- Home
- Privacy Policy
Privacy Policy
How Afritech Solutions collects, uses and protects personal data, and the choices you have.
Afritech Solutions (“Afritech”, “we”, “us”) is an IT company based in Kinshasa, Democratic Republic of Congo. This policy explains how we collect, use, share and protect personal data when you visit afritech-solutions.com, contact us, or deal with us as a client, supplier or partner. We handle personal data in line with the Digital Code of the Democratic Republic of Congo (Ordonnance-loi n° 23/010 of 13 March 2023) and, where it applies to you, the EU General Data Protection Regulation (GDPR).
Who we are
Afritech Solutions is the controller of the personal data described in this policy.
What this policy covers
This policy applies to:
- visitors to our website;
- people who contact us by form, email, phone or in person;
- contacts at our clients, prospective clients, suppliers and partners.
It does not cover personal data we handle on behalf of our clients while delivering services. That is explained in section 5.
Personal data we collect
What you give us. When you use our contact form we collect your full name, work email address and the message you write. If you email or call us, we collect your contact details, your company and role if you share them, and the content of our conversation. If you become a client, we also keep the contact, contract and billing details needed to work with you.
What we collect automatically. When you visit our website, our servers record technical data such as your IP address, browser and device type, the pages you view, the date and time of your visit and the page that referred you. We use this to keep the website working and secure.
We do not ask for sensitive personal data through our website, such as health, religious or political information. Please do not send it to us.
How and why we use it
We use personal data to:
- respond to your enquiries and give you the information you ask for;
- prepare proposals, deliver and support our services, manage contracts and send invoices;
- keep our website, systems and clients secure, and detect and prevent fraud or abuse;
- meet legal, tax, accounting and regulatory obligations;
- send you news about our services where you have asked for it or the law allows, with a way to opt out at any time;
- understand how our website is used so we can improve it.
Depending on the situation, we rely on your consent; on the need to perform a contract with you or take steps before entering one; on our legal obligations; and, where the law allows, on our legitimate interests in running, securing and improving our business.
We do not sell personal data, and we do not make decisions about you using automated processing that has legal or similarly significant effects.
Data we handle for our clients
When we deliver services such as network management, hosting, payment platforms or business software, we may process personal data that belongs to our clients’ customers, staff or users. In those cases our client decides why and how the data is used, and we act only on their documented instructions under a written agreement, as a processor.
If you are a customer of one of our clients and want to use your rights, please contact that client first. We will help them respond.
International transfers
Some of our service providers may store or process personal data outside the Democratic Republic of Congo. When we transfer personal data across borders, we do so in line with applicable law and put appropriate safeguards in place, such as contractual protections and checks on the recipient’s security.
How long we keep it
We keep personal data only for as long as we need it for the purposes in this policy, then delete or anonymise it. As a guide:
- enquiries that do not lead to a contract: up to [24 months] after our last contact;
- client and contract records: for the length of the relationship and for as long as tax, accounting and legal limitation rules require;
- website server logs: up to [12 months].
How we protect it
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and disclosure, including access controls, secure transmission and confidentiality obligations for our team and providers. No online service is completely secure. If a breach affects your personal data, we will tell you and the competent authority where the law requires it.
Your rights
Subject to applicable law, you have the right to:
- ask for access to the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- ask us to restrict how we use it, or object to our use of it;
- ask for a copy of your data in a portable format;
- withdraw your consent at any time, where we rely on it;
- complain to the competent data protection authority.
To use any of these rights, email info@afritech-solutions.com with the subject “Privacy request”. We may ask you to confirm your identity first. We will reply within the time the law requires.
Children
Our website and services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
Links to other sites
Our website may link to websites run by others. We do not control them and are not responsible for their privacy practices, so please read their policies.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date. If a change is significant, we will take reasonable steps to tell you.
Contact us
If you have a question about this policy or about your personal data, contact us:
If you are not satisfied with our response, you have the right to complain to the competent data protection authority.