Overview
The Rwanda Biomedical Centre as the implementing agency for the Ministry of Health of Government of Rwanda is responsible for the RBC-C19 App which assists the end users to access his/her COVID-19 status related to test results and vaccination
The world digitalization has been one of the solutions helping to fight with the pandemic in real time, especially having trustful information and the COVID-19 check status App is a fundamental element of a public health response to disease outbreak and back to business. It is the process of self-identification which will help to know who is eligible to certain services according to rules and regulations in place of cause in that case the individual will have to present his/her status via the RBC-C19 app and furthermore to help stop the further spread of COVID-19.
This privacy policy sets out how personal information that is collected via RBC-C19 will be handled in accordance with the rules and regulations of Rwanda in order to provide stronger privacy protections for users of the RBC-C19 App and information collected through the App.
RBC-C19 mobile application (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by RBC-C19 mobile application.
This Privacy Policy applies to our RBC-C19 application, and its associated services (collectively, our “Service”). By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.
The Application is FREE and is intended for use as stated above. Internet connectivity is required to utilize the Application and its related services; therefore the required internet connectivity costs as per the Internet Service Provider (ISP) of the Application users shall be applicable.
Definitions and key terms
To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, are strictly defined as:
Personal Data
Demographic and other personally identifiable information (such as your name, Passport/ID Number, Phone Number and email address) that you voluntarily give to us when choosing to participate in various activities related to the online forms that request COVID-19 test/vaccine appointments, or attending events in Rwanda, such as:
Mobile Device Access
To operate optimally, the Application shall require access or permission to certain features from your mobile device, CAMERA to read the QR codes, phone dial to call helplines, and other related features. If you wish to change our access or permissions, you may do so in your device’s settings.
Data from Social Networks.
The CAMERA access only is used to scan the QR code of your COVID-19 test/vaccination status and it is never used to take pictures or video recordings and no data related to the use of the CAMERA is stored on our servers.
Data from Social Networks
User information from social networking sites, such as [WhatsApp, Apple’s Game Center, Facebook, Google+ Instagram, Pinterest, Twitter], including your name, your social network username, location, gender, birth date, email address, profile picture, and public data for contacts, shall not be permissible and usable in the Application. The Application shall not have any interfaces or related facilities to enable connection of your account to such social networks.
Mobile Device Data
Device information such as your mobile device ID number, model, and manufacturer, version of your operating system, phone number, country, location shall not be required in the use and operations of the Application and its derivatives.
Push Notifications
There shall be no Push Notifications done through the Application. Push Notifications includes notifications regarding your account or the Application, for example when there is an Application upgrade performed.
Third-Party Data
Information from third parties, such as personal information or network friends shall not be permissible or usable. There shall be no facility to enable you to connect your account to the third party and grant the Application permission to access this information.
Data from Contests, Giveaways, and Surveys
Personal and other information you may provide when entering contests or giveaways and/or responding to surveys through your phone and other applications shall not be permissible or usable in the Application.
How Do We Use The Information We Collect?
Any of the information we collect from you may be used in one of the following ways:
When does RBC-C19 App use end user information from third parties?
RBC-C19 will collect End User Data necessary to provide COVID-19 status via the RBC-C19 back to End user for personal and public needs.
We may also disclose personal and non-personal information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate in order to respond to claims, legal process (including subpoenas), to protect our rights and interests or those of a third party, the safety of the public or any person, to prevent or stop any illegal, unethical, or legally actionable activity, or to otherwise comply with applicable court orders, laws, rules and regulations.
Where and when is information collected from end users?
RBC-C19 will collect personal requested information that you submit to us.
How Long Do We Keep Your Information?
The information collect it’s for personal usage for COVID-19 individual status and we keep your information only so long as we need it to provide RBC-C19 App to you and fulfill the purposes described in this policy. This is also the case for the Health workers or public servant that we share your information with and who carries out services on our behalf inline of fighting the spread of COVID-19. When we no longer need to use your information and there is no need for us to keep it to comply with our legal or regulatory obligations, we’ll either remove it from our systems or depersonalize it so that we can't identify you.
How Do We Protect Your Information?
We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server and we are required to keep the information confidential. We cannot, however, ensure or warrant the absolute security of any information you transmit to RBC-C19 or guarantee that your information on the Service may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.
Is the information collected through the RBC-C19 Service secure?
We take precautions to protect the security of your information. We have physical, electronic, and managerial procedures to help safeguard, prevent unauthorized access, maintain data security, and correctly use your information. However, neither people nor security systems are foolproof, including encryption systems. In addition, people can commit intentional crimes, make mistakes or fail to follow policies. Therefore, while we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security. If applicable law imposes any non-disclaimable duty to protect your personal information, you agree that intentional misconduct will be the standards used to measure our compliance with that duty.
