Preamble
GlobalProcure Solutions is committed to protecting the confidentiality and security of personal data collected through this website. The processing of your data is carried out in accordance with Senegal Law No. 2008-12 of 25 January 2008 on the protection of personal data and, for visitors residing in the European Union, with the General Data Protection Regulation (Regulation EU 2016/679, GDPR).
Data controller
The controller of your personal data is:
- Company
- GlobalProcure Solutions, SARL with share capital of 1,000,000 CFA francs
- Trade register (RCCM)
- SN DKR 2025 B 33926
- Registered office
- SD City, Villa 135, Diamniadio, Dakar, Senegal
- Represented by
- Aminata Diallo, Managing Director
- Data protection contact
- contact@globalprocuresolutions.com
Data collected
The personal data collected depends on the type of request made:
Contact form
- first and last name
- professional email
- phone (optional)
- organization
- role
- subject of the inquiry
- message content
Free diagnostic form
- organization name
- country / project location
- sector of activity
- structure type
- nature of the need
- project description
- desired timeline
- contact name and role
- professional email
- phone
Resource downloads (upcoming)
- name
- organization
- role
- professional email
- country
Technical data
IP address, browser type, pages visited. This information is collected through server logs, retained for a maximum of 30 days, and used for security and abuse-prevention purposes.
Purposes of processing
Your data is processed for the following purposes:
- responding to your contact and diagnostic requests
- qualifying your need and, where applicable, preparing an engagement proposal
- sending, subject to your explicit consent, communications related to GlobalProcure Solutions services
- improving the quality of the website and preventing technical abuse
Legal basis for processing
Processing relies on the following legal bases:
- your explicit consent, collected via the checkbox on each form (Art. 6.1.a GDPR, Art. 33 of Law 2008-12)
- the legitimate interest of GlobalProcure Solutions in responding to a request you have initiated (Art. 6.1.f GDPR)
Recipients
Your data is intended for the internal team of GlobalProcure Solutions, to the exclusion of any commercial third party.
Two technical subprocessors may handle this data on our behalf:
- Vercel Inc. (United States) — website hosting
- Resend, Inc. (United States) — transactional email notifications
These transfers outside the European Union are governed by the Standard Contractual Clauses approved by the European Commission on 4 June 2021. No assignment or resale to commercial third parties is practiced. No advertising-related sharing is carried out.
Retention period
Data is retained for the period strictly necessary for the purpose of processing:
- contact requests with no follow-up: 3 years from the last exchange (standard B2B prospecting period)
- qualified prospects (diagnostic completed without contract): 5 years
- clients under contract: contract duration plus 10 years (Senegalese accounting and legal archiving obligations)
- server technical logs: 30 days
- at any time, you may exercise your right to erasure (subject to applicable legal obligations to the contrary)
International transfers
Some data is processed by subprocessors located in the United States (Vercel for hosting, Resend for transactional emails). These transfers are governed by the Standard Contractual Clauses approved by the European Commission on 4 June 2021. No transfer to other third countries is carried out.
Your rights
In accordance with Law 2008-12 and the GDPR, you have the following rights over your personal data:
- right of access to your data
- right to rectification of inaccurate data
- right to erasure ("right to be forgotten")
- right to restriction of processing
- right to object to processing
- right to data portability
- right to withdraw your consent at any time
- right to set post-mortem directives
How to exercise your rights
To exercise your rights, send your request by email to contact@globalprocuresolutions.com, specifying the nature of the request and attaching a copy of an identity document (for verification). A response will be provided within 30 days in accordance with Art. 12 GDPR.
Appeal to a supervisory authority
In case of disagreement regarding the processing of your data, you may lodge a complaint with the competent supervisory authority:
- In Senegal: Commission de Protection des Données Personnelles (CDP), 38, rue Carnot, Dakar — www.cdp.sn
- In the European Union: the supervisory authority of your country of residence (for example, in France, the CNIL — www.cnil.fr; in Belgium, the APD; in Germany, the BfDI; etc.)
Cookies and trackers
The website does not use any tracking, profiling, or advertising cookies. Only one strictly necessary technical cookie is used to persist the chosen language (next-intl), with a lifetime limited to the session. This cookie is exempt from the prior consent requirement under applicable provisions (Art. 82 of the French Data Protection Act, recital 30 of the GDPR).
Security
GlobalProcure Solutions implements appropriate technical and organizational measures to protect your data against any loss, unauthorized access, disclosure, or destruction. The website is fully encrypted in HTTPS, access to collected data is restricted to the internal team, and our technical subprocessors are ISO 27001 and SOC 2 certified.
Policy updates
This privacy policy may be updated to reflect legal, regulatory, or technical changes. The last update date is indicated at the bottom of the page. We invite you to review it regularly.
Contact
For any question regarding the protection of your personal data, you may write to us at contact@globalprocuresolutions.com.