Your personal data, plainly explained

• No advertising tracking. The public site installs no audience-measurement or advertising cookies and does not profile you.
• A single public form: the Contact form. What you write there is used to reply to you, nothing else.
• Your data is neither sold nor passed on for prospecting.
• You stay in control: access, correction, erasure, objection — see “Your rights”.

The data controller is EWES S.A.R.L., 1809, Araucarias Avenue, Hewa-Bora district, Ruashi commune, Lubumbashi, DRC. For any question about your data or to exercise your rights, write to arthurkaniki@gmail.com.

This policy applies Book III, Title III (“Personal data”) of the Digital Code (Ordinance-Law No. 23/010 of 13 March 2023), in particular Articles 192 to 196 (conditions of processing), 209 to 216 (individuals’ rights), 219 to 221 (controller’s obligations) and 244 (data breaches).

• Situation

  You write to us through the Contact form
  Data

  Name, organisation, e-mail address, telephone (optional), subject of your request, message, language of the page
  Why

  To answer your request. Basis: your consent, given by sending the form (Art. 192 and 193).
  Retention

  24 months after the last exchange, then deletion.
• Situation

  You receive an acknowledgement or a reply
  Data

  E-mail address, delivery status (sent, failed)
  Why

  To confirm your message arrived and keep proof of it.
  Retention

  Same as the contact message.
• Situation

  You have an account on the portal or the private document space
  Data

  Name, e-mail address, role, photo (optional), password (stored securely), connection data (browser, IP address)
  Why

  To manage your access and secure the space (Art. 219 and 221).
  Retention

  For the life of the account; connection data is kept for a limited period.
• Situation

  You use the portal or the private document space
  Data

  Activity log of the space: sign-ins and operations carried out on documents
  Why

  To protect documents and keep a record of the operations carried out (Art. 219).
  Retention

  5 years.
• Situation

  You visit the site
  Data

  Technical data sent by your browser (IP address, date and page requested) in server logs
  Why

  To keep the site secure and working properly.
  Retention

  12 months at most.

Please do not send sensitive data through the form (ethnic origin, political or religious opinions, trade-union membership, health, sex life…). The Digital Code in principle prohibits processing it (Art. 195) and we do not need it to answer a request.

• No audience measurement, targeted advertising or profiling; no automated decision concerns you.
• No social network, video or map embedded in our pages: links to those services are plain links and send nothing unless you click.
• No passing of your data to other organisations for prospecting without your consent (Art. 198).

• Authorised EWES staff. Contact messages are available only to those who must handle them; their access is limited to their duties (Art. 219-2).
• Our technical providers, who act on our behalf and are bound to confidentiality: the site host and the service that delivers e-mails.
• Authorities, only on a magistrate’s order or request in a judicial investigation (Art. 199).

The Digital Code requires personal data to be stored and hosted in the Democratic Republic of the Congo; a transfer to a host in another country is possible only if the Data Protection Authority recognises that country as offering an adequate level of protection and authorises it (Art. 201 and 202). EWES complies.

• Encrypted exchanges between your browser and the site.
• Access to data limited to authorised people only.
• Other technical and organisational measures appropriate to the sensitivity of the data (Art. 219 and 221).

If a data breach concerned you, EWES informs the Data Protection Authority and the people affected without delay, describing the nature of the incident, its likely consequences and the measures taken (Art. 244).

At any time, free of charge, you may:

• Know and access: ask whether we hold data about you, which data, where it comes from, who receives it and how long it is kept — and receive a copy (Art. 209 and 210).
• Have it corrected or updated if it is inaccurate, incomplete or out of date (Art. 214).
• Have it erased within 30 days when it is no longer necessary, or if you withdraw your consent (Art. 215).
• Object, on legitimate grounds, to your data being processed (Art. 213).
• Withdraw your consent, as easily as you gave it, without affecting what was done before (Art. 196).
• Retrieve your data in a structured, readable format, where the processing is based on your consent or a contract (Art. 211).

How. Write to arthurkaniki@gmail.com, or by post to EWES’s registered office, enclosing proof of identity. The law asks for a dated and signed request, by post or electronically (Art. 213 and 214). We reply within 30 days (60 days to supply a copy of the data, Art. 210).

If you believe your rights are not being respected, you may lodge a complaint with the Data Protection Authority (Art. 209 and 263), without prejudice to any court action.

The public site uses only trackers strictly necessary for it to work. Details are on the Cookies and trackers page.

This policy is revised when our practices change (new service, new provider, new data collected). The date of the last update is shown at the top of the page; for any significant change, a clear notice is displayed on the site.