s approach to data and privacy protection. This includes who Endelea are, what personal data are collected, how and why they are collected, how they are kept secure and for how long they are held. In addition it sets out the rights of the data subject relating to the data held by Endelea.

 

PART 2 – Endelea Privacy Notice

 

  1. Who are Endelea and how can you contact us? 

 

Endelea is a BE Foundation dedicated to fighting educational poverty and supporting community mental health in sub-saharan africa. Our contact details can be found on the ‘Join Us’ page of our website, www.endelea.org or you can contact our data protection officer at contact@endelea.org.  Endelea is the data controller of any personal data that is provided to Endelea through its website. Endelea determines the way that that data are processed in line with the requirements of the relevant data privacy legislation and regulations.

 

  1. What personal data does Endelea collect and process about you?

 

Endelea collects and processes certain information from you when you use the Endelea website. There may be more information or personal data collected from you if you enquire about the services we offer or interact with the website functionality further. Should you take on any of the commercial services offered by Endelea further information will be collected which will form the basis of the commercial relationship.

 

This information could include (but is not limited to) the following:

  • Name contact information
  • Financial
  • Transactional
  • Contractual
  • Location

 

When you use the Endelea website certain information is collected automatically which includes cookies. This can show Endelea how you are using the website, which pages and features you have accessed and your location country but no more detail than that. This only applies to website users who have specifically provided their contact information to Endelea. If you are a ‘casual browser’ cookie data is aggregated to show overall web traffic but does not relate to or distinguish the individual.

 

  1. How does Endelea collect personal data from you?

 

Endelea collects the information either directly from the data subject (you) where you are using the website, where there is a direct contact through email or phone or where there is a commercial contract. This may include where there is a third-party acting on behalf of the data subject (you). 

 

  1. Why does Endelea collect and process personal data from you?

 

Endelea may collect data based on consent from the data subject. Where this applies Endelea will ensure that any consent was obtained before processing the data and that consent is documented. Endelea may also collect your data (or be provided it) on the basis of a contractual relationship between Endelea and the data subject or a third-party acting on behalf of the data subject. Where there is no contract with Endelea your data will be processed on the basis of a legitimate interest.

 

  1. How does Endelea keep your personal data secure?

 

The security of your personal data is covered in a number of elements to ensure that the appropriate ‘technical and organisational measures’ are in place. As part of this a full suite of policies are maintained within our Information Security Management System. In addition to the policies Endelea applies other measures and controls to ensure that personal data are secure. These include (but are not limited to) staff training, internal working groups, continuous monitoring and improvement, relevant background checks (where needed), physical security measures at Endelea office locations, data segregation within our systems and network access controls.

 

  1. How long does Endelea keep your personal data for?

 

Endelea will only keep your data for as long as it is required.  

 

  1. Your rights in relation to your personal data

 

Under the GDPR everyone has the following rights, please note however that not all of these are an absolute right and may depend on certain factors such as the basis and purpose for processing the data.

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure (this is also referred to as the right to be forgotten)
  • The right to restrict processing
  • The right to data portabililty
  • The right to object
  • The right not to be subject to automated decision-making

In order to fulfil any request in line with the above rights it may be necessary for Endelea to request further information in order to verify the identity of the requestor. 

 

  1. What if you want to make a complaint?

 

If you have any concerns about our use of your personal information, you can make a complaint to us at contact@endelea.org.