1. Data controller
The data controller is Socium SAS, whose registered office is at SICAP Liberté 5, Villa 5413, Dakar, Senegal.
For any question about your data, write to [email protected].
2. Scope of this policy
This policy covers data collected through the socium.link website.
It does not cover data processed within the Socium platform on behalf of our customers. In that context each customer company is the data controller for its employees' data and Socium acts as a processor, under the terms of the services agreement and data processing agreement concluded with it.
3. Filing with the CDP
In accordance with article 18 of Law No. 2008-12, the processing described here has been authorised by the Commission de Protection des Données Personnelles (CDP), the Senegalese supervisory authority.
- Deliberation No. 2023-00705/CDP of 31 August 2023 — Subject: https://sociumjob.com
- Deliberation No. 2024-00801/CDP of 19 September 2024 — Subject: https://workspace.socium.link
4. Data collected
| Context | Data | Source |
|---|---|---|
| Demonstration request | First and last name, business email, phone, company, job title, country, headcount, modules of interest | Provided by you |
| Resource download | Name, business email, company | Provided by you |
| Browsing | Pages viewed, selected country, language preference, technical connection data (IP address, browser type) | Collected automatically |
| Form security | Anti-bot verification token | Generated by Cloudflare Turnstile |
We collect no sensitive data within the meaning of Law No. 2008-12, and the site is not intended for minors.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to a demonstration or contact request | Pre-contractual steps taken at your request |
| Sending you a requested documentary resource | Your consent |
| Securing the site and preventing abuse | Legitimate interest of the controller |
| Improving site content and relevance | Legitimate interest of the controller |
| Meeting our legal and accounting obligations | Legal obligation |
We do not use your data for mass advertising and we sell it to no one.
6. Recipients and processors
Your data is accessible to the Socium commercial and technical staff who need it, and to the following providers acting on our instructions:
| Provider | Role | Location |
|---|---|---|
| Cloudflare | Website hosting, database, storage and bot protection | Global network, US company |
| Mailgun | Transactional email delivery | European infrastructure |
| HubSpot | Customer relationship management and demonstration request follow-up | US company |
| YouTube | Video playback, only after you click | US company |
7. Transfers outside Senegal
Some of the providers above process data outside Senegal. In accordance with articles 49 to 51 of Law No. 2008-12, such transfers are made only to countries offering a sufficient level of protection, or under appropriate contractual safeguards, and the CDP is informed beforehand.
8. Retention periods
| Data | Period |
|---|---|
| Demonstration request with no follow-up | 3 years from last contact |
| Prospect who became a customer | Duration of the contractual relationship, then archiving as legally required |
| Contact details from resource downloads | 3 years |
| Technical and security logs | 12 months |
9. Your rights
Law No. 2008-12 grants you, over your personal data:
- a right to information about the processing carried out (articles 58 and 59);
- a right of access and to obtain a copy (articles 62 and 63);
- a right to object on legitimate grounds (article 68);
- a right to rectification, completion, updating, blocking and erasure of data that is inaccurate, incomplete or whose processing is prohibited (article 69).
These rights are exercised in writing to [email protected], with proof of identity. We respond as promptly as possible.
If you consider your rights are not being respected, you may refer the matter to the Commission de Protection des Données Personnelles (CDP), the Senegalese supervisory authority, whose contact details are available at cdp.sn.
10. Interaction with the GDPR
Where we address people located in the European Union, the General Data Protection Regulation may apply in addition to Senegalese law. In that case the additional rights it provides, in particular data portability, may be exercised at the same contact address.
Where we process data on behalf of a customer established in the European Union, we act as a processor within the meaning of article 28 of the Regulation, under a dedicated data processing agreement.
11. Changes to this policy
This policy may be updated to reflect changes in our processing activities or in the applicable rules. The date of last update appears at the top of the page.