Data protection — GDPR

Privacy Policy

In force since April 30, 2026

This policy describes the personal data processing carried out on the institutional website www.bwoesports.com. It is drafted in compliance with Regulation (EU) 2016/679 (« GDPR »), the French Data Protection Act n°78-17 of 6 January 1978 as amended, and the Cameroonian Act n°2010/012 on cybersecurity and cybercrime, to the extent applicable to our activities.

01.Data controller

The data controller is Bwoe Sports (entité éditrice — immatriculation en cours), reachable at Bwoe Sports — Direction juridique — Yaoundé, Cameroun. For any question regarding the protection of your data, please write to privacy@bwoesports.com. A Data Protection Officer (DPO) will be appointed upon public launch of the platform; until then, the address above acts as the single point of contact.

02.Data collected and purposes

The Site only collects strictly necessary data:

CategoryDataPurposeLawful basis
Contact formName, email, message, organisation (optional)Reply to your requestPre-contractual measures (art. 6.1.b)
NewsletterEmail addressSend our product updatesConsent (art. 6.1.a)
Audience measurementPages visited, traffic source, duration — aggregated and anonymisedImprove Site contentLegitimate interest (art. 6.1.f) — consent-exempt (CNIL)
Technical logsTruncated IP address, user-agent, timestampSecurity, abuse prevention, debugLegitimate interest (art. 6.1.f)

No sensitive data (health, political or religious opinions, sexual orientation, etc.) is requested. No automated decision producing legal effects is made.

03.Retention periods

  • Contact requests: 36 months from the last exchange, then 12-month intermediate archive for evidentiary needs.
  • Newsletter: until consent is withdrawn (unsubscribe link in every email). Address kept 30 days in a suppression list to prevent accidental re-subscriptions.
  • Audience measurement: 13 months maximum (CNIL recommendation).
  • Technical logs: 12 months.

04.Recipients and processors

Your data is accessible only to authorised Bwoe Sports teams. It may be processed by the following processors, acting on documented instructions and bound by contractual undertakings compliant with Article 28 GDPR:

  • Vercel Inc.Hébergement et CDN du site marketing. Country: USA. Safeguards: EU SCC + EU-US Data Privacy Framework.
  • Resend, Inc.Routage transactionnel des e-mails (formulaire de contact, newsletter). Country: USA. Safeguards: EU SCC + EU-US Data Privacy Framework.
  • Plausible Insights OÜMesure d'audience anonymisée et sans cookies (le cas échéant). Country: Estonie / UE. Safeguards: Hébergement UE — pas de transfert hors EEE.

Your data is never sold, rented or disclosed to third parties for marketing.

05.Transfers outside the European Union

Some technical processors are established in the United States. Transfers are framed by the Standard Contractual Clauses adopted by the European Commission (Decision (EU) 2021/914) and, where applicable, by certification under the EU-US Data Privacy Framework of the US Department of Commerce. A copy of the safeguards can be requested at privacy@bwoesports.com.

06.Your rights

Pursuant to Articles 15 to 22 GDPR, you have the right:

  • to access your data and obtain a copy;
  • to request rectification of inaccurate or incomplete data;
  • to request erasure (« right to be forgotten ») under conditions provided by law;
  • to request restriction of processing;
  • to object to processing based on legitimate interest;
  • to data portability in a structured, machine-readable format;
  • to withdraw consent at any time, without affecting the lawfulness of prior processing;
  • to define directives concerning the fate of your data after your death.

To exercise these rights, write to privacy@bwoesports.com. We will respond within one month, extendable by two months in case of complexity. Proof of identity may be requested in case of reasonable doubt.

07.Complaint to a supervisory authority

Without prejudice to other remedies, you may lodge a complaint with the French data protection authority (CNIL cnil.fr) or with the data protection authority competent in your country of residence. For Cameroonian users, ANTIC (National Agency for Information and Communication Technologies) is competent.

08.Security

Bwoe Sports implements technical and organisational measures appropriate to the risk: end-to-end TLS encryption, strict security headers (HSTS preload, CSP, X-Frame-Options DENY, Permissions-Policy), strong authentication for administrative access, environment separation, logging, encrypted backups and periodic security reviews. In case of breach likely to create a risk to your rights, notification will be sent to the competent supervisory authority within 72 hours and, if the risk is high, to the data subjects.

09.Cookies

Details of trackers used and the procedure to manage your preferences are described in the Cookie Policy.

10.Policy updates

This policy may be updated to reflect regulatory or technical developments. The effective date displayed in the footer prevails. Any material change will be signalled on the home page and, where applicable, by email to newsletter subscribers.