GDPR Compliance

We are committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation and Ghana's Data Protection Act 2012.

Data Controller Information

Smart Home Rajo City is the data controller responsible for your personal data. Our Data Protection Officer (DPO) oversees compliance with data protection laws and can be contacted at dpo@smarthomerajo.com.

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR) and Ghana's Data Protection Act 2012, you have the following rights regarding your personal data. We have procedures in place to handle all requests within 30 days as required by law.

Right of Access (Article 15)

You have the right to obtain confirmation as to whether we process your personal data and, if so, request a copy of that data. This includes information about the purposes of processing, categories of data, recipients, retention periods, and your other rights. We will provide the information in a commonly used electronic format within 30 days of your verified request.

Right to Rectification (Article 16)

You have the right to request correction of any inaccurate personal data we hold about you. You can also request that incomplete data be completed. You can update much of your information directly through your account settings, or you can contact us to make changes on your behalf.

Right to Erasure (Article 17) — "Right to be Forgotten"

You have the right to request deletion of your personal data when: the data is no longer necessary for the purpose it was collected, you withdraw consent and there is no other legal basis, you object to processing and there are no overriding legitimate grounds, the data was unlawfully processed, or deletion is required by Ghanaian or EU law. We will evaluate your request and respond within 30 days.

Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to have your data transmitted directly to another data controller where technically feasible. This right applies to data you provided to us that is processed by automated means based on consent or contract.

Right to Restrict Processing (Article 18)

You have the right to request restriction of processing your personal data when: you contest the accuracy of the data (restriction applies while we verify), processing is unlawful but you oppose erasure, we no longer need the data but you require it for legal claims, or you have objected to processing pending verification of our legitimate grounds. Restricted data may only be stored, not processed, unless you consent or for legal claims.

Right to Object (Article 21)

You have the right to object to processing of your personal data based on our legitimate interests, including profiling. You also have the absolute right to object to direct marketing at any time. We will stop processing for direct marketing immediately upon receiving your objection. For other processing, we will cease unless we demonstrate compelling legitimate grounds that override your interests.

How We Protect Your Data

Technical Measures

SSL/TLS encryption for all data in transit
Encrypted storage of sensitive data at rest
Regular security patches and updates
Firewall and intrusion detection systems

Organizational Measures

Data protection training for all employees
Strict access controls on a need-to-know basis
Data Protection Impact Assessments for high-risk processing
Data processing agreements with all third-party processors

How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the details below. We will respond to your request within 30 days as required by the Data Protection Act 2012.

Email your request to: dpo@smarthomerajo.com
Use the contact form on our website with subject "Data Protection Request"
Write to us at: Data Protection Officer, 123 Independence Avenue, Accra Central, Ghana

We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to unauthorized persons. We may ask for additional information to confirm your identity.

Complaints

If you believe that we have not handled your personal data in accordance with data protection laws, you have the right to lodge a complaint with the relevant supervisory authority.

Data Protection Commission (Ghana)

Website: www.dataprotection.org.gh
Email: info@dataprotection.org.gh
Address: Data Protection Commission, P.O. Box CT 5095, Cantonments, Accra, Ghana
Phone: +233 (0) 302 123 456

We would appreciate the opportunity to address your concerns directly before you approach the Data Protection Commission. Please contact us first so we can resolve any issues.