This Privacy Statement (hereinafter the “Privacy Policy”) describes how DIASPAT (a multi-member simplified joint-stock company, RCCM CD/KNG/RCCM/24-B-04305, Kinshasa, DRC) collects, uses, stores, and protects the personal data of users of the website https://diaspat.com/.

DIASPAT is committed to respecting the privacy of its users and to processing their personal data in accordance with the General Data Protection Regulation (GDPR – EU 2016/679), which applies as a best practice given the international nature of the Site, as well as with the laws in force in the Democratic Republic of the Congo.

1. Data Controller

• Name : DIASPAT
• Adress : Boulevard du 30 Juin, Immeuble SANASH, 6e Étage, Appartement C, Quartier Golf Résidentiel, Commune de la Gombe, Kinshasa, RDC
• Email : Diaspatrdc@gmail.com

2. Data collected

DIASPAT collects the following personal data depending on your interactions with the Site:

2.1 Contact Form

• First and last name
• Email address
• Message

2.2 Subscribe to the newsletter

• Email address
• Communication preferences (if applicable)

2.3 Create a user account

• First and last name
• Email address
• Password (stored in encrypted form)
• Purchase history and viewed items

2.4 Online payment

Payments are processed by Stripe Inc. DIASPAT does not directly collect or store banking information. Stripe may collect: card number (encrypted), expiration date, billing country, and IP address. Please review Stripe’s privacy policy: https://stripe.com/fr/privacy.

2.5 Browsing data (cookies)

Browsing data is collected automatically via Google Analytics: anonymized IP address, pages visited, session duration, device type, and browser type. See the Cookies section below.

3. Purposes of processing

The data collected is used for the following purposes:

• User account management and authentication
• Order and payment processing
• Sending newsletters and marketing communications (with consent)
• Responding to contact requests
• Improving the Site and analyzing audience data via Google Analytics
• Compliance with legal and accounting obligations

4. Legal basis for processing

Depending on the purpose, the processing of data is based on:

• User consent (newsletter, analytical cookies);
• Performance of a contract (account management, payment processing);
• DIASPAT’s legitimate interest (service improvement, security);
• Compliance with legal obligations (retention of accounting data).

5. Recipients of the data

DIASPAT does not sell or rent your personal data to third parties. Your data may be shared with:

• Stripe Inc. – online payment processing (United States / international)
• Mailchimp (The Rocket Science Group LLC) – newsletter management (United States)
  Google LLC – audience analytics via Google
• Analytics (United States)
  IONOS SE – website hosting (France)

These service providers act as subcontractors and are contractually obligated to ensure the confidentiality and security of your data. Transfers to countries outside the EU are governed by appropriate safeguards (European Commission Standard Contractual Clauses, Privacy Shield, or equivalent mechanisms).

6. Shelf life

• Account data: retained for the duration of the contractual relationship, then for 3 years after the last activity;
• Payment data: retained in accordance with legal accounting requirements (generally 10 years);
• Newsletter: until you unsubscribe or withdraw your consent;
• Contact data: 3 years from the last interaction;
  Browsing data (Google Analytics): up to 26 months.

7. Cookies

7.1 What is a cookie?

A cookie is a small text file stored on your device (computer, tablet, smartphone) when you visit a website. It is used to record information about your browsing activity.

7.2 Cookies used on Diaspat.com

• Strictly necessary cookies: ensure the proper functioning of the Site (sessions, shopping cart, authentication). Do not require consent.
• Analytical cookies (Google Analytics): allow us to measure the Site’s traffic anonymously.
• Require your consent.
  Marketing cookies (Mailchimp): allow us to personalize email campaigns. Require your consent.

7.3 Cookie Management

When you first visit our site, a banner will inform you about our use of cookies and allow you to accept or decline them. You can also manage your preferences at any time through your browser settings:

• Chrome: Settings > Privacy and Security > Cookies
• Firefox: Options > Privacy & Security
• Safari: Preferences > Privacy

Disabling certain cookies may affect the proper functioning of the Site.

8. Your rights

In accordance with the GDPR and applicable regulations, you have the following rights regarding your personal data:

• Right of access: obtain a copy of your data;
• Right to rectification: correct inaccurate or incomplete data;
• Right to erasure (“right to be forgotten”): request the deletion of your data;
• Right to restriction of processing: restrict the use of your data;
• Right to data portability: receive your data in a structured, machine-readable format;
• Right to object: object to the processing of your data;
• Right to withdraw your consent at any time (without affecting the lawfulness of prior processing).

To exercise these rights, please contact us at: Diaspatrdc@gmail.com We promise to respond within 30 days.

If you believe your rights have not been respected, you may file a complaint with the competent supervisory authority in your country of residence (in France: the CNIL – https://www.cnil.fr).

9. Data security

DIASPAT implements appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or disclosure. These measures include, in particular, the encryption of sensitive data, restricted and secure access, and regularly updated security protocols.

10. Minors

The website https://diaspat.com/ is intended for adults (18 years of age and older). DIASPAT does not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us so that we can delete it.

11. Changes to the Privacy Policy

DIASPAT reserves the right to modify this Privacy Policy at any time. Any changes will be posted on this page along with the date of the update. In the event of a substantial change, you will be notified by email or via a notice displayed on the Site.

12. Contact and Complaints

If you have any questions, wish to exercise your rights, or have a complaint regarding your personal data:

• Email : Diaspatrdc@gmail.com
• Adress : DIASPAT – Boulevard du 30 Juin, Immeuble SANASH, 6e Étage, Appartement C, Quartier Golf Résidentiel, Commune de la Gombe, Kinshasa, RDC