Data processing & security
Data Processing Terms
Responsibilities when GICT handles personal data for a business customer.
GICT Technologies Africa Ltd is based in Kampala, Uganda. This document should be read with the accepted order or signed agreement that applies to the service, where relevant.
Check the roles, services and providers in your accepted order and any signed data processing addendum.
Roles and instructions
When GICT processes personal data on a customer’s behalf, the customer defines the purpose and instructions and GICT acts within the agreed service scope. The parties should document those roles, data categories, processing activities and duration in a signed data processing addendum.
Safeguards and assistance
The applicable agreement should identify confidentiality, access controls, incident notification, assistance with data subject requests, deletion or return at the end of service, and any audit process. Technical details depend on the service and provider environment.
Other providers and transfers
Hosting, productivity, payment and domain services can involve third-party providers and processing in other countries. The relevant order or addendum should identify provider roles and the applicable transfer arrangements before production personal data is moved.
Request an addendum
Contact info@gictafrica.com before placing regulated or sensitive personal data into a new GICT-managed service. This page describes the topics to agree; it is not a signed addendum by itself.