This Notice explains how your personal data is handled by the Akwa Ibom State Christmas Carol Night, and is issued under the Nigeria Data Protection Act 2023 (NDPA).
Who we are
The data controller is the Programme Secretariat, Christmas Carol Night, Office of the Executive Governor, Akwa Ibom State. The Ministry of Science and Digital Economy acts as technical partner and processes data on the Secretariat's instructions. [Full controller registration details — TBC.]
What we collect
- Registration details — name, date of birth, phone number, email address and local government area.
- Identity data — National Identification Number and a photograph, for applicants and adult group members.
- Minors' data — name, age and a photograph captured as identity evidence, together with the parental or guardian consent record.
- Entry data — your category, genre, group roster and your submitted video recording.
- Correspondence — messages you send to the Support Desk, and notes officers record about your entry.
- Technical data — basic device and log information created when you use the Portal.
Why we collect it
To confirm you are eligible, to prevent duplicate and fraudulent entries, to adjudicate entries fairly, to contact you about your entry, and to run and promote the Christmas Carol Night.
Legal basis
We rely on consent for participation and for any publication of your performance; on legal obligation where identity verification is required; and on the performance of a task carried out in the public interest for the administration of a State programme. [Final basis mapping per NDPA section references — TBC by the Data Protection Officer.]
Children's data
Photographs of people under 18 are collected only as identity evidence and for duplicate detection. They are never published, and they are never shared with adjudicators. Parental or guardian consent is required before a minor may be enrolled at all, and separate consent governs whether any media featuring that minor may be published.
Sharing
Your data is shared only with: the Programme Secretariat and Ministry Desk Officers administering the Programme; the identity verification provider used to confirm NINs; and appointed adjudicators, who see performance material and scoring data but not identity documents or minors' photographs.
Your data is not sold, and is not shared for marketing by any third party. [Named processors and cross-border transfer position — TBC by the Data Protection Officer.]
Security
Access is restricted to named officers on a least-privilege basis, actions on entry records are logged, and identity data is stored separately from performance material. [Technical and organisational measures statement — TBC.]
Retention
Programme data is retained for 24 months after the event, after which it is deleted or irreversibly anonymised. Identity photographs of minors are deleted at the end of the Programme cycle unless a specific consent requires otherwise.
Your rights
Under the NDPA you have the right to be informed, to access your data, to have inaccurate data corrected, to have data erased in defined circumstances, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing already carried out.
Withdrawing consent after an entry has been adjudicated may mean the entry can no longer be considered.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission.
Contact the Data Protection Officer
Requests about your data, or complaints about how it has been handled, should be sent to the Programme's Data Protection Officer. [DPO name and direct contact — TBC.] General contact details are on the Contact & Support page.
Changes
This Notice may be updated. The date at the top of this page shows when it was last revised, and material changes will be communicated to registered entrants directly.