Kisii University is committed to processing your personal information in accordance with the Data Protection Act, 2019 and Data Protection (General) Regulations, 2021. The personal data collected as detailed will, therefore, be processed in line with the relevant Data Protection Policies, Laws and Regulations in the way(s) and purpose(s) detailed in this Consent Form. Pursuant to the Data Protection (General) Regulations, 2021. Kisii University, in its capacity as a data controller and processor under the Data Protection Act, 2019, must obtain your voluntary, explicit, affirmative, and informed consent before it can collect or process any personal data for a lawful basis, including, but not limited to, employment, admission and enrollment, study, internship, online education, online activities etc.

The University collects the following personal data for responsible, and strictly, official purposes:

• Identification details: Name, National Identification Card/ Passport Number, Birth Certificate Number, Images (photographs/videos).
• Contact details: Phone number, Post Office Box, Email address
• Academic qualifications details: Through your academic certificates
• Geographical location details

The University collects and processes the above-mentioned personal data for the following purposes:

• Confirming the identity of a student for security purposes and controlled access to University services.
• Managing student processes including admission processing, teaching and research, examinations handling and co-curricular activities.
• Generating statistics and reports that will be used for planning and decision-making as well as guiding policy development and implementation.
• Reporting to affiliated government agencies and regulatory bodies such as the Ministry of Education, the Commission for University Education (CUE), the Kenya National Bureau of Statistics (KNBS), the Kenya Universities & Colleges Central Placement Services (KUCCPS), the Higher Education Loans Board (HELB) among others.

All personal data provided to Kisii University, and all the further data provided to allow the processing of your application to Kisii University academic courses, and thereof aimed at the performance of the related services to be provided to you, will be processed and handled by the University in accordance with its policies and with the aforementioned Law, and with the principles of fairness, lawfulness, transparency, purpose limitation, accuracy, storage limitation, integrity and confidentiality and accountability, as well as the utmost protection of your privacy; sensitive data processing will only take place in relation to data regarding your sensitive data as listed below.

Personal data revealing race, health status, ethnic social origin, conscience, belief, genetic data, biometric data, property details, marital status, family details including names of your children, parents, spouse or spouses, sex or sexual orientation, criminal convictions and offences (collectively “Sensitive Data”) may be requested by Kisii University. With the exception of criminal convictions, you are not obligated to provide Sensitive Data and do so on a voluntary basis. If Sensitive Data is provided to Kisii University, your signature shall be consent to the University to process Sensitive Data for the purposes described in this Consent and in accordance with the Data Protection Act, 2019 and Data Protection (General) Regulations, 2021.

Sensitive Data may be processed by Kisii University for the following purposes and subject to appropriate safeguards:

• Recruitment of you to participate in Kisii University programs;
• Performance of a contract with you and/or the Partner Institution defined below, or in order to take action on your request to the University prior to entering into the contract;
• Compliance with a legal obligation to which Kisii University is subject;
• Protection of your vital interests or those of another person;
• Performance of a task carried out in the public interest or in the exercise of official authority vested in Kisii University, including the enforcement of the University academic policies and procedures, and the Student Code of Conduct;
• Carrying out obligations and specific rights in the field of employment, social security or a collective bargaining agreement;
• The exercise or defense of legal claims;
• Preventive or occupational medicine, the assessment of your capacity as a student, or medical diagnosis of the health or treatment, or management of health and services for you;
• Protection of public health and prevention of disease;
• Archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

Notwithstanding anything to the contrary herein, Kisii University may process personal data without the data subject’s consent under certain other lawful bases, including when processing is necessary for the performance of a contract to which a data subject is a party; when processing is necessary for compliance with a legal obligation to which Kisii University is subject; or when processing is necessary to protect vital interests, such as the life of a data subject.

Personal data will be handled and processed only by the persons who are responsible for the necessary activities for the purpose above. Refusal of consent may make it impossible for Kisii University to carry out its necessary activities for the purpose above, and may hamper the University’s ability to provide requested [educational services] [employment] [participation in a research] [other] to you.

You will be able to exercise any and all other rights, as applicable, foreseen by the Data Protection Act and the Regulations thereto namely right of access, right to rectification, right to erasure or “to be forgotten”, right to restriction of processing, right to data portability and the right to object.

You have the right to withdraw your consent to the collection and processing of personal data. If you would like to withdraw consent, please contact the Data Protection Officer at dpo@kisiiuniversity.ac.ke.