In force since April 30, 2026
This policy describes the personal data processing carried out on the institutional website www.bwoesports.com. It is drafted in compliance with Regulation (EU) 2016/679 (« GDPR »), the French Data Protection Act n°78-17 of 6 January 1978 as amended, and the Cameroonian Act n°2010/012 on cybersecurity and cybercrime, to the extent applicable to our activities.
01.Data controller
The data controller is Bwoe Sports (entité éditrice — immatriculation en cours), reachable at Bwoe Sports — Direction juridique — Yaoundé, Cameroun. For any question regarding the protection of your data, please write to privacy@bwoesports.com. A Data Protection Officer (DPO) will be appointed upon public launch of the platform; until then, the address above acts as the single point of contact.
02.Data collected and purposes
The Site only collects strictly necessary data:
| Category | Data | Purpose | Lawful basis |
|---|---|---|---|
| Contact form | Name, email, message, organisation (optional) | Reply to your request | Pre-contractual measures (art. 6.1.b) |
| Newsletter | Email address | Send our product updates | Consent (art. 6.1.a) |
| Audience measurement | Pages visited, traffic source, duration — aggregated and anonymised | Improve Site content | Legitimate interest (art. 6.1.f) — consent-exempt (CNIL) |
| Technical logs | Truncated IP address, user-agent, timestamp | Security, abuse prevention, debug | Legitimate interest (art. 6.1.f) |
No sensitive data (health, political or religious opinions, sexual orientation, etc.) is requested. No automated decision producing legal effects is made.
03.Retention periods
- Contact requests: 36 months from the last exchange, then 12-month intermediate archive for evidentiary needs.
- Newsletter: until consent is withdrawn (unsubscribe link in every email). Address kept 30 days in a suppression list to prevent accidental re-subscriptions.
- Audience measurement: 13 months maximum (CNIL recommendation).
- Technical logs: 12 months.
04.Recipients and processors
Your data is accessible only to authorised Bwoe Sports teams. It may be processed by the following processors, acting on documented instructions and bound by contractual undertakings compliant with Article 28 GDPR:
- Vercel Inc. — Hébergement et CDN du site marketing. Country: USA. Safeguards: EU SCC + EU-US Data Privacy Framework.
- Resend, Inc. — Routage transactionnel des e-mails (formulaire de contact, newsletter). Country: USA. Safeguards: EU SCC + EU-US Data Privacy Framework.
- Plausible Insights OÜ — Mesure d'audience anonymisée et sans cookies (le cas échéant). Country: Estonie / UE. Safeguards: Hébergement UE — pas de transfert hors EEE.
Your data is never sold, rented or disclosed to third parties for marketing.
05.Transfers outside the European Union
Some technical processors are established in the United States. Transfers are framed by the Standard Contractual Clauses adopted by the European Commission (Decision (EU) 2021/914) and, where applicable, by certification under the EU-US Data Privacy Framework of the US Department of Commerce. A copy of the safeguards can be requested at privacy@bwoesports.com.
06.Your rights
Pursuant to Articles 15 to 22 GDPR, you have the right:
- to access your data and obtain a copy;
- to request rectification of inaccurate or incomplete data;
- to request erasure (« right to be forgotten ») under conditions provided by law;
- to request restriction of processing;
- to object to processing based on legitimate interest;
- to data portability in a structured, machine-readable format;
- to withdraw consent at any time, without affecting the lawfulness of prior processing;
- to define directives concerning the fate of your data after your death.
To exercise these rights, write to privacy@bwoesports.com. We will respond within one month, extendable by two months in case of complexity. Proof of identity may be requested in case of reasonable doubt.
07.Complaint to a supervisory authority
Without prejudice to other remedies, you may lodge a complaint with the French data protection authority (CNIL — cnil.fr) or with the data protection authority competent in your country of residence. For Cameroonian users, ANTIC (National Agency for Information and Communication Technologies) is competent.
08.Security
Bwoe Sports implements technical and organisational measures appropriate to the risk: end-to-end TLS encryption, strict security headers (HSTS preload, CSP, X-Frame-Options DENY, Permissions-Policy), strong authentication for administrative access, environment separation, logging, encrypted backups and periodic security reviews. In case of breach likely to create a risk to your rights, notification will be sent to the competent supervisory authority within 72 hours and, if the risk is high, to the data subjects.
10.Policy updates
This policy may be updated to reflect regulatory or technical developments. The effective date displayed in the footer prevails. Any material change will be signalled on the home page and, where applicable, by email to newsletter subscribers.
