Privacy policy

Data controller

The data controller for the personal data collected on this site is the Juliana Amato Lumumba campaign team, represented by its director of publication.

For any question regarding the processing of your data or to exercise your rights, you may contact:

Data Protection Officer

Email: dpo@juliana-lumumba.org

Postal address: 86, Boulevard du 30 Juin, Kinshasa-Gombe, DRC

Data collected

The site collects two types of data:

Data provided voluntarily

When you use the site forms (contact, newsletter subscription, interview request), you provide us with certain personal information: surname, first name, email address, country, organisation, role, and the content of your message.

Anonymous technical data

During your browsing, certain technical data is collected anonymously for aggregated statistical-analysis purposes: pages viewed, visit duration, browser type, operating system, screen resolution, country of origin of the connection (without fine-grained geolocation).

This technical data is collected via a privacy-respecting analytics tool (Plausible Analytics or Matomo configured without tracking cookies). No advertising, profiling or third-party tracking cookie is used on this site.

Purposes of processing

Your data is collected solely for the following purposes:

• Process your request, message or enquiry
• Send you the campaign newsletter if you have subscribed
• Send you, where applicable, information on the progress of the campaign, if you have consented
• Compile anonymous traffic statistics to improve the site
• Comply with any legal, regulatory or judicial obligation

Your data is never sold, resold, shared or rented to third parties for commercial, political or advertising purposes.

Retention period

Data is retained for a period strictly necessary for the purposes for which it was collected:

• Data from a contact form: 12 months after the last interaction
• Newsletter subscription data: until you unsubscribe
• Anonymous technical data: 25 months maximum
• Data subject to a legal retention obligation: the period set by the applicable law

Your rights

In accordance with the GDPR and applicable legislation, you have the following rights over your data:

• Right of access — You may ask to know what data we hold about you.
• Right of rectification — You may request the correction of inaccurate information.
• Right to erasure — You may request the deletion of your data.
• Right to restriction — You may request that the processing of your data be restricted.
• Right to portability — You may request to receive your data in a structured format.
• Right to object — You may object to the processing of your data.
• Right to withdraw consent — For processing based on your consent, you may withdraw it at any time.

To exercise these rights, write to us at dpo@juliana-lumumba.org specifying the nature of your request. We will respond within a maximum of 30 days.

In the event of an unsatisfactory response, you may lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés) in France or with the data-protection authority competent in your country.

Data security

We implement appropriate technical and organisational measures to protect your data:

• Systematic encryption of site connections (HTTPS / TLS 1.3)
• Application firewall (Web Application Firewall) managed by Cloudflare
• Encrypted and geo-redundant backups
• Data access restricted to the sole authorised members of the team, with two-factor authentication
• Regular security audits

Despite our efforts, no computer system is fully impregnable. In the event of a data breach affecting your personal information, we undertake to inform you without delay, in accordance with our legal obligations.

Cookies and similar technologies

This site uses a minimal number of cookies, strictly necessary for its operation (session cookies, language-preference cookies). No advertising, profiling or third-party tracking cookie is placed in your browser.

On your first visit, an information banner allows you to read this policy. No consent is required for strictly necessary cookies.

For more information on the cookies placed and their retention period, see the detail in the "Cookie preferences" panel accessible from the site footer.

International transfers

Due to the international scope of the campaign, your data may be processed in the following countries:

• France (where Nanocreatives, the technical provider, is established)
• Democratic Republic of the Congo (headquarters of the campaign team)
• United States (Cloudflare, application-security provider)

For transfers outside the European Union, we rely on the standard contractual clauses adopted by the European Commission and on the appropriate safeguards provided for by the GDPR.

Modification of the policy

This privacy policy may be modified at any time to reflect technical, legal or organisational changes. Any substantial modification will be notified to you via an information banner on the site and, where applicable, by email for newsletter subscribers.