Sends faxes, in Equatorial Guinea

Règlement CEMAC/UMAC/CM du 21 décembre 2018 relatif aux conditions d'exercice, de contrôle et de supervision de l'activité des bureaux d'information sur le crédit dans la CEMAC, articles 1, 3, 6, 58, 60 à 66 et 100 à 102 · Read the law's page

• Operate as a credit information bureau only as a licensed legal entity, and supply a client's credit information only for the reasons the Regulation lists.
• As a credit institution or other entity supervised by the banking commission or the central bank, send the licensed bureaus, at least monthly, all credit information on your clients; the clients' prior consent is not required for this.
• As a user of bureau information, obtain the client's prior written consent before consulting the information held on the client, for each credit application and for follow-up of the credit relationship, and keep proof of the consent.
• Guarantee persons whose credit information you hold a right of access and rectification, and tell them the categories of data, the purpose of the collection and the bureau's contact details.
• Do not use bureau information for commercial prospecting, marketing or advertising without the client's prior written consent.
• Do not collect, keep, process or disclose sensitive data in a credit report.

Ley Núm. 1/2016, arts. 13-14, 22, 24 (derechos de los interesados) · Read the law's page

• Before asking a person for personal data, tell them expressly and concisely the purpose and consequences of the collection, the destination and recipients of the data, whether answering is mandatory or optional, the effects of refusing, the existence of files or processing, and the identity and address of the controller or its representative (Article 9).
• On a data subject's request, provide free of charge, by consultation or in writing, a copy of the information on their personal data under processing, the origin of that data and the communications made or planned (Article 13(a), which states a period of twelve months).
• Give effect to a data subject's request to rectify or cancel inaccurate or incomplete personal data within fifteen days from the date of the request (Article 13(d)).
• Compensate a data subject for the damage or injury that you or your processor cause them (Article 13(e)).
• Resolve within five days of receipt a complaint or request to exclude a person's data from publicly accessible sources or advertising use, and do so free of charge (Article 22).
• Where you provide credit-information services, notify the data subject within fifteen days of the data entered about them in your files, and tell them they may obtain information on all of it (Article 24).
• Cancel and remove from processing, on the data subject's simple free request, the data of a person who objects to its processing in the services Article 24 covers (Article 24).