GDPR

The General Data Protection Regulation (GDPR) is a European regulation that came into force on 25 May 2018. It governs the processing of personal data of EU residents by any organization, regardless of its geographical location.

The GDPR strengthens individuals' rights over their personal data and imposes strict obligations on organizations that process it, particularly regarding transparency, security and accountability.

In accordance with Article 5 of the GDPR, we apply the following fundamental principles in all our data processing:

Proweb SARL concretely commits to complying with the GDPR through the following measures:

• Maintenance of a register of processing activities
• Collection of explicit consent for processing that requires it
• Clear information to data subjects on the use of their data
• Regular training of our teams on data protection best practices
• Implementation of appropriate technical and organisational measures
• Contractual management of relationships with our subcontractors
• Procedure for managing personal data breaches
• Integration of data protection from design (Privacy by Design)

In accordance with Article 30 of the GDPR, Proweb SARL maintains a register of processing activities. Here is an overview of the main processing operations carried out:

• Contact management Processing of requests via the contact form
• Business relationship Prospect and client follow-up, preparation of quotes
• Invoicing Issuance and archiving of invoices and accounting documents
• Audience analysis Measurement of website traffic
• Communication Sending information about our services (with consent)
• Security Connection logs to prevent unauthorised access

As Proweb SARL is established in Togo, a third country to the European Union, the data of our European clients is subject to international transfer. This transfer is governed in accordance with Articles 44 to 49 of the GDPR.

We implement appropriate safeguards to ensure an adequate level of protection for transferred data:

• Standard contractual clauses approved by the European Commission
• Additional technical measures including encryption and pseudonymisation
• Strict restriction of data access to authorised personnel only
• Contractual confidentiality commitments with all staff

Proweb SARL may use subcontractors in the course of its activities. In accordance with Article 28 of the GDPR, all subcontractors are bound by a contract guaranteeing a level of protection equivalent to ours.

• Web hosting provider Processing limited to website hosting and availability
• Analytical tool Audience measurement in compliance with GDPR
• Professional messaging Communication with clients and prospects

As a data subject residing in the European Union, you have the following rights under the GDPR:

In the event of a personal data breach, Proweb SARL undertakes to comply with the obligations set out in Articles 33 and 34 of the GDPR:

• Notification to the supervisory authority within 72 hours of becoming aware of the breach, where it is likely to result in a risk to the rights and freedoms of individuals
• Communication to data subjects without undue delay where the breach is likely to result in a high risk to their rights and freedoms
• Internal documentation of all breaches, including those that do not require notification

For any questions regarding our GDPR compliance, the exercise of your rights, or to report a concern about the processing of your data:

• Email contact@prowebtg.com
• Phone +228 91 63 32 48 | +228 90 04 81 99
• Mail Proweb SARL — Quartier Assivito, Rue Aniko Palako — Lomé, Togo
• Response time Maximum 30 days from receipt