Sends commercial email, in Burkina Faso

Loi n°001-2021/AN, arts. 14, 16-17, 19-22 (droits de la personne concernée) · Read the law's page

• Obtain a person's prior consent before sending them unsolicited direct marketing communications of any kind, tell them before their data is first used for that purpose or disclosed to a third party, and let them withdraw consent at any time.
• Tell a data subject, no later than when you collect their data, your identity, the purposes of the processing, the categories of data, the recipients, the rights of access, rectification, erasure and objection, the retention period, any transfer abroad, and how to give or withdraw consent.
• Answer a data subject's access request by letting them consult their data on site or by giving them a copy after they prove their identity, and let a deceased adult's spouse, children or designated heir exercise that right on their behalf, or a minor's parent or legal representative exercise it for the minor, keeping the minor informed for medical data.
• Tell a data subject, on request, the information and reasoning behind a decision, automated or not, applied against them.
• Stop processing a person's data on their objection for legitimate reasons, unless you can show an overriding legitimate ground for the processing that outweighs their rights.
• Rectify, complete, update, lock or erase personal data at a data subject's written request within two months, notify any third party the data was disclosed to, and carry the burden of proof if you dispute the request.
• Remove, on request, personal data about a person's past private life that was collected and made public on a website, whether or not it is indexed by a search engine.