GDPR Compliance

Last updated: September 2026 | Embassy of Botswana, Brussels

GDPR Compliance Statement

The Embassy of the Republic of Botswana in Brussels is committed to full compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), which came into effect on 25 May 2018, and the Belgian Data Protection Act of 30 July 2018.

As a diplomatic mission operating within the European Union, we recognise our obligations to protect the personal data of EU residents and all individuals whose data we process in connection with our diplomatic and consular activities.

Key GDPR Principles We Follow

1. Lawfulness, Fairness and Transparency

We only process personal data where we have a lawful basis to do so. We are transparent about how we use data through this GDPR notice and our Privacy Policy.

2. Purpose Limitation

Personal data collected for one purpose is not used for another incompatible purpose. Consular data is used exclusively for consular functions; website analytics data is used solely to improve our online services.

3. Data Minimisation

We collect only the minimum personal data necessary for the specific purpose. We regularly review our data collection practices to ensure we do not retain unnecessary information.

4. Accuracy

We take reasonable steps to ensure that personal data we hold is accurate and kept up to date. You may request correction of any inaccuracies.

5. Storage Limitation

Personal data is retained only for as long as necessary for its stated purpose, or as required by applicable laws. Website analytics data is stored only in your own browser and is not retained on Embassy servers.

6. Integrity and Confidentiality

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Our admin interface is password-protected, and all Embassy systems follow security best practices.

7. Accountability

We maintain records of our data processing activities and have designated a point of contact for data protection matters.

Lawful Bases for Processing

We rely on the following GDPR lawful bases:

Article 6(1)(c) — Legal obligation: Processing required by consular law, the Vienna Convention on Consular Relations, and Botswana legislation.
Article 6(1)(e) — Public task: Processing necessary for the performance of our official diplomatic and consular mandate.
Article 6(1)(a) — Consent: Where you have freely given consent (e.g. newsletter subscription).
Article 6(1)(f) — Legitimate interests: For aggregate, anonymised website analytics.

Special Categories of Data

Where consular processing requires special category data (e.g. health information for certain applications), we rely on Article 9(2)(g) (substantial public interest) or Article 9(2)(a) (explicit consent), and apply enhanced safeguards.

International Transfers

Data may be transferred to the Government of Botswana (a third country under GDPR). Such transfers are made under appropriate safeguards including standard contractual clauses or diplomatic data-sharing protocols, in compliance with Chapter V of the GDPR.

Data Subject Rights — How to Exercise Them

Under GDPR Articles 15–22, you have the right to:

Access (Art. 15) — Obtain a copy of your personal data
Rectification (Art. 16) — Correct inaccurate data
Erasure (Art. 17) — Request deletion ("right to be forgotten")
Restriction (Art. 18) — Limit how your data is processed
Data portability (Art. 20) — Receive your data in machine-readable format
Object (Art. 21) — Object to processing for legitimate interests
Not be subject to automated decisions (Art. 22) — We do not make automated decisions affecting you

To exercise any right, write to us at: boteur@gov.bw or by post to 169 Avenue de Tervuren, 1150 Brussels, Belgium. We will acknowledge your request within 5 working days and respond substantively within 30 days.

Supervisory Authority

You have the right to lodge a complaint with the Belgian supervisory authority:

Autorité de protection des données (APD) / Gegevensbeschermingsautoriteit (GBA)
Rue de la Presse 35, 1000 Brussels, Belgium
Tel: +32 2 274 48 00
Web: www.dataprotectionauthority.be

Data Protection Contact

For all GDPR-related enquiries, contact the Embassy Administration at:
Email: boteur@gov.bw
Address: Embassy of the Republic of Botswana, 169 Avenue de Tervuren, 1150 Brussels, Belgium
Tel: +32 2 735 20 70