Privacy Policy
Last Updated on: 22th August, 2024.
This Privacy Policy (“Policy”) outlines how GeoTek Solutions LTD (“we,” “us,” or “our”) collects, uses, discloses, and protects personal data in accordance with the provisions of The Nigeria Data Protection Act 2023 (“Act”). This Policy describes the type of data we may collect from you (“you”, “user”, “your”) on the geotek.com.ng or geotek.com (“Website”) and the GeoTek App (“App”). Please read this Policy carefully to understand our practices regarding your personal data and how we will treat it.
More Definitions
- 1.1. “Personal data” refers to any information relating to an identified or identifiable natural person (“data subject”) as defined in the Act.
- 1.2. “Data controller” refers to GeoTek Solutions LTD, the entity that determines the purposes and means of processing personal data.
- 1.3. “Data processor” refers to any entity that processes personal data on behalf of GeoTek Solutions LTD.
- 1.4. “Processing” refers to any operation or set of operations performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
Principles of Personal Data Processing
- 2.1. We are committed to processing personal data in accordance with the principles set forth in the Act. Personal data will be:
- 2.1.1. Processed in a fair, lawful, and transparent manner.
- 2.1.2. Collected for specified, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes.
- 2.1.3. Adequate, relevant, and limited to what is necessary for the purposes for which it was collected.
- 2.1.4. Retained for no longer than necessary to achieve the lawful bases for which it was collected.
- 2.1.5. Accurate, complete, and kept up to date as necessary.
- 2.1.6. Processed in a manner that ensures appropriate security and protection against unauthorized or unlawful processing, access, loss, destruction, damage, or any form of data breach.
- 2.1. We are committed to processing personal data in accordance with the principles set forth in the Act. Personal data will be:
Lawful Basis for Personal Data Processing:
- 3.1. We will process personal data only when we have a lawful basis for doing so, as defined in the Act. The lawful bases for processing personal data include:
- 3.1.1. Consent: When the data subject has given and not withdrawn consent for the specific purpose or purposes of the processing.
- 3.1.2. Contractual necessity: When processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the data subject’s request prior to entering into a contract.
- 3.1.3. Legal obligation: When processing is necessary for compliance with a legal obligation to which GeoTek Solutions LTD is subject.
- 3.1.4. Vital interests: When processing is necessary to protect the vital interests of the data subject or another person.
- 3.1.5. Public interest: When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in GeoTek Solutions LTD or a third party to whom the data is disclosed.
- 3.1.6. Legitimate interests: When processing is necessary for GeoTek Solutions LTD’s legitimate interests or the legitimate interests of a third party, except where such interests are overridden by the rights and freedoms of the data subject.
- 3.1. We will process personal data only when we have a lawful basis for doing so, as defined in the Act. The lawful bases for processing personal data include:
Data Subject Rights
- 4.1. We respect and uphold the rights of data subjects as provided by the Act. These rights include:
- 4.1.1. Right to information: The right to be informed about the processing of personal data, including the purposes, recipients, retention periods, and rights of the data subject.
- 4.1.2. Right of access: The right to obtain confirmation of whether GeoTek Solutions LTD processes personal data and, if so, access to that data and related information.
- 4.1.3. Right to rectification: The right to request the correction of inaccurate or incomplete personal data.
- 4.1.4. Right to erasure: The right to request the erasure of personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or if the data subject withdraws consent.
- 4.1.5. Right to restriction of processing: The right to request the restriction of processing under certain circumstances, such as when the accuracy of the personal data is contested or when the processing is unlawful.
- 4.1.6. Right to data portability: The right to receive personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller, where technically feasible.
- 4.1.7. Right to object: The right to object to the processing of personal data based on legitimate interests or for direct marketing purposes.
- 4.1.8. Right not to be subject to automated decision-making: The right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects the data subject.
- 4.1. We respect and uphold the rights of data subjects as provided by the Act. These rights include:
Data Security
- 5.1. We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data, protecting it against unauthorized or unlawful processing, access, loss, destruction, damage, or any form of data breach. This may include information about your device, location, Internet usage, and how you interact with the Website and App.
Sharing and Disclosure of Personal Data
- 6.1. We may share personal data with third parties only in accordance with the Act, such as:
- 6.1.1. Service providers and business partners: Subject to appropriate data processing agreements.
- 6.1.2. Legal requirements: If required to do so by law, regulation, legal process, or governmental request.
- 6.1.3. Business transfers: In the event of a merger, acquisition, or transfer of our assets, personal data may be transferred to the acquiring entity.
- 6.1. We may share personal data with third parties only in accordance with the Act, such as:
International Data Transfers
- 7.1. If we transfer personal data to a country outside the jurisdiction of the Act, we will ensure that appropriate safeguards are in place to protect the personal data.
Children’s Privacy
- 8.1. Our services are not directed at individuals under the age of 18. We do not knowingly collect or process personal data from children without the consent of their parents or legal guardians.
Data Retention
- 9.1. We will retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Google API Compliance
- 10.1. GeoTek Solutions LTD complies with the Google API Service: User Data Policy regarding the access, use, storage, and sharing of Google user data.
- Changes to this Privacy Policy
- 11.1. We may update this Privacy Policy occasionally to reflect changes in our practices or legal obligations.
- Contact Us
- 12.1. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at info@geotek.com.
- Governing Law
- 13.1. This Privacy Policy shall be governed by and construed in accordance with the laws of Nigeria. Any disputes arising out of or relating to this Policy shall be resolved in the courts of Nigeria.
Please review this Privacy Policy periodically for any updates or changes. By continuing to use our Website and/or App, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.