This policy is current as of the effective date set forth above. The company may, in its sole and absolute discretion and taking into account any change in the DPA or any other written law, change this Policy at any time. Where Ticketyetu makes changes to the Policy, Ticketyetu shall notify our customers of the changes through electronic mail or such other means of communication which may be available to Ticketyetu. All changes to this Policy will be posted on the website.
“Consent” means any manifestation of express, unequivocal, free, specific and informed indication of the data subject's wishes by a statement or by a clear affirmative action, signifying agreement to the processing of personal data relating to the data subject;
“Data” means any proprietary and confidential information or Personal Data of the parties and those of their customers and clients, whether commercial, financial, technical or otherwise (whether oral, written, machine readable or in any other form) and material (whether electronically recorded, written or otherwise);
“Data Commissioner” the Commissioner is to oversee the implementation of and be responsible for the enforcement of the Act. The Commissioner will exercise oversight on data processing operations, either of own motion or at the request of a data subject, and verify whether the processing of data is done in accordance with the DPA;
“Data Controller” determines the purpose and means of processing of personal data;
“Data Processor” Processes personal data on behalf of the data controller;
“Data Subject” means an identified or identifiable natural person who is the subject of personal data;
“DPA” means the Data Protection Act, 2019 (No. 24 of 2019);
“Personal Data” shall mean any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. For the avoidance of doubt, Personal Data has the meaning as set forth in the applicable Data Protection Laws (and any regulations issued there under) that is processed by the Company under these policy;
“Processing” any operation, or set of operations, which is performed on Personal Data, or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; the meaning of Process or Processing will include: collecting, recording, storing, retrieving, consulting, use, erase and altering of data;
“Sensitive Personal Data” means data revealing the natural person's race, health status, ethnic social origin, conscience, belief, genetic data, biometric data, property details, marital status, family details including names of the person's children, parents, spouse or spouses, sex or the sexual orientation of the data subject
I. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
TicketYetu is the controller for the processing of your personal data. TicketYetu is a product of Radio Africa Group which is a limited liability company incorporated under the Companies Act (Cap. 486) Laws of Kenya , whose registered office is located at Lion Place, Westlands Area, Nairobi, Kenya.
II. WHAT DATA DO WE PROCESS?
We process data that directly identifies the ticket user. This data is information such as; name, address, telephone number, etc.. This information is collected upon the ticket user providing us with their personal data as defined above through filling the contact form on our website, by subscribing to our newsletter and/or when you (the ticket user) contacts us directly by e-mail or telephone.
We also process certain data through cookies or other technologies on our website, such as the type of browser you use, the operating system you use, your IP address, the number of page views, whether you are a unique visitor, etc.
We also process certain non-directly identifying data through cookies when you visit our website, such as your browser type.
III. Principles of Data Protection
1.1 We adhere to the principles relating to Processing of Personal Data set out in the DPA which require Personal Data:
a) to be Processed in accordance with your right to privacy;
b) to be Processed lawfully, fairly and in a transparent manner in relation to you;
c) to be collected for explicit, specified and legitimate purposes and not further Processed in a manner
Incompatible with those purposes;
d) to be adequate, relevant, limited to what is necessary in relation to the purposes for which it is processed;
e) to be collected only where a valid explanation is provided whenever information relating to your family or private affairs is required;
f) to be accurate and, where necessary, kept up to date, with every reasonable step being;
g) taken to ensure that any inaccurate Personal Data is erased or rectified without delay;
h) to be kept in a form which identifies the Data Subjects for no longer than is necessary for the purposes which it was collected; and
i) not to be transferred outside Kenya, unless there is proof of adequate Data protection safeguards or consent from you.
III. WHY DO WE PROCESS YOUR DATA?
A. To keep you informed of our services and activities and for direct marketing purposes
We process your personal data when you wish to be kept informed of our activities by subscribing to our newsletter. We also use this information to inform you about topics/ content that might be of interest to you and for purposes of processing tickets.
To this end, we can process data such as your title, name, sex, age, your job, your company name, your e-mail address and your preferred language.
We process this information based on your consent or based on the legitimate interest of TicketYetu to keep its clientele informed of its activities and services. You are free to choose to provide us with your personal data for this purpose, and you may withdraw your consent at any time.
