Home · Privacy policy (GDPR)

Privacy policy (GDPR)

Controller and contact

IPN International Protection Network, IFZA, Dubai, United Arab Emirates. [legal entity and registration number to be completed]. Interim privacy contact: gora.ndao@gmail.com. This draft must be reviewed for the final entity, applicable law, processing arrangements and transfer safeguards.

Information collected

Public forms collect company, name and position, business email, country (membership form), selected regions (tender form), trades, message, optional bid deadline and attachment. We also receive the request language and submission date. Do not send sensitive personal information that is unnecessary for your request.

Purposes and legal bases

We use this information to answer requests, assess membership applications and prepare possible services. The legal basis is taking pre-contractual steps at your request, or our legitimate interest in handling professional enquiries and maintaining the network, as applicable. The required form acknowledgement confirms that you have read this information; it is not consent to marketing and does not replace these legal bases.

Retention

Prospect data: 3 years from the last contact. Member data: duration of membership plus 5 years. A longer period may apply only where a legal obligation or a dispute requires it. These are the intended retention rules; automated deletion procedures still require verification and legal approval.

Recipients and international transfers

Recipients are the IPN office, the member of the relevant country when a request concerns it, and hosting and database providers acting within their assigned duties. Operating from the UAE and coordinating members internationally can entail transfers outside the EEA. Before such transfers, applicable safeguards must be verified and documented, such as an adequacy decision or standard contractual clauses with a transfer assessment and supplementary measures where required. Provider locations and contracts remain to be confirmed; this draft does not certify safeguards are already in place.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction, objection and portability by contacting gora.ndao@gmail.com. We may need proportionate proof of identity. You can complain to the competent supervisory authority, such as the CNIL in France (cnil.fr). If processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

Member portal and security

The portal holds company profiles, users and roles, compliance documents and their expiry/review status, assigned country tender lots, requirements, attachments, messages, notifications, and login/download/status audit records. It supports membership administration, compliance and tender coordination under the relevant contract or legitimate interest. Access is limited by company and role; administrators require two-factor authentication. Documents are stored privately and shared through short-lived signed links. Encrypted connections, access controls and audit logs reduce risk but cannot guarantee absolute security. Password and authentication tokens must never be shared.

Cookies

See the Cookie policy for the necessary consent record, language preference, session introduction flag and private portal authentication storage. Analytics and marketing are not used today.