This policy explains how we may collect and process personal data about:
Depending on our relationship with you this policy may be supplemented with additional information, policies or guidelines relating to our use of your personal data, for example in our application forms, Terms and Conditions, and employment documentation including our staff manual (for job applicants and employees).
What personal information do we collect and why do we collect it?
We may collect and process personal information about you including information:
We may also collect information about you in other ways, for example:
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:
How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
The way we process your personal data we collect as set out above varies depending on our relationship with you. In each case the purposes for which we request the information will be clear from the context in which it is acquired. These include:
Disclosure of your personal data
We will only disclose your personal information to another person or organisation where we:
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Our legal basis for using your personal data
Our use of your personal data as outlined above is subject to different legal bases for processing, including where necessary for:
If you do not agree to provide your personal data to us we may not be able to provide you with our services or process your application for employment. Where our use of your data is not necessary for one of the purposes outlined above we may use it in a particular way with your consent. Where we ask for your consent you are free to refuse our use of your personal data for those purposes and you may withdraw your consent at any time by contacting us using the details set out below. This shall not affect the lawfulness of any processing that was based on your consent before you withdrew it.
To maintain customer service standards and to assist staff training, we may record and monitor incoming calls.
Storage and transfer of your personal data
The personal information that we collect from you may be transferred to, and stored at, a destination outside the Tanzania. It may also be processed by staff operating outside the Tanzania who work for us or one of our suppliers or in circumstances where you have requested us to provide a product or service with international considerations and/or parties related to your request are located overseas. Before we transfer your personal data outside the Tanzania we will take all steps reasonably necessary to ensure that any such transfer is made securely and that there is adequate protection in place in order to protect your personal data, as required by the Acts. Please contact us if you wish to obtain more information regarding relevant safeguards. By submitting your personal information you agree to this transfer, storing or processing outside the Tanzania.
Retention of your personal data
We will retain your personal information for a minimum of six years and so long as is reasonably necessary for the purpose for which it was obtained and in accordance with our legal obligations and follow our data destruction policy and processes thereafter. Your personal data may be retained by use for more than six years for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Links to other websites
This policy only extends to our website, which is owned and operated by Expedition Africa Ltd, the Company and does not, therefore, extend to your use of, provision of information to and collection of information on any website not connected to Expedition Africa Ltd to which you may link by using the hypertext links within our website.
Your personal information is protected under data protection law and you have a number of rights (see below) which you can seek to exercise. Please contact us in writing, by email or telephone using the details shown under ‘Contact’ below if you wish to do so, or if you have any queries in relation to your rights. Please note these rights do not apply in all circumstances.
Right of access – subject to certain exceptions, you have the right of access to your personal data that we hold (commonly known as a “data subject access request”).
Right to rectify your personal information – if you discover that the information we hold about you is inaccurate or incomplete, you have the right to have this information rectified (i.e. corrected).
Right to be forgotten – you may ask us to delete information we hold about you in certain circumstances. This right is not absolute and it may not be possible for us to delete the information we hold about you, for example, if we have an ongoing contractual relationship or are required to retain information to comply with our legal obligations.
Right to restriction of processing – in some cases you may have the right to have the processing of your personal information restricted. For example, where you contest the accuracy of your personal information, its use may be restricted until the accuracy is verified.
Right to object to processing – you may object to the processing of your personal information (including profiling) when it is based upon our legitimate interests. You may also object to the processing of your personal information for the purposes of direct marketing and for the purposes of statistical analysis. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Right to data portability – you have the right to receive, move, copy or transfer your personal information to another controller when we are processing your personal information based on consent or on a contract and the processing is carried out by automated means.
Right to withdraw consent – you have the right to withdraw your consent where we are relying on consent to process your personal data. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration and to collect aggregate information for us to use. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual.
What are cookies and why do we use them?
Cookies are small text files that are created and stored on your browser or the hard drive of your computer by websites that you visit to enable the website to operate properly to ‘remember’ who you are and to monitor website traffic. Cookies are generally only visible to the website that serves them and not to other websites.
Cookies are used on our website to ‘remember’ information so that it can be passed from page to page and to collect website statistics. This statistical data collected may be used to help improve our website and the services that we offer to you. Some of our cookies will also recognise you as a previous visitor the next time you visit our website to improve your experience.
How to manage cookies
Most internet browsers accept cookies automatically however, you can accept, delete or disable cookies if you wish; the process for which can usually be found in your internet browser’s ‘Help’ menu.
Expedition Africa Ltd takes great care to ensure the security of our website and your personal information. Only authorised personnel and contractors have access to your information. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We will keep your information secure by taking appropriate technical and organisational measures against unauthorised or unlawful processing, accidental loss, destruction and damage.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information we cannot guarantee the security of your personal information transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
Changes to this Policy
We may change this policy at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we have made, as they are binding on you. If we make any substantial changes in the way we use your personal information we will notify you by posting a prominent notice on our website.
If you have any questions about how we treat your personal data and protect your privacy, or if you have any comments or wish to seek to exercise any of your rights as outlined above, to opt-out of receiving marketing communications from us or to complain about our use of your personal data, please contact us.
All rights reserved. Design and content © Expedition Africa Ltd.
Last updated: 14 August 2019