This notice explains how AuthOwl handles personal data under Egypt's Personal Data Protection Law (Law No. 151 of 2020).
About this notice
This notice describes how AuthOwl, a hosted authentication service based in Cairo, Arab Republic of Egypt, complies with Egypt’s Personal Data Protection Law, Law No. 151 of 2020 (the "PDPL"). It supplements our Privacy Policy and, for end-user data we process on behalf of customers, our Data Processing Addendum.
The PDPL and who it applies to
The PDPL regulates the collection, processing, and cross-border transfer of the personal data of individuals. It applies to controllers and processors that handle such data in Egypt, and can also apply to processing outside Egypt that relates to Egyptian data subjects. As a controller of our account holders’ data, and a processor of our customers’ end-user data, we handle personal data in line with the law’s principles of lawfulness, transparency, purpose limitation, and security.
Lawful basis for processing
We process personal data where we have a lawful basis to do so, which may include the consent of the data subject, the performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing the service, in each case as permitted by the PDPL.
Data subject rights under the PDPL
Subject to the conditions in the law, data subjects have the right to:
- be informed about the processing of their personal data;
- access and obtain a copy of their personal data;
- correct, update, or complete inaccurate or incomplete data;
- request erasure of their data where the conditions are met;
- withdraw consent and object to certain processing; and
- be informed of any breach affecting their data.
The Data Protection Officer
We have appointed a Data Protection Officer to oversee our compliance with the PDPL and to act as a point of contact for data subjects and the regulator. You can reach our Data Protection Officer at dpo@authowl.dev.
Cross-border transfers under the PDPL
The PDPL restricts transferring personal data outside Egypt unless an adequate level of protection is ensured and any required conditions or approvals are met. Where we transfer personal data abroad, for example to cloud or communications providers, we put in place the safeguards required by the law so that the data remains protected.
The Data Protection Centre
The PDPL is overseen by Egypt’s Data Protection Centre, the regulator responsible for supervising compliance, issuing guidance and licenses, and handling complaints. We cooperate with the Centre as required by law.
How to complain
If you have a concern about how we handle personal data, please contact our Data Protection Officer first so we can try to resolve it. You also have the right to lodge a complaint with the Data Protection Centre in accordance with the PDPL.
Contact
For questions about this notice or the PDPL, contact us at dpo@authowl.dev or privacy@authowl.dev.