“Biometric Data” means personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic (finger print) data.
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
“Data” means individual facts, statistics, or items of information regarding an individual. Data can refer to automated data and manual data.
“Data Subject” means an identified or identifiable natural person (see Personal Data).
“Data Protection Officer (DPO)” the person required to be appointed in specific circumstances under the regulations. The DPO oversees how we collect, use, share and protect information.
“Explicit Consent” means consent which requires a very clear and specific statement on the part of the Data Subject.
“Personal Data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing or Process” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Records” documents in every format created and received by individuals or organisations in the course of conduct of affairs and accumulated as evidence of these activities.
“Supervisory Authority” means an independent public authority which is established under the Data Protection Act, that is, the National Information Technology Authority of Uganda.
“Yo-Waste” means Yo-Waste Limited, a company duly incorporated under the laws of Uganda, whose registered address is at Plot 4b, Muwafu Rd, Ntinda Kampala, Uganda
“Yo-Waste Web App or Our App or the App” means the Yo-Waste Web Application,
Yo-Waste may collect Personal Information which information alone or in combination with other information may be used to identify you. This could be your name, your address, your mobile number, email address, home or business address or any other location from which you use our services.
When you are connected to the App, we may collect device-specific information such as your device model, operating system, unique device identifiers, and mobile network information.
Server logs that are maintained by us or by our third-party service providers may contain information about the services that you have used, and your device-specific information. We may use your device’s IP address or MAC address to track device-event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.
When you visit, use and interact with the Application, we may receive certain information about your visit, use or interactions. For example, we may monitor the number of people that have visited the Application.
In particular, the following information is created and automatically logged in our systems.
Log Data: Information that your browser automatically sends whenever you visit the App. This includes your Internet Protocols address, browser type and settings, the date and time of your request and how you interacted with the Application.
Usage Information: We collect information about how you use our App, such as the actions you take, and the time, frequency and duration of your activities.
How the Data is collected?
We collect your Personal Information in connection with the services provided to you. We also may use any number of tools to collect information about you, your computer access points, and mobile devices that you use to connect to the App.
Yo-Waste may collect additional information from the App each time you visit the App.
Use of your Personal Information
Yo-Waste may use your Personal Information to contact you via email, telephone or mobile device in order to give you updates about Yo-Waste’s special events, new services, payment confirmations or other promotions that may be of interest to you.
We also use return e-mail addresses to answer the e-mail we receive from you. We may also use your IP address, or unique devices identification numbers to help protect Yo-Waste and our internet service providers from fraud.
We may also use non-personal aggregate information to improve our products and services offerings. Such information may also be used to analyse the effectiveness of our services.
If we use your sensitive Personal Information, such as biometric data, we will ask for your explicit consent.
We will ensure that you are informed when making your decision and that you are aware that you can remove your consent at any time by contacting us.
We ensure your consent is obtained under the following principles: Positive Action (Clear affirmative action by you is required), free will, specific, recorded and can be withdrawn at any time.
Data Protection Officer
To ensure that your rights are protected, our Data Protection Officer oversees the collection, use, sharing and protection of your information. The Data Protection Officer may be contacted by email at email@example.com by telephone on +256 394 894 278 or by writing to The Data Protection Officer, at Plot 4b, Muwafu Rd, Ntinda Kampala, Uganda.
Keeping your information safe and secure
We protect your information with security measures under the laws that apply. The collection, use, sharing, protection and deletion of your information is overseen by our Data Protection Officer.
When you contact us to ask about your information, we may ask you to identify yourself. This is to help us protect your information.
To meet our legal and regulatory obligations, we hold your information while you hold an account with us and for a period of time after that subject to legal, regulatory and business requirements, which may require us to hold the information for a longer period.
We continuously assess and delete data to ensure it is not held for longer than necessary.
Sharing your information with third parties
We may share your information with third parties sometimes, in order to: provide services, analyse information, research your experiences dealing with us and to protect both our interests.
The information is only shared upon assurance that the third party has a functional data protection policy in place and where the same is required by law.
Your rights regarding your Personal Information
If you wish to exercise your Personal Information rights, please contact the Data Protection Officer by email at firstname.lastname@example.org, by telephone on +256 39 489 4278 or by writing to The Data Protection Officer, Plot 4b, Muwafu Rd, Minister’s Village, Ntinda, Kampala, Uganda.
When you contact us to ask about your information, we may ask you to identify yourself, this is to help us protect your information.
You have the right to obtain information, however this right cannot affect the rights and freedoms of others. We cannot therefore provide information on or about other people without their consent.
We will provide your information without charge. As permitted under the law, where information requests are manifestly unfounded or excessive, we may either charge a reasonable fee or refuse to act on the request.
Access to your Personal Information
You can request for the following information:
the information we hold on you;
the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipient to whom the personal data have been or will be disclosed;
where the personal data are not collected from you, any available information as to their source;
the significance and the envisaged consequences of such processing for you.
Updating your Personal Information
You may update or correct any of your personal details. Please contact us at +256 39 489 4278 or call to any of our offices.
Withdrawing your consent
If you have given us consent in relation to the use of your Personal Information, you can change your mind and withdraw your consent. Please contact us at +256 39 489 4278 or call to any of our offices.
Restricting and objecting to processing your Personal Information
You have the right to restrict or object to us processing your Personal Information. We will require your consent to further process this information once restricted.
Deleting your Personal Information (your right to be forgotten)
You may ask us to delete your Personal Information or we may delete your Personal Information if:
the personal data are no longer necessary in relation to the purposes for which they were collected or processed;
you withdraw your consent for whichever reasons;
the personal data have been unlawfully processed;
the personal data have to be erased for compliance with a legal obligation.
Moving your Personal Information (your right to data portability)
If you request and where possible we can share a digital copy of your information directly with you or another organisation.
We do not share information processed under legal obligation or our legitimate interest for portability, this is in line with the laws of Data Protection.
Right to lodge a complaint with a ‘Supervisory Authority’
If you have a complaint about your Personal Information, please contact us on +256 39 489 4278 or contact a member of staff in any of our offices.
You may also make a complaint to the Data Protection Officer, by email at email@example.com, by telephone on +256 39 489 4278 or by writing to The Data Protection Officer, Plot 4b, Muwafu Rd, Ntinda, Kampala, Uganda.
Any complaint you make to us will be investigated as fully as possible. Please provide as much information as possible to help us quickly resolve your complaint.