This Information Security and Privacy Policy outlines the commitment of Broadband System Corporation (BSC) to maintaining the highest standards of information security and privacy in line with the requirements of the Information Security and Privacy Management System standards.
BSC recognizes the importance of safeguarding information assets and respecting individuals' privacy rights. This policy serves as a framework for establishing, implementing, maintaining, and continually improving our information security and privacy practices.
This policy applies to all information assets, systems, processes, personnel, and third parties that access, process, or store information on behalf of BSC.
Policy Statements
Information Security
Information Classification: BSC classifies information into categories such as Confidential, Internal Use, and Public. The classification level determines the appropriate handling, access controls, and encryption measures.
Access Control: Access to information is granted based on the principle of least privilege. Users are granted access only to the information necessary for their roles. Access control mechanisms, including strong authentication, are implemented and regularly reviewed.
Risk Management: Regular risk assessments are conducted to identify, assess, and mitigate potential threats and vulnerabilities. Appropriate controls are implemented to manage identified risks.
Security Awareness and Training: BSC provides ongoing security awareness and training to all personnel, contractors, and third parties to ensure they understand their responsibilities and are equipped to make informed security decisions.
Incident Management: An incident response plan is in place to effectively manage and respond to security incidents. Incidents are reported, investigated, and appropriate measures are taken to prevent future occurrences.
Privacy
Data Protection: BSC complies with all relevant data protection laws and regulations. Personal data is collected, processed, and stored lawfully and transparently. Data subjects' rights are respected.
Consent: When required, BSC obtains explicit and informed consent from data subjects before collecting or processing their personal data.
Data Minimization: Personal data is collected and processed only for specific and legitimate purposes. Data collection is limited to what is necessary for the intended purpose.
Data Security: Appropriate technical and organizational measures are in place to protect personal data from unauthorized access, disclosure, alteration, or destruction.
Data Transfer: Before transferring personal data to third parties or across borders, adequate safeguards are implemented to ensure the security and privacy of the data.
BSC is committed to complying with the requirements outlined in this policy and any applicable laws, regulations, and standards. The policy is regularly reviewed to ensure its effectiveness and relevance in addressing the changing landscape of information security and privacy.
All employees, contractors, and third parties are expected to comply with this policy. Non-compliance may result in disciplinary action.
This Information Security and Privacy Policy reflects BSC's commitment to maintaining the confidentiality, integrity, and availability of information assets while respecting individuals' privacy rights. By adhering to the principles and practices outlined in this policy, BSC aims to build and maintain trust with its stakeholders.
This Information Security and Privacy Policy outlines the commitment of Broadband System Corporation (BSC) to maintaining the highest standards of information security and privacy in line with the requirements of the Information Security and Privacy Management System standards.
BSC recognizes the importance of safeguarding information assets and respecting individuals' privacy rights. This policy serves as a framework for establishing, implementing, maintaining, and continually improving our information security and privacy practices.
This policy applies to all information assets, systems, processes, personnel, and third parties that access, process, or store information on behalf of BSC.
Policy Statements
Information Security
Information Classification: BSC classifies information into categories such as Confidential, Internal Use, and Public. The classification level determines the appropriate handling, access controls, and encryption measures.
Access Control: Access to information is granted based on the principle of least privilege. Users are granted access only to the information necessary for their roles. Access control mechanisms, including strong authentication, are implemented and regularly reviewed.
Risk Management: Regular risk assessments are conducted to identify, assess, and mitigate potential threats and vulnerabilities. Appropriate controls are implemented to manage identified risks.
Security Awareness and Training: BSC provides ongoing security awareness and training to all personnel, contractors, and third parties to ensure they understand their responsibilities and are equipped to make informed security decisions.
Incident Management: An incident response plan is in place to effectively manage and respond to security incidents. Incidents are reported, investigated, and appropriate measures are taken to prevent future occurrences.
Privacy
Data Protection: BSC complies with all relevant data protection laws and regulations. Personal data is collected, processed, and stored lawfully and transparently. Data subjects' rights are respected.
Consent: When required, BSC obtains explicit and informed consent from data subjects before collecting or processing their personal data.
Data Minimization: Personal data is collected and processed only for specific and legitimate purposes. Data collection is limited to what is necessary for the intended purpose.
