Data Protection & Privacy Notice

1. Who we are

This survey is administered by the National Ozone Unit (NOU) of Zimbabwe, operating under the Ministry of Environment, Climate and Wildlife, in partnership with the Heating, Ventilation, Air Conditioning and Refrigeration Association of Zimbabwe (HEVACRAZ). The programme is conducted under the guidance of the United Nations Environment Programme (UNEP).

2. What personal data we collect

We may collect the following categories of personal data:

• Identity data: full name, gender, age group, education level
• Contact data: phone number, email address, physical location (city, suburb), GPS coordinates
• Professional data: years of experience, work focus areas, training history, certifications, HEVACRAZ membership number
• Technical data: confidence levels, tool access, equipment usage, safety practices
• Profile photo: voluntarily provided for identity verification in the public registry
• Technical metadata: IP address, browser user agent, consent timestamp

3. Purpose of processing

Your data is processed for the following purposes:

• Establishing and maintaining the national RAC Technician Registry
• Assessing sector skills, training needs, and equipment gaps
• Informing policy and programme development for the refrigeration and air conditioning sector
• Facilitating the phase-down of hydrofluorocarbons (HFCs) under the Kigali Amendment to the Montreal Protocol
• Producing aggregated, anonymised statistical reports for UNEP and national stakeholders
• Contacting you for verification, follow-up training opportunities, or sector updates (where consent has been given)

4. Legal basis

Processing is based on your explicit consent, as required by the Zimbabwe Cyber and Data Protection Act [Chapter 11:07]. By accepting this notice and submitting the survey, you confirm that you have read and understood this notice and consent to the processing of your personal data as described herein. You may withdraw your consent at any time by contacting the NOU.

5. Data storage and security

Your data is stored in encrypted databases hosted within secure data centres. Access is restricted to authorised personnel of the NOU, HEVACRAZ, and technical administrators. All data transmissions are encrypted using industry-standard TLS protocols.

6. Data retention

Personal data will be retained for the duration of the RAC Technician Registry programme plus five (5) years for archival and analytical purposes. After this period, personal data will be anonymised or securely deleted.

7. Your rights

Under the Zimbabwe Cyber and Data Protection Act, you have the following rights:

• Right of access: request a copy of your personal data
• Right to correction: request that inaccurate data be corrected
• Right to deletion: request that your data be deleted, subject to legal retention requirements
• Right to restriction: request that processing of your data be limited
• Right to data portability: request a copy of your data in a structured, machine-readable format
• Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of processing before withdrawal

8. Third-party sharing

Your personal data will not be sold or rented to third parties. Aggregated, anonymised data may be shared with UNEP for the purposes of national reporting under the Montreal Protocol. Your name and professional details will only appear in the public technician registry if you have explicitly consented to this in the survey.

9. Contact information

For any questions, concerns, or requests relating to your personal data, please contact:

10. Changes to this notice

This notice may be updated from time to time. The current version will always be available on this page. Continued participation in the registry after changes constitutes acceptance of the updated notice.