Sends automated outreach, in Guinea

Loi n° L/2016/037/AN, arts. 30-38 et 40 (droits de la personne concernée) · Read the law's page

• At the latest when you collect personal data, tell the data subject your identity, the purposes, the categories of data, the recipients, the possibility of refusing to appear in the file, the existence of the rights of access and rectification, the retention period, and any possible transfer to a third country (Article 30).
• On a data subject's request, confirm whether their data is processed, communicate it with any available information on its origin, and give the purposes, categories of data and recipients (Article 31).
• Honor a data subject's objection, on legitimate grounds, to the processing of their data, and their free objection to use of their data for direct marketing (Article 32).
• Before personal data is first communicated to third parties, or used on their behalf, for direct marketing, inform the data subject and give them the express right to object free of charge (Article 32).
• On the request of a person who proves their identity, rectify, complete, update, block or delete personal data that is inaccurate, incomplete, equivocal or outdated, or whose collection, use, communication or retention is prohibited (Article 33).
• Erase a data subject's data on the grounds Article 35 lists, and do so without delay, unless an exception in Article 37 applies (Articles 35 and 37).
• Where personal data is processed automatically in a structured, commonly used format, give the data subject on request a copy of it in a structured, commonly used electronic format (Article 40).
• Do not carry out direct marketing, by any means of communication, with the personal data of a person who has not given prior written consent to receive it or who has formally objected (Article 54, the paragraph on direct marketing).