PURPOSE
The purpose of this policy is to help you understand what personal data we collect, why we collect them and what we do with them. It will also help you to identify what rights you have as data subject and who to contact for more information, to exercise your rights or to make a complaint.
DATA PROTECTION OFFICER
It is part of our obligation as data controller under the Nigeria Data Protection Regulation (NDPR) to designate a Data Protection Officer (DPO) who will be responsible for data protection compliance issues. Contact our DPO if you have any questions or concerns about our personal data policies or practices. If you would like to exercise your privacy rights, please direct your query to our Data protection officer. Our data protection officer’s name and contact information are as follows:
Name: Oluwaseun Oyetoyan
Address: 18, Akanbi Danmola Street, South-West Ikoyi Lagos
Email address: ooyetoyan@abax-oosa.com
Phone number: 08023462388
THE TYPE OF PERSONAL INFORMATION WE COLLECT
We currently collect and process the following information:
• Personal identifiers, contacts and characteristics (for example, name and contact details)
• Email addresses, customer financial information, employee data or website user status
• Nationality, previous employers’ information
• Next of Kin, relationship with next of kin
• Means of identification: Passport photograph, BVN, International passport
• Signatures
HOW WE GET THE PERSONAL INFORMATION AND WHY WE HAVE IT
Most of the personal information we process is provided to us directly by you for one of the following reasons:
• Maintaining employee record
• Recruitment
• Rendering of professional services
We also receive personal information indirectly, from the following data processors: Consultants
We use the information that you have given us to:
• Maintaining employee record
• Recruitment
• Rendering of professional services
We may share this information with consultants/clients
Under the Nigerian Data Protection Regulation (NDPR), the lawful bases we rely on for processing your information are:
(a) Your consent. You are able to remove your consent at any time. You can do this by contacting our Data Protection Officer
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital interest.
(e) We need it to perform a public task.
(f) We have a legitimate interest.
How we store your Personal Information
Your information is securely stored on our server and protected with a firewall
We keep personal information for as long as is reasonably necessary to provide services to you We will then dispose your information by deleting permanently from our website
DATA SECURITY AND RETENTION
The security of your Personal Information is important to Abax-OOSA Professionals Chartered Accountants. Your information are securely stored on our servers with firewall, data encryption and granting access only to employees in order to fulfil their job responsibilities. We maintain administrative, technical and physical controls designed to protect the Personal Information you provide, or we collect against loss or theft, as well as against any unauthorized access, risk of loss, disclosure, copying, misuse or modification.
We retain personal information on our servers for as long as is reasonably necessary as long as we are providing Services to you.
DATA SUBJECT RIGHTS
Under the NDPR, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
QUESTIONS, CONCERNS OR COMPLAINTS
If you have questions, concerns, complaints, or would like to exercise your rights, please contact our data protection officer through ooyetoyan@abax-oosa.com. We will provide a response to your request within one month from the date of submission of the request.
You can also complain to the Regulator if you are unhappy with how we have used your data.
NDPB’s address: No. 5 Donau Crescent, Off Amazon Street,
Maitama, Abuja, Nigeria. Email: info@ndpb.gov.ng Tel: +234 (0) 916 061 5551 NDPB website: https://ndpb.gov.ng
