Be informed
Know the controller, purposes, data, recipients, retention, transfers, and rights channels before any collection.
Designed · not operational
Phase 1C · rights before collection
Understand your rights without handing over your data.
KIIRAAY is preparing information, access, rectification, objection, justified deletion, purpose-specific withdrawal, and appeal. No request channel opens until the controller, procedure, security, and assistance model are approved.
0real personal records
0approved request channels
0identity documents accepted
Closedautomated decisions
Rights catalog
Seven requests, never one opaque form.
The future journey will distinguish the right exercised, the relevant purpose, and any lawful limits. KIIRAAY’s procedure still requires confirmation by Senegalese counsel and the CDP.
Access
Ask whether data is processed and receive authorized information in an understandable form.
Designed · not operationalRectify
Correct, complete, or update inaccurate, incomplete, or outdated data.
Designed · not operationalObject
Object on legitimate grounds when no legal obligation requires processing, subject to the confirmed framework.
Designed · not operationalRequest deletion or review
Request deletion when retention is no longer justified, subject to confirmed duties and exceptions.
Designed · not operationalWithdraw consent
Separately withdraw a future choice for email, WhatsApp, SMS, surveys, events, or location precision.
Designed · not operationalEnd and appeal
Request an end to future membership and appeal a decision under approved statutes and procedure.
Designed · not operationalFuture journey
A request tracked end to end.
No digital deadline is promised before legal validation. Every step must produce evidence, an accountable owner, and an escalation route.
- 01Secure receipt
A future approved channel will receive only the information necessary for the request.
- 02Receipt and reference
The person will receive proof of receipt, a reference, and the next step.
- 03Minimal verification
Identity will be checked proportionately without requiring a national ID by default.
- 04Scoped search
Only authorized teams will search the relevant systems and approved providers.
- 05Controlled decision
Refusals, exceptions, deletion, and sensitive cases will require a reason and human review.
- 06Response and appeal
The answer will explain the outcome, limits, retention, and approved appeal route.
Inclusive assistance
Digital will not be the only door.
Trained desk
An authorized agent may explain the notice and record only the approved request without keeping an uncontrolled copy.
Planned · closedReceipted request
An accessible paper alternative must issue a reference and follow the same security, timeline, and appeal rules.
Planned · closedAssisted callback
A person may schedule support in an approved language and format without exposing their case to an unauthorized switchboard.
Planned · closedTen blocking conditions
The channel stays closed until proven.
A contact button is not enough. Ownership, law, security, timing, deletion, appeal, and assisted service must work together.
- BlockingNamed controller and legal representative
- BlockingTrained rights owner and backup
- BlockingSecure KIIRAAY-owned contact channel
- BlockingApproved French notice and controlled English version
- BlockingMinimal request identity check
- BlockingValidated response priorities and escalation
- BlockingRetention, backup, deletion, and legal-hold rules
- BlockingInternal appeal and CDP escalation process
- BlockingAccessible trained non-digital assistance
- BlockingAudit and two-person sensitive-decision control
Official sources
Public guidance does not replace counsel.
Law No. 2008-12, its implementing decree, and CDP guidance shape this prototype. KIIRAAY must confirm procedure, exceptions, timing, and formalities before any real request.