Last Updated: 05/11/2025

NouZetwals Limited is the publisher and controller of personal data processed via this website and our services.

• Publisher / Controller: NouZetwals Limited (Mauritian non-profit)
• Parent company: NouLalimier — Business registration number C25224292 (issued 23 July 2025)
• Registered address: 27 Octave Adam Street, Eau Coulee, Republic of Mauritius
• Contact for privacy questions / Data Protection enquiries: Edyta Ozbek — admin [at] nouzetwals.org
• Website: https://www.nouzetwals.org

Hosting Provider: Siteground Hosting Limited, 7th Floor 50 Broadway, London, United Kingdom, SW1H 0DB

This policy explains:

• what personal data we collect and why;
• the legal bases for processing under the Data Protection Act 2017 (Mauritius);
• how we use and share personal data;
• your rights and how to exercise them; and
• our contact and supervisory authority details.

The Data Protection Act 2017 (which came into effect on 15 January 2018) is the governing law in Mauritius for personal data and provides data subject rights and controller obligations.

We only collect personal data that is necessary for the stated purpose. Examples include:

When you use the website or register:

• name, job title, organisation, contact details (email, phone), postal address, country
• login credentials where applicable
• information you provide in forms (e.g., award entries, nominations, referees, supporting documents)

Transactional data:

• payment/transaction records (note: we do not store full card numbers; payment processing is handled by third-party providers)

Usage data:

• IP address, browser/device information, pages visited, cookies and analytics data

Other: Any other information you provide to us (e.g., CVs, images, media consent).

We rely upon one or more lawful bases for processing under the DPA 2017:

• Contract / performance of a service — to perform services you request (e.g., process entries, provide event attendance, deliver subscriptions).
• Consent — where you opt in to newsletters, marketing, or other optional processing. You can withdraw consent at any time.
• Legitimate interests — for legitimate business activities (e.g., sending relevant communications about NouZetwals services, security, fraud prevention), balanced against your rights.
• Legal compliance — where we must process data to comply with legal obligations.

The DPA 2017 aligns broadly with international principles (similar to EU GDPR) and requires controllers to document lawful bases and be transparent.

We use cookies and similar technologies to improve the website experience and for analytics. You may manage or disable cookies via your browser settings. We use categories similar to standard practice:

• strictly necessary cookies;
• performance/analytics cookies;
• functionality cookies; and
• targeting/advertising cookies.

Detailed cookie information and the mechanism to consent/withdraw are provided on our Cookies page (or within the footer cookie control).

We may share personal data with:

• service providers (website hosts, payment processors, email platforms, analytics providers);
• professional advisers (legal/accounting) where needed;
• event sponsors only where you have been clearly informed and have not opted out (we will always offer opt-out);
• law enforcement, regulators or courts if required by law.

Where we transfer personal data outside Mauritius, we will ensure appropriate safeguards are in place (standard contractual clauses, adequacy or other safeguards) in line with the DPA 2017 and guidance on transfers abroad.

We retain personal data for as long as reasonably necessary for the purpose collected, to fulfil contractual and legal obligations, and to respond to any queries or disputes. Specific retention periods depend on the type of record (e.g., accounting records retained for statutory period; nomination materials retained until after judging + a reasonable archive period).

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction or damage (access controls, encryption where appropriate, secure backups). No system is 100% secure but we take commercially reasonable steps and require processors to maintain appropriate safeguards.

Under the DPA 2017 you generally have the right to:

• access personal data we hold about you;
• request rectification of inaccurate data;
• request erasure (in some circumstances);
• request restriction of processing;
• object to processing for direct marketing or on grounds relating to your particular situation;
• request portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Data Protection Commissioner (Mauritius).

The Data Protection Office publishes guidance on these rights and how to exercise them. If you wish to exercise rights, contact us at admin [at] nouzetwals.org and we will respond within a reasonable timeframe (and within statutory time limits where applicable).

If you are unhappy with how we handle your data you may:

1. contact us first at admin@nouzetwals.org so we can try to resolve the issue; or
2. lodge a complaint with the Data Protection Office – Republic of Mauritius (the supervisory authority). See the Data Protection Office website for contact details and guidance.

We may update this policy from time to time. We will post the revised policy on the website with an updated “Last updated” date.