Last Updated: January 8, 2026
This Privacy Policy (“Policy”) governs how the American Business Council – ABC Gabon (“we,” “us,” or “our”), a U.S.-based entity operating in Gabon, collects, processes, stores, transfers, and protects personal data in compliance with Gabon’s Law No. 025/2023 on Personal Data Protection (overseen by the Autorité pour la Protection des Données Personnelles et de la Vie Privée – APDPVP), U.S. laws including the California Consumer Privacy Act (CPRA) and Children’s Online Privacy Protection Act (COPPA), and GDPR-inspired principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability. By using our website or services, you acknowledge these practices and your rights under applicable laws.
Consent & Data Protection Notice
I acknowledge and consent to the collection, use, storage, and processing of my personal data by ABC Gabon, acting as the data controller, for the sole purpose of evaluating and responding to my request.
Where I submit personal data relating to third parties, I confirm that I am duly authorized to do so and that such individuals have been informed of this disclosure.
Personal data is processed in accordance with Gabonese Law No. 001/2011 relating to computer science, electronic files, and the protection of personal data, as well as internationally recognized data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, and security.
Data will not be disclosed to third parties without my consent, except where required by applicable law, regulation, or lawful governmental request. Appropriate technical and organizational safeguards are implemented to protect personal data against unauthorized access, loss, or misuse.
Personal data will be retained only for the duration necessary to fulfill the stated purpose and to comply with applicable legal or regulatory obligations, after which it will be securely deleted or anonymized.
In accordance with applicable law, I have the right to request access to my personal data, request rectification or erasure, object to certain processing activities, and request restriction of processing where applicable. These rights may be exercised by contacting info@abcgabon.org or, where relevant, the competent authority, the Commission Nationale de Protection des Données à Caractère Personnel (CNPDCP).
Data Controller and DPO
We act as the data controller. For large-scale or sensitive processing, contact our Data Protection Officer (DPO) at [insert DPO email/phone] for inquiries, rights exercises, or complaints to APDPVP.
Information We Collect
Data collection is limited to specified, explicit purposes with a lawful basis (consent, contract, legal obligation, legitimate interests).
- Personal Data: Name, email, phone, address, job title, company, resumes, service preferences.
- Technical Data: IP address, browser, pages visited, cookies, IP-derived location.
- Sensitive Data: Health information (e.g., allergies) only with explicit consent and necessity for services, prohibited otherwise.
We inform data subjects transparently when data is not collected directly from them.
Lawful Processing and Purposes
Processing occurs solely under documented legal bases, with security measures against distortion, damage, or unauthorized access.
- Respond to inquiries, provide services, process applications/bookings.
- Analyze usage (e.g., Google Analytics), improve site, prevent fraud.
- Marketing/prospecting (consent-based, right to object).
- Legal compliance, audits, business operations.
No automated decisions producing legal effects without safeguards or consent. Data Protection Impact Assessments (DPIAs) are conducted for high-risk activities.
Cookies and Third-Party Tools
Essential cookies enable functionality; others (performance, marketing, like Facebook Pixel) require consent via a banner. Manage preferences anytime. California residents: Opt out of sharing via “Do Not Sell/Share My Personal Information“. Secure transmission uses SSL/TLS encryption.
Sharing, Transfers, and Processors
No sale of data. Sharing limited to processors with guarantees of security/confidentiality via contracts/NDA.
| Category | Examples | Safeguards |
|---|---|---|
| Processors | Hosting, payments, analytics (U.S./Philippines) | Instructions, encryption, Standard Contractual Clauses (SCCs) for non-adequate countries |
| Legal | APDPVP requests, court orders | Lawful disclosure only |
| Transfers | Cross-border to U.S./others | Adequate protection or safeguards; no prohibited transfers |
| Business | Mergers/acquisitions | Prior notice |
Processors act under our authority; we ensure compliance.
Security and Retention
Technical/organizational measures include access controls, audits, staff training, and incident response. No transmission is fully secure. Retention matches purpose/legal requirements (e.g., inquiries until resolved + hold period; delete/anonymize otherwise).
Your Rights
Under Gabonese Law 025/2023, CPRA, and aligned standards:
- Access, rectification, erasure (“right to be forgotten”), portability, restriction, objection (e.g., marketing), withdraw consent.
- Oppose processing for legitimate reasons; no profiling discrimination.
- California: Know/delete/correct/opt-out of sharing—no discrimination.
Exercise via website form/contact; response within legal timelines (e.g., 2 months APDPVP). Verify identity; appeals to APDPVP available.
Children’s Privacy and Breaches
Not for under-13s; no knowing collection without verifiable parental consent (COPPA-compliant). Delete if discovered. Breaches: Notify APDPVP/individuals promptly if risking rights; contain/report as required.
Changes and Contact
Updates posted here with notice (email/banner for material changes). Contact DPO/website form for questions/rights. APDPVP complaints: [insert link].