General Privacy Policy

Purpose#

This policy describes the common principles applied by IMEDIATIS TECHLAB SARL when processing personal data across its corporate site, this legal center, and its products. It complements, without replacing, the privacy policy specific to each product (Topup+, Ewen, WAP.CM, Toké).

Scope#

This policy applies to all processing of personal data carried out by IMEDIATIS TECHLAB SARL as data controller, for visitors to its sites, its customers, its partners and the users of its products, subject to the specific provisions set out in each product's own privacy policy.

Definitions#

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on personal data (collection, storage, disclosure, deletion).
• Data controller: the party that determines the purposes and means of processing, here IMEDIATIS TECHLAB SARL.
• Data subject: the natural person whose data is processed.

Principles#

IMEDIATIS TECHLAB SARL processes personal data in accordance with Cameroonian law n° 2024/017 of December 23, 2024 on the protection of personal data, and applies the following principles:

• lawfulness, fairness and transparency of processing;
• purpose limitation to the actual needs of products and services;
• data minimization;
• accuracy and up-to-date data;
• storage limitation, based on retention periods defined per data category and per product;
• security and confidentiality of processing;
• accountability and documentation of processing activities.

This Legal & Trust Center itself requires no authentication, includes no data-collection form, and sets no non-essential cookie: browsing it therefore does not generate any personal data processing beyond the technical data strictly necessary for the security and availability of the site (see the cookie policy).

Rules and commitments#

Categories of data concerned#

Depending on the product used, IMEDIATIS TECHLAB SARL may process, among others: identification data, phone numbers, transaction data, account data, technical and logging data, and, for certain products, specific categories of data described in that product's own privacy policy.

Legal bases#

Processing carried out by IMEDIATIS TECHLAB SARL relies, depending on the case, on the performance of a contract, compliance with a legal obligation, the company's legitimate interest, or the data subject's consent, as specified in each product's privacy policy.

Data retention#

Data is kept for as long as necessary for the purposes of processing, plus any retention periods required by applicable law. Precise retention periods per data category will be published product by product, as they are validated by management.

Data transfers#

Where data is hosted or processed outside Cameroon, notably by technical providers, IMEDIATIS TECHLAB SARL ensures that such transfers comply with the safeguards required by applicable regulation.

Security#

IMEDIATIS TECHLAB SARL implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. These measures are detailed in the security policy.

Responsibilities#

The general management and the technical team of IMEDIATIS TECHLAB SARL are jointly responsible for defining, applying and monitoring the processing activities described in this policy and in each product's own privacy policy.

Exceptions#

Data processing concerning IMEDIATIS TECHLAB SARL's employees is governed by the company's internal policies and, for its public aspects, by the workplace policy.

Rights or reporting#

In accordance with law n° 2024/017, every data subject has a right of access, rectification, objection, restriction, erasure and, where provided by law, portability of their personal data. These rights may be exercised through our contact form, specifying the product concerned and the nature of the request.

Contact#

Any question about this policy may be sent through our contact form (category "Data privacy").

Document updates#

This policy is reviewed at least twice a year, or whenever a product, a provider, or applicable regulation changes significantly.

Version history#