B. To answer your questions
If you ask us a question by telephone, via the contact form on the website or by e-mail, we will process your personal data in order to answer that question.
For this, we can process data such as your name, your contact information, your correspondence with TicketYetu, and any other personal data you provide that may be relevant to answering your question.
The processing of these data is based on the legitimate interest of TicketYetu in order to be able to answer the questions that are posed to us.
C. For the technical and functional management of our website, to keep statistics and to store your search preferences
We process personal data obtained through cookies for the technical and functional management of our website, to make our website easy to use, to collect statistics (e.g. to measure the number of visitors to the website and to measure the most visited pages) and to save your search preferences. By using your data, we can check how our website is used and we can improve its content and layout. These data also allows us to adequately secure our website.
For this purpose, we can process data such as your IP address, the pages you visit, the browser you are using, your language preference and the time and duration of your visit.
The processing of these data is based on your consent or on the legitimate interest of TicketYetu in providing a well-functioning and secure website and in providing pages with content is relevant to you.
IV. WHO HAS ACCESS TO YOUR PERSONAL DATA?
TicketYetu engages third parties to perform certain (processing) activities such as organising mailing/sms/ events campaigns. TicketYetu concludes a data processing agreement with the parties that have access to personal data for the performance of their services.
V. HOW DO WE PROTECT YOUR PERSONAL DATA AND HOW LONG DO WE KEEP YOUR PERSONAL DATA?
TicketYetu takes appropriate organisational and technical measures, taking into account the nature of processing data and the potential risks to protect your personal data in the best way possible from destruction, loss, modification or any other unauthorised processing.
TicketYetu does not store your personal data longer than necessary for the purposes for which they are processed, taking into account the legal retention obligations.
For example, your personal data processed for the purpose of keeping you informed of our services and activities and for direct marketing purposes will only be stored until you no longer wish to receive our newsletter/text and email updates (and thus withdraw your consent). The data we process to answer your questions will be stored until this contact has been ended.
Contact information such as your email address or phone number collected online on our sites or offline from our interactions with you at ticketyetu and Radio Africa events and used for direct marketing and sales activities will be retained for as long as we have an active (customer) relationship with you. We treat you as an active contact if (i) you have interacted with ticketyetu or updated your contact details and preferences in the past 18 months; and (ii) you have not made a deletion request.
If you have reached out to us via ticketyetu email address or chat, we will delete all email and chat transcripts 90 days after the chat has concluded.
If you have reached out to us via our support line and you have not opted out of call recording, we will delete call recordings 60 days after the call has concluded unless otherwise specified during the call.
Personal information needed to retain your opt-out preferences is retained for seven (7) years (or longer as necessary to comply with applicable law).
VI. DO WE TRANSFER YOU PERSONAL DATA OUTSIDE THE COUNTRY?
TicketYetu does not process your personal data outside the East African Region.
In the event that an event is being held outside the Country and your information needs to be processed for purposes of issuing the tickets, TicketYetu is very committed to ensuring an adequate and sufficient level of protection for your data.
VII. SOCIAL MEDIA PAGES OF TICKETYETU
By use of the TicketYetu website and purchase of tickets through the platform, the TicketYetu user hereby explicitly and unambiguously consents to the collection, use and transfer, in electronic or other form, of their personal data as described in this document by and among, as applicable, the Radio Africa Group and its subsidiaries, branches and/or networks for the exclusive purpose of implementing, administering and managing his/her rights of the use website and/or purchase of tickets via the TicketYetu platform.
By entering an event or program organized by Radio Africa Group, ticketyetu and its affiliates, you are entering an area where photography, audio and video recording may occur. Your entry and presence on the event premises constitutes your consent to be photographed, filmed, and/or otherwise recorded and to the release, publication, exhibition, or reproduction of any and all recorded media of your appearance, voice, and name for any purpose whatsoever in perpetuity in connection with Radio Africa Group and its initiatives, including, by way of example only, use on websites, its social media platforms, newspaper and advertising.
By entering the event premises, you waive and release any claims you may have related to the use of recorded media of you at the event, including, without limitation, any right to inspect or approve the photo, video or audio recording of you, any claims for invasion of privacy, violation of the right of publicity, defamation, and copyright infringement or for any fees for use of such record media.