Privacy Policy

This Privacy Policy is effective as of 1st January 2023

DataUpskill (“us”, “we”, or “our”) operates the www.dataupskill.io website (the “website”). We understand that you care about how we use the information you gave to us and appreciate your trust. At DataUpskill, we recognize the importance of protecting your personal information and are committed to processing it responsibly and in compliance with applicable data protection laws in all countries in which DataUpskill operates. This Privacy Policy describes our general privacy practices that apply to personal information we collect, use, share and protect. This Privacy Policy does not apply to the extent DataUpskill processes personal information on behalf of clients for their benefit and under their control (as a “processor”), such as Cloud Services or applications (“apps”). It may apply to the collection of information related to authorized users of such services to the extent DataUpskill processes this information for its interests (as “controller”). By using our website, you accept this Privacy Policy and give us your consent to the processing of your personal data described herein.

Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. When visiting the website and (or) using other services provided by DataUpskill on which a link to this Privacy Policy is displayed, and all other communications with you through written or oral means, such as email or phone, you accept and give your consent to the practices described in this Privacy Policy notice.

Who are we?

For the purposes of the data protection legislation, the data controller is DataUpskill, a company registered in Kenya, having its registered office in Nairobi and its affiliated companies (hereunder referred to as “DataUpskill”).

What data do we collect?

We may have access to/collect the data that is essential for giving visitors the maximum benefit from our website and that you voluntarily give us via email or other direct contact from you.

We collect the following data during your website session:

• Information you provide directly via contact forms, blog subscription, or email messages, including your email address, phone number, name, surname, company name, and other information you are willing to provide us;
• Data about your behavior on web pages during your visit and information about how you navigate the website;
• Statistics, such as particular pages you visit, the number of unique website entries, the browser from which you visit the website, your screen resolution, and the platform you use.

Also, we collect information we have obtained about you from publicly available sources for our marketing and recruitment activities, contract obligations, and aims related to the mentioned above purposes. In addition, we may use your personal data for secondary purposes closely related to the mentioned above purposes, in circumstances where you would reasonably expect such use.

In the course of our marketing and recruitment activities, for communicating our services and business development, we may collect the following data:

• Information collected from you or third parties, including your email address, phone number, name, surname, company name, job title, postal address, etc.
• Information you provide to us when using the services or information that is generated in the course of the use of those services (including the timing, frequency, and pattern of service use).
• Information contained in or relating to any communication that you send to us or send through this website (including correspondence with us, communication content, and metadata associated with the communication).
• Information you provide to participate in DataUpskill events, live or web conferences.
• Any other personal data that you decide to share with us.

The above-mentioned data is collected on the basis of your consent or other legal basis presented below and in compliance with applicable laws, along with required filings with data protection authorities, where required. You can send your consent by email to the address dataupskill23@gmail.com.

DataUpskill DOES NOT intentionally collect any data that is, by its nature, particularly sensitive. Under particularly sensitive, we mean genetic data, biometric data, data revealing racial or ethnic origin, information about political opinions, sex life, sexual orientation, religion or other beliefs, data concerning health, trade union membership, or other sensitive information.

How do we process this data?

We will only process your data in the following manner:

• Lawfully, fairly and transparently;
• Only for the purpose stated at the time of collection;
• Only personal data that is adequate, relevant and limited to what is necessary for the stated purpose will be collected;
• It is your responsibility to ensure that any personal data you provide is accurate at the time of collection and if there are changes to the personal data, and we will take every reasonable action to ensure the data remains accurate;
• Your personal data will not be kept longer than necessary for the stated purpose except for statistical reasons, in which case appropriate technical and organizational measures will be implemented to safeguard your data;
• We will process your data in a manner that ensures security using appropriate technical or organizational measures.

We will use your data on the following legal basis:

• Legitimate interest;
• Consent;
• Another legal basis, e.g. to enter a contract with you.

Personal data processed by DataUpskill is not subject to profiling and automated decision-making.

How long will we retain your data?

We will retain your data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

In order to ensure compliance with this principle, we define the retention periods applicable to each processing operation. The following elements are considered when determining the retention period:

• Legal obligations;
• Recommendations of supervisory authorities;
• Best practices;
• Our operational needs.

Different retention periods apply to different types of personal data. Following the end of the relevant retention period, we will delete or anonymize your personal data.

Who will we share your data with?

We may disclose your data to our affiliates or subsidiaries, which may help us to process it, as well as we may disclose your data to third-party vendors, service providers, contractors, employees or agents who perform functions on our behalf, such as website management, hosting, technical support and marketing analytics. We will make sure that they treat it as protective as we do. We also may disclose your data to legal authorities in order to comply with the law, a judicial proceeding, a court order, or another legal process.

What are your rights?

The various rights are not absolute and each is subject to certain exceptions or qualifications. We will grant your request only to the extent that it follows from our assessment of your request that we are allowed and required to do so under data protection laws. Nothing in this Privacy Policy is intended to provide you with rights beyond or in addition to your rights as a data subject under data protection laws.

In certain circumstances, you have the following data protection rights:

• The right to be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your personal information and your rights. This is why we are providing you with the information in this Privacy Policy.
• The right to access, update or delete the information we have on you: You have the right to obtain a copy of your personal information (if we are processing it), and certain other information (similar to that provided in this Privacy Policy) about how it is used. This is so you are aware and can check that we are using your information in accordance with data protection law.
• The right to rectification: You are entitled to have your personal information rectified if it is inaccurate or incomplete. You can request that we rectify any errors in the personal data that we hold.
• The right to erasure: This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
• The right to restrict processing: You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
• The right to data portability: You have rights to obtain and reuse your personal information for your own purposes across different services. E.g., if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
• The right to object to processing: You have the right to object to certain types of processing, including processing for direct marketing (i.e., if you no longer want to be contacted with potential opportunities).
• The right to withdraw consent: If you have given your consent to anything we do with your personal information, you have the right to withdraw your consent at any time (although if you do so, that does not mean that anything we have done with your personal information with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal information for marketing purposes.
• The right to lodge a complaint: You have the right to lodge a complaint about the way we handle or process your personal information with your national data protection regulator.

You can send a request to the address dataupskill23@gmail.com.

How do we protect your data?

We protect your personal data using appropriate technical and organizational measures, designed to provide a level of security appropriate to the risk of processing your personal data. We have implemented measures to protect your personal data from misuse, interference, loss, unauthorized access, modification, and disclosure. These measures include:

• Physical safeguards (such as locked doors and controlled access to offices and data storage facilities);
• Technical safeguards (such as encryption, firewalls, and secure servers);
• Organizational safeguards (such as training of staff and comprehensive security policies and procedures).

How can you contact us?

If you have any questions about this Privacy Policy, you can contact us by email: dataupskill23@gmail.com.

DataUpskill,Kisumu, Kenya.