Can I update or correct my information?
The rights you have to request updates or corrections to the information RBC-C19 collects depend on your relationship with RBC-C19. Personnel may update or correct their information as detailed in our internal Institution employment policies.
You should be aware that it is not technologically possible to remove each and every record of the information you have provided to us from our system. The need to back up our systems to protect information from inadvertent loss means that a copy of your information may exist in a non-erasable form that will be difficult or impossible for us to locate. Promptly after receiving your request, all personal information stored in databases we actively use, and other readily searchable media will be updated, corrected, changed or deleted, as appropriate, as soon as and to the extent reasonably and technically practicable.
If you are an end user and wish to update, delete, or receive any information we have about you, you may do so by contacting us.
Personnel
If you are a RBC-C19 user or applicant, we collect information you voluntarily provide to us.
You may contact us in order to (1) update or correct your information, (2) change your preferences with respect to communications and other information you receive from us, or (3) receive a record of the information we have relating to you. Such updates, corrections, changes and deletions will have no effect on other information that we maintain, in accordance with this Privacy Policy prior to such update, correction, change or deletion.
Affiliates
We may disclose information (including personal information) about you to our Corporate Affiliates. For purposes of this Privacy Policy, "Corporate Affiliate" means any person or entity which directly or indirectly controls, is controlled by or is under common control with RBC, whether by ownership or otherwise. Any information relating to you that we provide to our Corporate Affiliates will be treated by those Corporate Affiliates in accordance with the terms of this Privacy Policy.
Governing Law
This Privacy Policy is governed by the laws of Rwanda without regard to its conflict of laws provision. You consent to the exclusive jurisdiction of the courts in connection with any action or dispute arising between the parties under or in connection with this Privacy Policy except for those individuals who may have rights to make claims under Privacy Shield.
The laws of Rwanda, excluding its conflicts of law rules, shall govern this Agreement and your use of the app.
By using RBC-C19 , you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, you should not engage with our mobile application, or use our services. Continued use of the Applications, direct engagement with us, or following the posting of changes to this Privacy Policy that do not significantly affect the use or disclosure of your personal information will mean that you accept those changes.
Your Consent
We've updated our Privacy Policy to provide you with complete transparency into what is being set when you visit our site and how it's being used. By using our app or registering an account, you hereby consent to our Privacy Policy and agree to its terms.
Links to Other Websites
This Privacy Policy applies only to the COVID-19 pandemic in the Republic of Rwanda. The Services may contain links to other websites not operated or controlled by RBC-C19. We are not responsible for the content, accuracy or opinions expressed in such websites, and such websites are not investigated, monitored or checked for accuracy or completeness by us. Please remember that when you use a link to go from the Services to another website, our Privacy Policy is no longer in effect. Your browsing and interaction on any other website, including those that have a link on our platform, is subject to that website’s own rules and policies. Such third parties may use their own cookies or other methods to collect information about you.
Cookies
RBC-C19 app doesn’t use "Cookies" to identify the areas of the services that you have visited. A Cookie is a small piece of data stored on your computer or mobile device by your web browser. The use of Cookies is to enhance the performance and functionality of the app but are non-essential to their use. However, the cookies are not needed here within our app because no browser needed to get our services provided by our app
Changes to Our Privacy Policy
We may change our Service and policies, and we may need to make changes to this Privacy Policy so that they accurately reflect our Service and policies. Unless otherwise required by law, we will notify you (for example, through our Service) before we make changes to this Privacy Policy and give you an opportunity to review them before they go into effect. Then, if you continue to use the Service, you will be bound by the updated Privacy Policy. If you do not want to agree to this or any updated Privacy Policy, you can delete your account.
Tracking Technologies
Local Storage
Local Storage sometimes known as DOM storage, provides web apps with methods and protocols for storing client-side data. Web storage supports persistent data storage, similar to cookies but with a greatly enhanced capacity and no information stored in the HTTP request header.
What is personal data?
Any data that relates to an identifiable or identified individual. GDPR covers a broad spectrum of information that could be used on its own, or in combination with other pieces of information, to identify a person. Personal data extends beyond a person’s name or email address. Some examples include financial information, political opinions, genetic data, biometric data, IP addresses, physical address, sexual orientation, and ethnicity.
The Data Protection Principles include requirements such as:
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.
We do not sell the Personal Information of our users.
For more information about these rights, please contact us.
Don't hesitate to contact us if you have any questions.