PRIVACY POLICY

i. Name, address, and contact details (telephone number, email address).
ii. Race, national or ethnic origin, colour, religious or political beliefs or associations.
iii. Age, sex, sexual orientation, marital status, or family status.
iv. Identifying numbers, symbols, or other particulars assigned to you (e.g., national identification number).
v. Fingerprints, blood type, or inheritable characteristics.
vi. Information about your healthcare history, including physical or mental disabilities.
vii. Information about your educational, financial, criminal or employment history.
viii. Opinions expressed about you.
ix. Your personal views or opinions (unless about someone else).
x. Personal correspondence pertaining to your home and family life.
xi. Online identifiers, IP addresses, location data, and device information.

These bases may include:

i. Consent: Where you have freely given your explicit consent for a specific purpose.
ii. Contract: Where processing is necessary for the performance of a contract with you.
iii. Legal Obligation: Where processing is necessary for compliance with a legal obligation.
iv. Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests.
v. Public Interest: Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
vi. Vital Interests: Where processing is necessary to protect your vital interests or those of other people.

i. Right to be Informed: You have the right to be informed about the collection and use of your personal information.
ii. Right to Access: You have the right to request access to your personal
information that we hold.
iii. Right to Rectification: You have the right to request that we correct any
inaccurate or incomplete personal information we hold about you.
iv. Right to Erasure (Right to be Forgotten): You have the right to request the for
the deletion of your personal information under certain circumstances.
v. Right to Restriction of Processing: You have the right to request that we restrict
the processing of your personal information in certain situations.
vi. Right to Data Portability: You have the right to receive your personal information
in a structured, commonly used, and machine-readable format and to transmit
that data to another Controller without hindrance.
vii. Right to Object: You have the right to object to the processing of your personal
information in certain circumstances.
viii. Rights Related to Automated Decision-Making including Profiling: You have the
right not to be subject to a decision based solely on automated processing,
including profiling, which produces legal effects concerning you or similarly
significantly affects you, unless there is a lawful basis for such processing.

i. Access, correct, or delete your data unless where required by law.
ii. Restrict processing or object to marketing.
iii. Request data portability.
iv. Withdraw consent.

NB: You should submit your requests to PRAZ using the contact information in
section 11 below and we will respond within 30 days.

We have implemented appropriate technical and organizational measures to safeguard your personal information against unauthorized access, use, disclosure, alteration, or destruction.

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal and regulatory obligations. The retention period may vary depending on the type of personal information and the specific purposes.

If you have any questions, concerns, comments or requests regarding this Privacy Notice or our data protection practices, please contact our Data Protection Officer (DPO) as per the details below:

Mr. F. Ndhlovu

dpo@praz.org.zw

+263 712 621 528

If unsatisfied, you may lodge a complaint with POTRAZ the Data Protection Authority on the following link:

Procurement Regulatory Authority of Zimbabwe (PRAZ)

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated notice on our website, eGP System or through other appropriate communication channels. The “Effective Date” at the top of this notice indicates when it was last updated.