Data Security: Appropriate technical and organizational measures are in place to protect personal data from unauthorized access, disclosure, alteration, or destruction.
Data Transfer: Before transferring personal data to third parties or across borders, adequate safeguards are implemented to ensure the security and privacy of the data.
BSC is committed to complying with the requirements outlined in this policy and any applicable laws, regulations, and standards. The policy is regularly reviewed to ensure its effectiveness and relevance in addressing the changing landscape of information security and privacy.
All employees, contractors, and third parties are expected to comply with this policy. Non-compliance may result in disciplinary action.
This Information Security and Privacy Policy reflects BSC's commitment to maintaining the confidentiality, integrity, and availability of information assets while respecting individuals' privacy rights. By adhering to the principles and practices outlined in this policy, BSC aims to build and maintain trust with its stakeholders.
Date of Policy: 21/08/2023
Signed by: Christian Muhirwa Chief Executive Officer
Website Privacy & Cookie Policy
This Information Security and Privacy Policy outlines the commitment of Broadband System Corporation (BSC) to maintaining the highest standards of information security and privacy in line with the requirements of the Information Security and Privacy Management System standards.
BSC recognizes the importance of safeguarding information assets and respecting individuals' privacy rights. This policy serves as a framework for establishing, implementing, maintaining, and continually improving our information security and privacy practices.
This policy applies to all information assets, systems, processes, personnel, and third parties that access, process, or store information on behalf of BSC.
Policy Statements
Information Security
Information Classification: BSC classifies information into categories such as Confidential, Internal Use, and Public. The classification level determines the appropriate handling, access controls, and encryption measures.
Access Control: Access to information is granted based on the principle of least privilege. Users are granted access only to the information necessary for their roles. Access control mechanisms, including strong authentication, are implemented and regularly reviewed.
Risk Management: Regular risk assessments are conducted to identify, assess, and mitigate potential threats and vulnerabilities. Appropriate controls are implemented to manage identified risks.
Security Awareness and Training: BSC provides ongoing security awareness and training to all personnel, contractors, and third parties to ensure they understand their responsibilities and are equipped to make informed security decisions.
Incident Management: An incident response plan is in place to effectively manage and respond to security incidents. Incidents are reported, investigated, and appropriate measures are taken to prevent future occurrences.
Privacy
Data Protection: BSC complies with all relevant data protection laws and regulations. Personal data is collected, processed, and stored lawfully and transparently. Data subjects' rights are respected.
Consent: When required, BSC obtains explicit and informed consent from data subjects before collecting or processing their personal data.
Data Minimization: Personal data is collected and processed only for specific and legitimate purposes. Data collection is limited to what is necessary for the intended purpose.
Data Security: Appropriate technical and organizational measures are in place to protect personal data from unauthorized access, disclosure, alteration, or destruction.
Data Transfer: Before transferring personal data to third parties or across borders, adequate safeguards are implemented to ensure the security and privacy of the data.
BSC is committed to complying with the requirements outlined in this policy and any applicable laws, regulations, and standards. The policy is regularly reviewed to ensure its effectiveness and relevance in addressing the changing landscape of information security and privacy.
All employees, contractors, and third parties are expected to comply with this policy. Non-compliance may result in disciplinary action.
This Information Security and Privacy Policy reflects BSC's commitment to maintaining the confidentiality, integrity, and availability of information assets while respecting individuals' privacy rights. By adhering to the principles and practices outlined in this policy, BSC aims to build and maintain trust with its stakeholders.
Date of Policy: 21/08/2023
Signed by: Christian Muhirwa Chief Executive Officer
Our Data Protection and Privacy
Data Protection and Privacy matters to us and we know it matters to you. We are committed to protecting your privacy, keeping your information safe and ensuring the security of your personal information. To provide you with the most effective products and services, your personal information will be collected, processed lawfully, stored securely and not disclosed unlawfully to any third party. We are committed to protecting your privacy and preserving the confidentiality of your personal information that you provide to us.
The data protection laws in scope is the Rwanda’s Law Nº 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (DPP Law), and other international laws on personal data and privacy such as the GDPR.
Who does this Statement apply to?
This Statement applies to:
All Customers and/or users who are natural persons or living individuals.
All Customers and/or users who are organizations.
All BSC employees and job applicants or prospective employees.
All BSC suppliers, partners, and service providers.
What Personal Information does BSC collect and use?
