Code for Africa (hereafter referred to as ‘CfA’) is a public benefit non-profit organisation that uses open (public) data and civic technologies to support digital democracy initiatives across the continent. CfA is headquartered in South Africa (where it is registered as a tax exempt non-government organisation with registration number 168-092-NPO), operating from offices at 112 Loop Street, Cape Town, 8000. CfA is also separately registered as a public benefit non-profit in Kenya (number CPR/2016/220101) and Nigeria (number RC 1503312). CfA incubates a range of initiatives, including the africanDRONE network of civic drone operators, the African Network of Centres for Investigative Reporting (ANCIR), the PesaCheck network of fact-checking mis-/disinformation researchers, and the sensors.AFRICA network of citizen science and remote sensing activists. It also supports a range of other third party initiatives, through its innovateAFRICA.fund. This privacy policy will explain how our organisation uses the personal data we collect from you when you use our websites.

1. Topics covered in this policy:

• Definitions for terms/organisations mentioned in this policy
• Principles for processing personal data
• What data do we collect?
• How do we collect your data?
• How will we use your data?
• Legal basis for collecting and processing personal data
• Retention of your personal data
• Marketing
• What are your data protection rights?
• What are cookies?
• How do we use cookies?
• What types of cookies do we use?
• How to manage your cookies
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us

2. Definitions for terms/organisations mentioned in this policy

GDPA: General Data Protection Regulation Act.

Data Controller: Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.

3. Principles for processing personal data

Our principles for processing personal data are:

• Fairness and lawfulness. When we process personal data, the individual rights of the Data Subjects must be protected. All personal data must be collected and processed in a legal and fair manner.