Privacy policy
The data collected is processed by GIM-UEMOA for the purposes of organising SMR9, in accordance with Senegalese Act 2008-12 on the protection of personal data.
The privacy policy is being drafted
The logistics and legal commission is finalising this document ahead of the filing with Senegal's personal data protection authority. The principles already applied by the platform are set out below.
Personal data protection
- This consent is mandatory: without it, your registration cannot be recorded. It covers the handling of your registration, the issuing of your badge and access control on site.
- Optional, separate consent. It allows exhibitors to keep your contact details when they scan your badge, and unlocks B2B meeting requests. You may withdraw it at any time.
- Your data is kept for twelve months after the edition, excluding aggregated statistics.
- Processed in accordance with Senegalese Act 2008-12. No data is sold or transferred to third parties.
My details
- Request a copy of my data
- Request deletion of my data
- Withdraw my consent
Your right to erasure
From “My account” you can erase your data yourself, immediately and without going through a committee. So that an already-open sign-in link is not enough to destroy an account, a fresh code is sent to your address at the moment of the act.
What is erased
- Your identity: name, first name, email address, job title, institution, photo.
- Your sign-in links and codes, and your devices’ notification subscriptions.
- Your agenda, your Wallet registrations, your speaker profile and your booth team memberships.
What is kept, detached from you
- Your GIM-Awards vote stays in the tally: a ballot is not withdrawn from a vote, it is detached from its author.
- Your check-ins stay: attendance is a fact, and the show has an access-traceability obligation.
- The consent register stays: it proves what you had consented to before the erasure.
- Contacts collected by exhibitors stay with them, without your identity or the free-text note attached to them.
- Messages in an appointment thread stay, without their author.
Delays and limits to know about
- The platform’s daily encrypted backups are kept for 12 months: your data remains in them until they are replaced, within that period.
- So that your erasure survives a backup restoration, a technical identifier and the date of the erasure are kept in a register held outside the database. This register does not contain your identity (no name, no address, no IP address); only a comparison with an old backup would link it to you. It is kept at least as long as the database backups, that is 12 months.
- The trace of the erasure itself is kept, without name, address or IP address: it proves that it happened, and when.
- Public pages (speaker profiles, booth teams) are cached for up to 60 seconds: a profile may stay visible for a short moment after the erasure.
- An access-control station that has already synchronised keeps names until its next synchronisation; your badge, however, is invalidated and will be refused.
The limit of this right
Anonymisation applies to what we hold, never to a copy that has left our servers: a contact export already downloaded by an exhibitor is beyond the product’s reach.