Privacy & Data Protection Policy Sera ya Faragha na Ulinzi wa Data
Comprehensive disclosure on the collection, cryptographic encryption, storage, and processing of personal data, NIDA credentials, academic documents, and employer records under the Tanzania Personal Data Protection Act (PDPA No. 11 of 2022).
Ufafanuzi kamili wa jinsi tunavyokusanya, kulinda kwa njia fiche (encryption), kuhifadhi na kuchakata taarifa binafsi za NIDA, vyeti na wasifu wa kazi kwa mujibu wa Sheria ya Ulinzi wa Taarifa Binafsi ya Mwaka 2022.
01. Legal Framework & Data Controller Identity Msingi wa Kisheria na Utambulisho wa Mdhibiti wa Data
Reliance Solutions Ltd operates as the registered Data Controller under the Personal Data Protection Act (PDPA No. 11 of 2022) of the United Republic of Tanzania and the regulations administered by the Personal Data Protection Commission (PDPC).
Reliance Solutions Ltd inafanya kazi kama Mdhibiti wa Data (Data Controller) aliyesajiliwa kisheria chini ya Sheria ya Ulinzi wa Taarifa Binafsi ya Tanzania (PDPA Na. 11 ya Mwaka 2022) inayosimamiwa na Tume ya Ulinzi wa Taarifa Binafsi (PDPC).
02. Categories of Personal Data Collected Aina za Taarifa Binafsi Tunazokusanya
- Identity Data: Full legal name, date of birth, gender, marital status, nationality, and 20-digit NIDA number or International Passport number.
- Contact Data: Primary and secondary phone numbers, physical residential address, region/district, and verified email address.
- Professional & Academic Data: Curriculum Vitae (CV), certified educational certificates (O-Level, A-Level, Diploma, Degree, Masters, PhD), professional licenses (e.g. NBAA/ERB/TLS), language fluencies, and work history.
- Referee Data: Names, official titles, corporate affiliations, phone contacts, and email addresses of three (3) professional referees.
- Technical & Log Data: IP addresses, browser user agents, login timestamps, and session security tokens.
- Taarifa za Utambulisho: Majina kamili, tarehe ya kuzaliwa, jinsia, uraia, namba ya NIDA yenye tarakimu 20 au namba ya Pasipoti.
- Mawasiliano: Namba ya simu, barua pepe, mkoa, wilaya na anuani ya makazi.
- Taarifa za Kielimu na Kazi: Wasifu wa kazi (CV), vyeti vya elimu, leseni za kitaaluma, ujuzi na uzoefu wa kazi.
- Wadhamini (Referees): Majina na namba za simu za wadhamini wasiopungua watatu (3).
- Kumbukumbu za Kiufundi: Anuani ya IP, aina ya kifaa, na muda wa kuingia kwenye mfumo.
03. Lawful Basis for Data Processing Misingi ya Kisheria ya Kuchakata Taarifa
We process personal data solely on legitimate statutory grounds recognized under Section 24 of the PDPA 2022: (a) Explicit user consent given upon registration; (b) Necessity for performing recruitment matching and forwarding candidate job applications; and (c) Compliance with statutory labor reporting requirements.
Tunachakata taarifa zako kwa misingi ya kisheria chini ya Kifungu cha 24 cha Sheria ya PDPA 2022: (a) Ridhaa yako ya wazi unayotoa wakati wa usajili; (b) Uhitaji wa kuwasilisha maombi yako ya kazi kwa waajiri; na (c) Kutimiza matakwa ya sheria za ajira za Tanzania.
04. Cryptographic Protection of NIDA & Passport Credentials Ulinzi wa Fiche (Encryption) wa NIDA na Pasipoti
National Identification Authority (NIDA) numbers and International Passport records are classified as Highly Sensitive Personal Records. All identity numbers and uploaded document attachments are stored using military-grade AES-256 symmetric encryption at rest with salted cryptographic key hashing. Sensitive credentials are never exposed in plaintext or search query logs.
Namba za NIDA na Pasipoti zimeainishwa kama Taarifa Nyeti Zaidi. Taarifa hizi zote na vielelezo vilivyopakiwa zinalindwa kwa teknolojia thabiti ya usimbaji fiche ya AES-256. Haziwezi kusomwa na watu wasioidhinishwa wala kuonekana kiholela kwenye kumbukumbu.
05. Purposes of Data Processing Madhumuni ya Kuchakata Taarifa Zako
Your personal records are processed exclusively for:
- Direct transmission of job application dossiers to verified prospective employers.
- Dispatching automated SMS and email notifications regarding interview invitations, shortlisting status, and new vacancy alerts.
- Preventing duplicate candidate registrations and combating recruitment identity fraud.
- Facilitating employer billing and statutory tax invoice generation.
Taarifa zako zinatumika kwa madhumuni yafuatayo pekee:
- Kuwasilisha wasifu na vyeti vyako kwa waajiri halisi unaowaomba kazi.
- Kukutumia ujumbe mfupi wa SMS na barua pepe kuhusu maendeleo ya maombi yako na kuitwa kwenye usaili.
- Kuzuia usajili mara mbili na kuzuia udanganyifu na utapeli katika ajira.
- Kuwezesha ankara za malipo ya vifurushi vya waajiri.
