Sends automated outreach, in Burundi

Loi n°1/03 du 10 mars 2026, articles 17-18 and 21-33 (droits des personnes concernées) · Read the law's page

• Give a person, at the time you collect personal data directly from them, your identity, the purposes, the recipients, the retention period, their rights, whether the answers are compulsory or optional, and any processing of the data with artificial intelligence for automated decision-making; where you did not collect the data from them, give the same information and the source within one month.
• Obtain the person's consent after informing them before you process their data further for a purpose other than the one for which it was collected.
• Stop using a person's data for prospecting, including commercial, charitable or political prospecting, when they object, without charge and without requiring a reason, and respect a person's objection to processing for legitimate reasons unless you show compelling legitimate grounds.
• Confirm to a person on request whether you process their data and give them access and a free copy, and tell each recipient of any erasure or rectification unless that is impossible or involves disproportionate effort.
• Erase personal data without delay where it is no longer needed, consent is withdrawn and was the only basis, or the processing was unlawful, and rectify inaccurate data without delay.
• Give a person their data in a structured, commonly used, machine-readable format and, where technically possible, transmit it directly to another controller within fifteen calendar days of the request.
• Answer requests for access, rectification, objection and erasure without delay and at the latest one month from receipt, and where you cannot meet that deadline warn the person and notify the data protection body.