Personal information collected and held by us may include but not limited to; name, sex, date of birth, addresses, International Mobile Equipment Identity, mobile phone number, email address, occupation and information contained in supporting documents such as proof of identity and proof of address.
BSC and its authorized third parties may collect, store, process the following types of Personal Information:
Biometric Data
Racial or Ethnic Origin
Financial information
For providing our products, services and
For use of our website
Information related to your utilization of our services which may include your browsing history on our website, location details and additional information provided while using our services.
BSC will rely on the following to process your personal data
Legal Obligation: In some circumstances, where the processing of the personal data is necessary for the performance of an obligation conferred or imposed by law on BSC, we will rely on Legal Obligation as a basis to process the personal information you have provided.
Legitimate Interest: Our legitimate business interests, for example, direct marketing and improvement of our services. Whenever we rely on this lawful basis to process your data, we assess our business interests to make sure they do not override your rights. Additionally, in some cases you have the right to object to this process. See “Your Rights” section of the statement.
Consent: We may rely on the consent you provide in the absence of any other legal basis. Consent will always be presented separately to you, can be withdrawn at any time and you will be given details on how to do so. We rely on contract as a legal basis to process your personal information when we need to deliver a contractual service to you or when it has become necessary to process data before entering into a contract with you.
Purpose of collecting personal information
BSC collects your personal information for a variety of business purposes. These include, but are not limited to:
Verifying your identity;
Completing transactions effectively and billing for products and services;
Responding to your request for service or assistance;
Performing market analysis and research as well as business and operational analysis;
Providing, maintaining and improving our products and services;
Anticipating and resolving issues and concerns related to our products and services;
Promoting and marketing our products and services which may benefit you and be related to products and services you are currently enjoying; and
Ensuring adherence to legal and regulatory requirements for prevention and detection of fraud and crime.
Disclosure and Transfer of Personal Information
Collection of Personal Information: BSC will obtain your consent for sharing your personal information in several ways, such as in writing, online, through “click-through” agreements; orally, including through interactive voice response; or when your consent is part of the terms and conditions which apply to our products and services.
Internal Use: BSC and its employees may utilize some or all available personal information for legitimate business purposes and related activities within the parameters mentioned above.
Third Parties: We may have to share your personal information with third parties, including third-party service providers, sub-contractors, other entities within BSC. A ‘Third Party’ is a service provider who is contracted by BSC to provide a service or product
Government and Law Enforcement Agencies: We may also share your personal information with Government agencies or other authorized Law Enforcement Agencies (LEAs) mandated under law to obtain such information for the purpose of verification of identity or for prevention, detection, investigation including but not limited to cyber incidents, the investigation and prosecution of crime, and as is required by law.
Transfer: BSC may transfer your personal information or other information, or data collected, stored, processed by us to any other entity or third party located outside the country of service, only, if necessary, for legitimate business purposes for providing services to you. This may also include sharing aggregated information with third parties contracted to BSC for them to understand our environment and consequently, provide you with better services. While sharing your personal information with third parties, reasonable organizational, technical and security measures shall be taken to ensure that reasonable security practices are followed by the third party and are in line with the Data Protection Act.
Use of Cookies
Cookies are a kind of short-term memory for the web. They are stored in your browser and enable a site to ‘remember’ little bits of information between pages or visits. Cookies are used by web servers to identify and track your activities as you navigate the different pages of our website, and to identify you whenever you return website, allowing the website to provide you with a personalized browsing experience and BSC with statistics about how you use the website so that it can be improved.
Security Practices and Procedures
BSC adopts reasonable security practices and procedures, in line with international standards to include technical, and organizational security safeguards to protect your personal information from unauthorized access, or disclosure while it is under our control.
Your Rights
Right to access personal information
Right to correct personal information
Right to object to use of personal information
Right to opt-out of marketing messages
If you have any queries in any aspect of this privacy statement or if you would want to exercise any of the rights mentioned above, please send an email to BSC at and our privacy team will respond to you.
Changes to policy
We reserve the right to modify this Data Protection and Privacy Statement as and when required. We will post any changes to our Privacy Notice on our website: https://bsc.rw. We encourage you to check frequently to see the current Data Protection and Privacy Statement to be informed of how BSC is committed to protecting your information and providing you with improved content on our site in order to enhance your experience.
