1. Purpose of the Policy

This policy ensures that GoSkills Ltd complies with data protection laws and protects the rights and privacy of individuals. It governs how we process personal data collected from users, instructors, employees, and other stakeholders.

2. Scope of the Policy

This policy applies to:

• All employees, users, students, contractors, and instructors of GoSkills Ltd.
• All personal data processed by GoSkills Ltd, whether stored electronically or in paper form.

3. Key Definitions

• Personal Data: Any information that can identify an individual (e.g., name, email, phone number).
• Processing: Any action performed on personal data, including collection, storage, use, or sharing.
• Data Subject: The individual whose personal data is being processed.
• Data Controller: GoSkills Ltd, is responsible for determining the purpose and means of processing personal data.

4. Principles of Data Protection

GoSkills Ltd is committed to adhering to the following principles:

1. Lawfulness, Fairness, and Transparency: Data processing will be lawful, fair, and transparent.
2. Purpose Limitation: Data will only be collected for specified, explicit, and legitimate purposes.
3. Data Minimization: Only the necessary data for the intended purpose will be collected.
4. Accuracy: Personal data will be accurate and kept up to date.
5. Storage Limitation: Data will not be kept longer than necessary.
6. Integrity and Confidentiality: Data will be handled securely to protect against unauthorized access, loss, or damage.

5. Data Collection

GoSkills Ltd collects personal data to:

• Enable users and instructors to access e-learning services.
• Process payments and provide earnings to instructors.
• Improve our services through feedback and analytics.

Examples of collected data:

• Users: Name, email, payment details, course activity.
• Instructors: Contact details, bank information, uploaded course materials.

6. Legal Basis for Processing

GoSkills Ltd processes personal data based on:

• Consent: When users agree to specific data usage.
• Contractual Necessity: To deliver services or fulfill agreements.
• Legal Obligation: Compliance with legal requirements.
• Legitimate Interests: For business purposes, such as service improvement.

7. Data Storage and Security

• Storage: Data is stored securely on encrypted servers.
• Access: Limited to authorized personnel with appropriate access levels.
• Retention: Personal data is retained only for as long as necessary and securely deleted thereafter.

8. Data Sharing

GoSkills Ltd will only share personal data:

• With third-party service providers (e.g., payment processors) under strict data protection agreements.
• To comply with legal obligations or court orders.

9. Data Subject Rights

Individuals have the right to:

1. Access their personal data.
2. Rectify inaccurate or incomplete data.
3. Erase their data under specific conditions (“right to be forgotten”).
4. Restrict processing in certain circumstances.
5. Portability: Receive their data in a usable format.
6. Object to certain data processing activities.
7. Withdraw Consent at any time.

Requests can be sent to datapolicy@goskills.rw.

10. Data Breach Management

• Reporting: Breaches will be reported to the relevant supervisory authority within 72 hours.
• Notification: Affected individuals will be notified promptly if the breach poses a high risk to their rights and freedoms.
• Prevention: Regular audits and staff training to minimize risks.

11. Cookies and Tracking

GoSkills Ltd uses cookies on its website to enhance user experience. Users will be informed of cookie usage and given the option to manage their preferences.

12. Policy Updates

This policy will be reviewed annually and updated as necessary to comply with legal changes or operational needs.

13. Contact Information

For questions or concerns about data protection, please contact: Data Protection Officer: ABAYIZERA Richard
Email: richard@goskills.rw
Phone: +250 786 682 083