Data Protection Act, 2019
Privacy notice
Draft wording, pending review by the organisers. It will name the data controller and the secretariat's contact details before registration opens.
Who is responsible
The organising secretariat of each event on this site is responsible for the personal data you give when you register for that event (the “data controller”). The event's page lists the secretariat's contact details.
What we collect
- Your name, organisation and job title.
- Your email address and phone number.
- Your county (or that you are outside Kenya) and how you are attending — for example government, private sector or student.
- Which days you will attend and, if you choose to tell us, which sessions interest you.
- For exhibitors: what you will showcase and your preferred zone.
- For Digital Innovation Awards entries: the innovation's name, category, stage and description, evidence that it works, why you want to exhibit, and optionally its website, a demonstration link and your organisation's logo. If it is shortlisted, its name, category and logo appear in the public innovation directory.
- Payment references you give us, and when you checked in at the event.
Why we use it
To register you, review exhibition applications and innovation awards entries, run the awards, confirm payment, issue your ticket, check you in at the gate, and send you event information such as your confirmation, reminders and changes to the programme. We also count attendance in aggregate (for example, delegates per county) to report on the event. We do not sell your data or use it for unrelated marketing.
The basis for using it
Your consent, which you give with the checkbox on the registration form, and what is needed to provide the registration you asked for. You can withdraw consent at any time; we will then stop using your details, except where we must keep a record (for example, of a payment).
Who sees it
Only the event's secretariat staff who need it for their role: registration officers, the event managers and, at the gate, check-in staff — who see only your name and organisation. Speakers' names and the secretariat's own contacts are public on the event site; registrants' details never are.
How long we keep it
Until six months after the event, then we anonymise it — we keep only counts, not people. Payment records may be kept longer where the law requires.
Keeping it safe
Details are stored on servers in our control and sent only over encrypted connections. Only signed-in staff can reach them, and every change staff make is recorded in an activity log.
Your rights
Under the Data Protection Act, 2019 you may ask to see the data we hold about you, to correct it, to have it deleted, or to object to how it is used. Write to the event's secretariat. If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner (ODPC).