Privacy Notice

Privacy Notice for AFRINIC Election Registration

Introduction

AFRINIC (“we”, “us”, or “our”), the Regional Internet Registry for Africa and the Indian Ocean is committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with applicable data protection laws. This Privacy Notice supplements AFRINIC’s Privacy Policy and explains how we collect, use, store, and protect the personal data of individuals who register as Designated Voters on behalf of AFRINIC Resource Member Organisations for the purpose of participating in the 2025 AFRINIC Board Elections.

Who We Are

AFRINIC, the Regional Internet Registry for Africa and the Indian Ocean.
11th Floor, Standard Chartered Tower,
Ebène Cybercity, Mauritius
Email: [email protected]

What Data We Collect

We collect the following categories of personal data from you during the registration process:

  • Full Name

  • Email Address

  • Phone Number

  • Designation/Role in Member Organisation

  • Government-issued ID (passport, national ID)

  • Facial image

  • Signed delegation letter from your organisation

  • Organisation-related information (e.g., name, AFRINIC Org ID)

Why We Collect Your Data

We collect your personal data to:

  • Verify your identity and authority to vote on behalf of a member organisation

  • Ensure a secure, transparent, and auditable election process

  • Prevent impersonation or fraudulent voting

  • Communicate with you regarding election matters

  • Fulfill our legal and governance obligations under AFRINIC’s Bylaws

Legal Basis for Processing

Our processing of your personal data is based on:

  • Legitimate interest in conducting fair and secure elections

  • Compliance with legal obligations and AFRINIC Bylaws

  • Consent, where required, for specific uses (e.g., facial verification)

How We Share Your Data

Your data may be shared with:

  • AFRINIC’s internal Election Committee and Secretariat

  • AFRINIC’s Nomination Committee and Secretariat

  • Authorised administrators for election operations

  • Authorised Registered Contacts for verification purposes

  • Third-party service providers (e.g., secure voting platform, ID verification service) under strict confidentiality and data protection agreements

  • Regulatory or legal authorities, only if required by law

We do not sell or rent your personal data to third parties.

Data Security

We implement appropriate technical and organisational measures to safeguard your data, including:

  • Encrypted storage and secure servers

  • Access controls and audit logs

  • Limited access on a need-to-know basis

  • Secure deletion after the data retention period

Data Retention

We will retain your personal data only for as long as necessary for the election process and for audit or legal purposes thereafter, in accordance with our retention policies.

Your Rights

Subject to applicable laws, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (where applicable)

  • Object to or restrict processing in certain cases

  • Lodge a complaint with a data protection authority

Requests may be sent to: [email protected]

Changes to This Notice

We may update this Privacy Notice from time to time. Any changes will be published on this portal with a new “Last Updated” date. We encourage you to review it periodically.

Contact Us

For any questions or concerns about this notice or how your data is handled, please contact:

Data Protection Officer

Email: [email protected]

Phone: +230 403 5100

Address: AFRINIC, Ebène, Mauritius


Effective Date: 25-07-205

Last Updated: 25-07-2025