Data Protection

For personal data collected through this portal, KenGen acts as the data controller. Service providers that host or support the portal act as data processors on KenGen's instructions.

• Personal data is processed lawfully, fairly and transparently.
• It is collected for specified, explicit and legitimate procurement purposes only.
• We collect only what is adequate, relevant and necessary for those purposes.
• We take reasonable steps to keep it accurate and up to date.
• It is kept no longer than necessary and protected by appropriate security safeguards.

Under the Data Protection Act, 2019 you have the right to:

• be informed of the use to which your personal data is to be put;
• access your personal data in our custody;
• object to the processing of all or part of your personal data;
• correction of false or misleading data; and
• deletion of false or misleading data about you.

Send your request to tenders@kengen.co.ke with enough information for us to identify you and the data concerned. We will respond within the timelines set by law. If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner.

Where a personal data breach is likely to result in a real risk of harm, KenGen will notify the Data Protection Commissioner and, where required, affected data subjects, as provided by law.