Data Privacy Notice
This Data Privacy Notice informs you about how and for which purposes we will process your personal data and explain your rights under applicable data protection. We are strongly dedicated to handling your personal data always responsibly, diligently and in compliance with all legal requirements. State of the art professional standards will be applied to protect the integrity and security of your personal data.
Who Is Responsible for your Personal Data?
We, Bamburi Cement PLC, Kitui road, off Kampala Rd, Industrial Area Nairobi, P.O Box 10921-00100, Nairobi, will be the responsible controller for any personal data you provide us with in connection with our business relationship.
Which Personal Data Do we Collect?
Unless otherwise agreed with you, we will collect only the basic personal data required in connection with our business relationship. This includes your contact data (such as name and job title, address, telephone number, email address and other contact details, mobile device unique identifier and the IP address of your computer if you use our websites, online platforms or apps). While doing business with you, we will also collect business-related data which may include information on purchases, services and other business activities, product feedback and any other information you may provide to us.
How Do We Collect Personal Data?
We will collect your personal data directly from you when you interact with us, e.g. when you visit our website, communicate with us in relation to our products and services, submit an order, register to receive our newsletter or participate in our customer surveys.
Why We Process Personal Data?
We use your personal data for providing you the products and services we offer. To do so, we keep records of your business with us and manage your account. We may also contact you for customer assistance and service purposes or to inform you about our products and services. If you do not provide us with your personal information, we will be unable to provide you with the requested products or services.
We will also process your personal data where we are required to do so by law (e.g. to keep sales records for tax purposes) or where you have expressly permitted us to do so.
How we Use Personal Data?
We will store and process your personal data in the European Union and the Republic of Kenya.
We may store and process your personal data, or share it with the recipients described below, also outside of the European Union and the Republic of Kenya. We will do so only to the extent permitted by applicable law and take appropriate safeguards to ensure the security and integrity of your personal data. You may contact us anytime using the contact details below if you would like further information on such safeguards.
Who we Share Personal Data with?
We may share your personal data with:
- our affiliates, where required, to provide you with our goods and services, or otherwise permitted or required by applicable law; and
- credit reference agencies and other companies for use in credit decisions, for fraud prevention and to pursue debtors.
We may also instruct service providers (e.g. a cloud provider), domestically or abroad, to process your personal data on our behalf and in accordance with our instructions. We will retain control over your personal data and will remain fully responsible to you when engaging service providers.
We may also share your personal data with third parties if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets, along with its professional advisers. If the company or substantially all of its assets are acquired by a third party, personal data held by us about customers will be one of the transferred assets.
Otherwise, no third parties will have access to your personal data unless there is a legal obligation or you give us permission to do so.
How Long do we Store Personal Data?
We will hold your personal data as long as required to provide the services, products or information you have requested and to administer your business relationship with us. If you have asked us not to communicate with you, we will hold this information as long as required to comply with your request. We are also required to keep certain of your personal data (e.g. relating to business transactions) for certain retention periods under applicable law. Your personal data will be promptly deleted when it is no longer required for these purposes.
You have the right to request from us access to and rectification or erasure of your personal data or restriction of processing concerning you and to object to the processing as well as the right to data portability in accordance with the Kenya Data Protection Act 2019 and applicable legislation.
In particular, you have the right to request a copy of the personal data that we hold about you. If you use this service repeatedly, we may make a small charge for this. If you would like to transfer your personal data to another controller, we will provide you with the personal data which you provided to us and which has been processed by automated means in a machine-readable portable format free of charge.
As we want to make sure that your personal data is accurate and up to date you may also ask us to correct or remove any information which you think is inaccurate.
For any of the above requests, please send a description of your personal data concerned and state name, email address, your personal account and customer number as proof of identity to firstname.lastname@example.org. We may require additional proof of identity to protect your personal data against unauthorized access.
If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact us at email@example.com to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the competent data protection supervisory authority in your country.
What If I’m Under 16?
If you are under 16, please make sure that you obtain your parent/guardian’s permission prior to providing us with any of your personal data. Persons under the age of 16 are not permitted to provide us with their personal data without such consent.
Changes to This Notice
This Data Privacy Notice was last updated in July 2022. From time to time, we may make changes or amend it as required to comply with applicable data protection law. So you may wish to check back from time to time. Any amended information Data Privacy Notice will apply from the date it is posted on our website.
If you have any questions regarding your rights or if you have any specific requests relating to your Personal Data please contact us at firstname.lastname@example.org.