Privacy

Information on data processing in accordance with Article 13 of the EU General Data Protection Regulation (GDPR) (‘data privacy statement’)

In Rwanda, the cluster “Sustainable Economic Development” includes the Special Initiative “Decent Work for a Just Transition”, which operates under the brand name “Invest for Jobs” and is financed by the Federal Ministry of Economic Cooperation and Development (BMZ). The recently commissioned component on strengthening the pharmaceutical and biotechnological sector is part of the Special Initiative.

The Special Initiative is organising the East Africa Pharma and Biotech Conference on 17 – 18 September in Kigali. The aim of the conference is to strengthen the network among experts from industry, politics, academia, civil society and development cooperation, create a peer-group and leverage experiences for the continuous development of the pharma and biotech sector in the region.

GIZ takes the protection of personal data very seriously. This document provides information about how your personal data are processed.

1. Contact data of the data controller

The data controller for processing purposes is the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH.

Address:
Friedrich-Ebert-Allee 32 + 36, 53113 Bonn, Germany
Dag-Hammarskjöld-Weg 1 – 5, 65760 Eschborn, Germany
Contact: by email Hannah.budde@giz.de

Data processor: Rwanda Events Group

• Registration of participants for the conference (this includes the name of the person, e-mail address, organisation)
• Booking of hotel accommodation for participant’s stay in Kigali (this includes the name of the person, arrival and departure dates, contact details)

2. Collecting your data

We process your personal data as follows:

• Given name and family name
• Date and country of birth
• Passport number
• Passport expiry dates
• Nationality
• Contact address
• E-Mail address
• Arrival and departure dates

3. Purpose of data processing and legal basis 

Purposes covered by your consent (Article 6(1)(a) GDPR)

For specific purposes, your personal data can also be processed on the basis of your consent. You may withdraw this consent at any time.

Withdrawal of consent is generally only applicable to the future use and processing of data. It does not affect any processing carried out prior to the withdrawal of consent, which remains lawful.

Provided you have given your consent, we process the following personal data given name, family name, date and country of birth, passport number, passport expiry dates, nationality, contact address and email for the following purposes:

• For the conference registration
• For the booking of flights from the country of origin to Kigali/Rwanda
• For the reservation and booking of accommodation in Kigali/Rwanda
• For the invitation letters needed to enter the country/receive the visa

4. Disclosure to third parties

The data are not passed on to third parties unless GIZ is legally obliged or entitled to do so.

5. Transfer of data to a third country

Data are transmitted to third countries for the purpose of Registration of participants for the conference (this includes the name of the person, e-mail address, organisation) and Booking of hotel accommodation for participant’s stay in Kigali (this includes the name of the person, arrival and departure dates, contact details) by the service provider Rwanda Events Group. When transmitting data to third countries, suitable safeguards are applied to ensure an adequate level of data protection (Article 44 et seq GDPR).

6. Retention and erasure of your data

Your personal data will be erased after completion of the conference and all booking/payment processes. This will be latest by 31.03.2025.

7. Technical and organisational measures to protect your data

GIZ uses appropriate technical and organisational measures to protect data against unintended or deliberate falsification, destruction, loss or access by unauthorised persons. These measures are updated accordingly based on technical developments and adapted continuously in line with the given risks.

8. Your rights

In accordance with the General Data Protection Regulation, you have the right

• to obtain information about your data stored by us (Article 15 GDPR)
• to have your data stored by us rectified (Article 16 GDPR)
• to have your data stored by us erased (Article 17 GDPR)
• to obtain restriction of processing of your data stored by us (Article 18 GDPR)
• to object to the storage of your data if they are processed on the basis of Article 6(1)(1)(f) and (e), GDPR (Article 21 GDPR)
• to receive data that concern you in a commonly used and machine-readable format from the controller such that they can be potentially transmitted to another controller (right to data portability, Article 20 GDPR).
• to withdraw your consent to the extent that the data have been processed on the basis of consent (Article 6(1)(a) GDPR). The lawfulness of processing on the basis of consent given remains unaffected until receipt of the withdrawal.

In accordance with Article 15 GDPR, you can also contact GIZ’s Data Protection Officer at datenschutzbeauftragte@giz.de. 

You also have the right in accordance with Article 77 GDPR to lodge a complaint with the competent data protection supervisory authority. The competent authority for GIZ is the Federal Commissioner for Data Protection and Freedom of Information (BfDI). 

Declaration of consent to the processing of personal data by GIZ

Right to revocation

You are entitled to revoke this consent for future data use at any time without giving reasons. Simply email us at hannah.budde@giz.de. Withdrawal of consent does not affect the lawfulness of any processing conducted on the basis of the consent up to the point of withdrawal.

Consequences of non-acceptance

You are not obliged to accept this declaration of consent. However, since subsequent activities depend on the collection and processing of the data categories stated in the declaration, non-acceptance would preclude any use of these services/activities.