Personal data collected in the context of the professional relationship with clients

1.1. Categories of data collected, data subjects, duration and purpose of processing

The firm processes personal data relating to its clients and prospects.

The legal bases on which we rely to process personal data are:
the firm’s legitimate interests;
the performance of pre-contractual or contractual measures;
compliance with legal and regulatory obligations.

You can consult detailed information regarding the categories of data collected, the duration, purpose and legal basis of processing, as well as the categories of data subjects concerned, in the table available by clicking here.

1.2. Your Rights

In accordance with the General Data Protection Regulation (GDPR) and applicable laws, as a data subject, you have the following rights:

1) Right of Access (Art. 15 GDPR)
You have the right to access the personal data we hold about you. This includes the right to request a copy of all personal data we process about you, including data you have provided to us.

2) Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate or incomplete personal data.

3) Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR)
In certain circumstances, you may request the deletion of your personal data.

4) Right to Restriction of Processing (Art. 18 GDPR)
In certain situations, you may request that the processing of your personal data be restricted.

5) Right to Data Portability (Art. 20 GDPR)
You may request to receive your personal data in a structured, commonly used and machine-readable format, and to transfer it to a third party.

6) Right to Object (Art. 21 GDPR)
You have the right to object to the processing of your personal data, particularly in relation to automated processing. However, failure to provide certain information may prevent or delay the handling of your request.

7) Right to Withdraw Consent (Art. 7 GDPR)
Where processing is based on your consent, you may withdraw it at any time.

You may exercise these rights by contacting:
By email: contact@citizenconsult.com
By post: Villa Mithila, Chemin 20 Pieds, Grand Baie, Mauritius

Please note that these rights may not apply to data retained for legal, administrative or security purposes.

For more information, you may consult the website of the Data Protection Office (Mauritius).
In the event of a dispute, you may lodge a complaint with this supervisory authority.

1.3. How We Protect Your Data

Citizen Consult places particular importance on the security and confidentiality of its clients’ data. As such, a range of cybersecurity measures is implemented to protect your personal data, as well as any sensitive information and/or data covered by professional secrecy that you entrust to us.

These measures include, in particular:
the use of secure and encrypted email services hosted in jurisdictions offering an adequate level of data protection;
the use of secure hardware and IT tools (antivirus software, encrypted storage devices, password protection, and recognized professional tools);
regular audits of cybersecurity and data protection measures.

1.4. Sharing of Personal Data

Visitor comments may be checked through an automated spam detection service.

We do not sell, grant access to, transmit or otherwise transfer any personally identifiable data collected via our website to third parties, except to those who may require such data for the operation of the website, including for analytics purposes or to ensure data security.

The only exception to this principle is where we may be required to disclose such data to competent disciplinary, investigative or judicial authorities, upon lawful request, order or injunction, final court decision, or in compliance with a legal or regulatory obligation, in order to prevent, detect or prosecute illegal activities, fraud or any threat to public safety or public order.