06. Third-Party Sharing Limits & Strict Non-Sale Warranty Kutouza Data na Vikwazo vya Kushirikisha Watu Wengine
Strict Zero-Sale Commitment: Ajira Market does NOT sell, rent, lease, or monetize personal candidate data or recruiter contact lists to third-party telemarketers or advertising brokers. Data is shared exclusively with (a) Employers whose vacancies you directly apply for; (b) Licensed BOT payment processors for billing execution; and (c) Law enforcement agencies pursuant to valid court warrants.
Ahadi ya Kutouza Data: Ajira Market HAIUZI wala kukodisha taarifa zako binafsi kwa makampuni ya matangazo au wafanyabiashara. Data zako zinashirikishwa kwa: (a) Mwajiri uliyemuomba kazi moja kwa moja; (b) Mifumo ya malipo iliyoidhinishwa na BOT; na (c) Vyombo vya dola iwapo kuna agizo halali la Mahakama.
07. Technical Security Architecture (TLS 1.3 & Firewalls) Ulinzi wa Kiufundi wa Mifumo (TLS 1.3 na Firewalls)
Platform infrastructure enforces Transport Layer Security (TLS 1.3) encryption for all data in transit, Web Application Firewalls (WAF) to block SQL injection and cross-site scripting (XSS), continuous security patch updates, role-based access control (RBAC), and automated offsite backups.
Miundombinu ya mfumo inalindwa na usalama wa kimataifa wa TLS 1.3, vizuizi vya mashambulizi ya kimtandao (Firewalls/WAF), ukaguzi wa mara kwa mara wa kiusalama, na nakala za dharura (Backups) zinazohifadhiwa kila siku.
08. Cross-Border Data Transfers Uhamishaji wa Taarifa Nje ya Nchi
In the event that an international candidate applies for a role, or cloud infrastructure resides in secure regional tier-4 data centers, transfers outside Tanzania comply strictly with Section 31 of the PDPA 2022, ensuring adequate legal safeguards and equivalent data protection standards.
Endapo taarifa zitahifadhiwa kwenye seva za kisasa za kikanda nje ya nchi, uhamishaji huo unafanywa kwa kufuata Kifungu cha 31 cha Sheria ya PDPA 2022 ili kuhakikisha viwango vya ulinzi wa data vinalingana na sheria za Tanzania.
09. Data Retention Schedules & De-Identification Muda wa Kuhifadhi Data na Kufuta Taarifa
Candidate profile records remain active while the user actively applies for jobs. Inactive accounts exhibiting zero login activity for twenty-four (24) consecutive months are archived and securely de-identified unless retention is required by statutory tax or labor accounting regulations.
Wasifu wako unahifadhiwa wakati ukiendelea kuomba kazi. Akaunti ambazo hazijafunguliwa kwa miezi 24 mfululizo huwekwa kwenye kumbukumbu na taarifa zake binafsi kufutwa kwa usalama kulingana na sheria za kodi na ajira.
10. Your Statutory Rights Under PDPA (2022) Haki Zako za Kisheria Chini ya Sheria ya PDPA (2022)
Under the Tanzania Personal Data Protection Act, you possess the following actionable rights:
- Right to Access: Request a full digital copy of all personal records maintained on your profile.
- Right to Rectification: Edit, update, or correct inaccurate academic, phone, or address details at any time via your dashboard.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and uploaded CV files.
- Right to Object & Withdraw Consent: Opt out of SMS/email job alerts or marketing communications.
- Right to Lodge a Complaint: File a grievance directly with the Personal Data Protection Commission (PDPC) if you believe your privacy rights have been infringed.
Chini ya Sheria ya Ulinzi wa Taarifa Binafsi ya Tanzania, una haki zifuatazo:
- Haki ya Kupata Taarifa: Kuomba nakala kamili ya taarifa zako zote zilizopo kwenye mfumo.
- Haki ya Kurekebisha: Kubadilisha na kusahihisha taarifa zisizo sahihi kwenye wasifu wako wakati wowote.
- Haki ya Kufuta Data: Kuomba akaunti yako na vielelezo vyako vifutwe kabisa kwenye mfumo.
- Haki ya Kujitoa: Kusitisha kupokea barua pepe na SMS za matangazo ya ajira.
- Haki ya Kulalamika: Kuwasilisha malalamiko yako moja kwa moja kwa Tume ya Ulinzi wa Taarifa Binafsi (PDPC).
11. Cookie Policy & Web Session Management Sera ya Vidakuzi (Cookies) na Usalama wa Vikao
Ajira Market utilizes secure, HTTP-only, encrypted session cookies strictly necessary for authenticating candidate and employer logins, maintaining CSRF token security, and remembering language preferences (English/Swahili). We do not employ third-party behavioral surveillance trackers.
Ajira Market inatumia vidakuzi (cookies) salama vilivyolindwa kwa ajili ya kutambua ukaaji wako kwenye akaunti, kulinda usalama dhidi ya mashambulizi ya kimtandao, na kukumbuka lugha unayoipendelea. Hatutumii vidakuzi vya ufuatiliaji holela wa kibiashara.
12. Data Protection Officer (DPO) Contact & Grievances Afisa Msimamizi wa Ulinzi wa Data (DPO) na Malalamiko
For privacy inquiries, data subject rights requests, or statutory compliance matters, contact our designated Data Protection Officer:
Kwa maswali ya faragha, maombi ya kufuta taarifa zako, au masuala ya kisheria ya data, wasiliana na Afisa wetu wa Faragha: