GDPR Compliance

Organ Share Africa is fully committed to compliance with the General Data Protection Regulation (GDPR) and protecting your fundamental rights to privacy and data protection.

Last Updated: November 2025

Our GDPR Commitment

We process your personal data lawfully, fairly, and transparently. Your data is collected only for specified, explicit, and legitimate purposes related to organ donation services. We implement appropriate technical and organizational measures to ensure data security and protect your privacy rights.

IMPORTANT: WE DO NOT SHARE YOUR PERSONAL INFORMATION WITH ANY THIRD PARTIES. Your data is never sold, traded, or used for purposes beyond our organ donation services.

Your GDPR Rights

Right to Access

You have the right to request access to all personal data we hold about you. We will provide a copy of your data in a commonly used format.

How to Exercise This Right:

  • Submit a request via email to organdonor@doctor4africa.com
  • We will verify your identity for security purposes
  • You will receive your data within 30 days
  • Access is provided free of charge for the first request

Right to Rectification

You can request correction of inaccurate or incomplete personal data at any time.

How to Exercise This Right:

  • Log in to your account and update your profile
  • Or contact us with the corrections needed
  • We will update your information within 48 hours
  • You will receive confirmation once changes are made

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances.

How to Exercise This Right:

  • Submit a deletion request via email
  • We will verify your identity and review the request
  • Data will be permanently deleted within 30 days
  • Some data may be retained for legal compliance

Right to Restrict Processing

You can request that we limit how we process your personal data in certain situations.

How to Exercise This Right:

  • Contact us with your restriction request
  • Specify which processing activities to restrict
  • We will implement restrictions within 7 days
  • You will be notified before restrictions are lifted

Right to Data Portability

You can receive your personal data in a structured, machine-readable format and transfer it to another service.

How to Exercise This Right:

  • Request a data export via email
  • We will provide data in JSON or CSV format
  • Export includes all personal and medical information
  • Delivered within 30 days of request

Right to Object

You have the right to object to certain types of processing, including automated decision-making.

How to Exercise This Right:

  • Submit an objection via email explaining your concerns
  • We will review and assess your objection
  • Processing will stop unless we have compelling grounds
  • You will receive a decision within 30 days

Exercise Your GDPR Rights

To exercise any of your GDPR rights or for questions about data protection, contact our Data Protection Officer:

Email:

organdonor@doctor4africa.com

We will respond to all GDPR-related requests within 30 days as required by law.