Privacy policy

1. Data controller

The controller of personal data collected on the Site is:

2. Personal data collected

2.1. Types of data

In the course of using the Site, CAVIE may collect the following categories of personal data:

• Identification data: surname, first name, professional title;
• Contact data: email address, phone number, professional postal address;
• Professional data: role, organisation, sector of activity;
• Connection data: IP address, browsing data, cookies;
• Interaction data: event registrations, publication downloads, newsletter subscriptions.

2.2. How data is collected

Personal data is collected through the following means:

• contact and registration forms available on the Site;
• subscription to CAVIE newsletters and communications;
• registration for events, training sessions or programmes organised by CAVIE;
• direct interactions with CAVIE representatives;
• tracking technologies used while browsing the Site (cookies, web beacons).

3. Purposes of processing

Personal data collected is processed for the following purposes:

• Managing requests and user relations: processing information requests, answering questions, managing registrations;
• Communication and information: sending newsletters, event invitations, updates about CAVIE and the Power 237 project;
• Organising events and training: managing registrations, logistics, issuing certificates;
• Improving the Site: analysing traffic, improving user experience, personalising content;
• Complying with legal obligations: retaining data to meet legal and regulatory requirements.

4. Legal basis for processing

Personal data processing carried out by CAVIE relies on the following legal bases:

• Consent: for sending communications and newsletters;
• Performance of a contract: for managing event and training registrations;
• Legitimate interest: for improving the Site and for institutional communication;
• Legal obligation: for retaining certain data in accordance with regulatory requirements.

5. Recipients of the data

Personal data collected is intended exclusively for authorised CAVIE staff and, where applicable, the following categories of recipients:

• technical providers involved in hosting and maintaining the Site;
• institutional partners in the context of jointly organised events, subject to the user's prior consent;
• competent authorities in the event of a legal obligation or judicial request.

CAVIE undertakes never to sell, rent or transfer personal data to third parties for commercial purposes.

6. Transfers of data outside Cameroon

In the course of its operations, CAVIE may transfer personal data to countries located outside Cameroon. Such transfers are carried out in compliance with appropriate safeguards, in accordance with applicable data protection regulations.

CAVIE ensures that any transfer of data to a third country or international organisation is framed by adequate protection mechanisms, such as standard contractual clauses approved by the competent authorities.

7. Data retention period

Personal data is retained for the period strictly necessary to achieve the purposes for which it was collected, in accordance with the following principles:

• Contact and identification data: retained for the duration of the relationship with CAVIE and up to three (3) years after the last contact;
• Newsletter data: retained until consent is withdrawn or the user unsubscribes;
• Connection data and cookies: retained for a maximum of thirteen (13) months;
• Data required for legal or regulatory purposes: retained for the period required by applicable legislation.

Once the retention periods expire, data is securely deleted or anonymised.

8. Data security

CAVIE implements all appropriate technical and organisational measures to ensure a level of security suited to the risks, in order to protect personal data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures include in particular:

• securing access to information systems;
• encrypting sensitive data;
• limiting data access to strictly authorised staff;
• carrying out regular secure backups;
• establishing security incident management procedures.

9. Rights of data subjects

In accordance with applicable data protection regulations, any data subject has the following rights.

9.1. Right of access

Users have the right to obtain confirmation as to whether data concerning them is being processed and, where it is, to access that data and information relating to its processing.

9.2. Right to rectification

Users have the right to obtain the rectification of inaccurate data concerning them, as well as the right to complete incomplete data.

9.3. Right to erasure

Users have the right to obtain the erasure of their personal data in the cases provided for by the regulations, in particular where the data is no longer necessary for the purposes for which it was collected.

9.4. Right to restriction of processing

Users have the right to obtain restriction of processing in certain circumstances defined by the regulations.

9.5. Right to object

Users have the right to object, on grounds relating to their particular situation, to the processing of data concerning them based on legitimate interest. Users also have an absolute right to object to the processing of their data for marketing purposes.

9.6. Right to data portability

Users have the right to receive the personal data concerning them that they have provided to CAVIE, in a structured, commonly used and machine-readable format, and to transmit it to another controller.

9.7. Right to withdraw consent

Where processing is based on consent, users have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent carried out before its withdrawal.

9.8. How to exercise these rights

Users may exercise their rights by sending a request to CAVIE:

CAVIE undertakes to respond to any request within one (1) month of receipt. This period may be extended by two (2) months where necessary, taking into account the complexity and the number of requests. CAVIE will inform the user within one month of receiving the request.

10. Cookies and similar technologies

10.1. Definition and use

The Site uses cookies and similar technologies to improve user experience, analyse use of the Site and personalise content. A cookie is a small text file stored on the user's device when the Site is visited.

10.2. Types of cookies used

CAVIE uses the following categories of cookies:

• Strictly necessary cookies: essential to the operation of the Site;
• Performance cookies: used to analyse use of the Site and improve its performance;
• Functional cookies: used to remember user choices and personalise the experience;
• Audience measurement cookies: used to understand how visitors interact with the Site.

10.3. Managing cookies

Users can configure their browser at any time to refuse cookies or be informed when they are deposited. Configuration differs depending on the browser used. Users can consult their browser's help section for configuration instructions.

Please note that refusing certain cookies may affect the optimal operation of the Site and limit access to certain features.

11. Changes to the privacy policy

CAVIE reserves the right to modify this privacy policy at any time in order to adapt it to legislative, regulatory, case-law or technological developments. Any substantial change will be brought to users' attention by an appropriate notification on the Site. It is the user's responsibility to regularly consult the latest version of the privacy policy.

12. Right to lodge a complaint

If users consider that the processing of their personal data infringes their rights, they have the right to lodge a complaint with the competent supervisory authority for personal data protection in Cameroon, in accordance with the regulations in force.

13. Contact and questions

For any question about this privacy policy or the exercise of your rights, you can contact CAVIE: