Privacy Policy on www.govmu.org

From: Ish Sookun <ish_at_hacklog.mu>
Date: Wed, 23 Sep 2015 10:14:53 +0400

Dear Sir/Madam,

I visited the Ministry of Technology, Communication & Innovation
e-services [1] page. I was in search of information regarding the
electronic services offered by the ministry. When I click on any
service listed on the page, I am asked to log in with an account on
the govmu.org portal. I have an account. On the login page there is a
captcha [2] with a "Privacy & Terms" that I have to agree to. The
privacy and terms [3] are hosted on a domain other than govmu.org.

The privacy policy mentions the following:

    "When you use our services or view content provided by Google, we
automatically collect and store certain information in server logs.
This includes:

    - details of how you used our service, such as your search queries.
    - telephony log information like your phone number, calling-party
number, forwarding numbers, time and date of calls, duration of calls,
SMS routing information and types of calls.
    - Internet protocol address.
    - device event information such as crashes, system activity,
hardware settings, browser type, browser language, the date and time
of your request and referral URL.
    - cookies that may uniquely identify your browser or your Google Account."

The privacy policy in the footer of your website [4] mentions the following:

    "If the Government Online Portal requests you to provide personal
information, you will be informed of the particular purposes for which
that information is collected, used and/or disclosed. Any personal
information collected will not be kept longer than is necessary, and
will be deleted once the feedback requirement is met. Adequate
security measures have been taken to prevent loss, misuse and/or
alteration of your personal information.

    You may request access to your personal information that the
Government Online Portal may have collected. You also have the right
to request for the correction of any inaccuracies with respect to
personal information held on you, or where you can establish that the
information is incomplete or not up to date."

I would like to know what are the telephony log data that so far the
State of Mauritius has collected & recorded about me every time I
logged in www.govmu.org?

I am copying this email to the Data Protection Commissioner and the
Mauritius Internet Users mailing list for transparency.

[1] http://mtci.govmu.org/English/Services/Pages/default.aspx?ministry=132
[2] http://hacklog.mu/files/www-govmu-org-captcha.png
[3] http://www.google.com/intl/en/policies/privacy/
[4] http://www.govmu.org/English/Pages/PrivacyPolicy.aspx

Regards,

-- 
Ish Sookun
- Geek by birth, Linux by choice
- I blog at HACKLOG.mu
https://twitter.com/IshSookun ^^ Do you tweet?
Received on Wed Sep 23 2015 - 06:15:09 PST

This archive was generated by hypermail 2.3.0 : Wed Sep 23 2015 - 06:18:02 PST