Privacy policy

1. Who is responsible for your data

The controller is [to be completed] (“New Quin Astra”, “we”), RCCM [to be completed], National ID [to be completed], with its head office at 75 Avenue Munongo (Ex Kasai), Commune de Lubumbashi, Haut-Katanga, Democratic Republic of the Congo.

Our data-protection officer is [to be completed]. For any question about your data, write to [email protected] or to the postal address above.

2. What this policy covers

This policy covers the information you send us through the product enquiry form on our website, and the exchanges with you that follow. The site is for businesses. It is not intended for anyone under 18.

3. The data we collect

Through the form:

• your full name (required);
• your email address and/or phone number (at least one is required);
• your company name (optional);
• the product and configuration you are interested in, the quantity or requirement (optional) and your message (required);
• the form language, the date and time of sending, and the enquiry reference;
• proof of your consent: the version of this policy and the date and time you ticked the box.

Automatically, to protect the form from abuse: an identifier calculated from your IP address with a secret-keyed hash function. We do not store the IP address itself with your enquiry. Our hosting provider separately keeps technical logs (IP address, browser, pages visited, time) to run and secure the site.

Please do not include sensitive information in your message (health, opinions, religion, origin, bank details, identity documents) or data about other people. The form does not accept attachments.

If you do not provide the required information, we cannot record or handle your enquiry. You can always contact us directly at [email protected].

4. Why we use it

• To answer your enquiry: contact you back, give you price, availability and delivery information, and prepare a quote if you want one.
• To keep a record of the enquiry and how our sales team followed it up.
• To prove that you gave your consent.
• To protect the site and the form from abusive submissions and attacks.

We do not use your data for marketing, we do not sell it, and we do not share it with other companies for their own purposes. We make no automated decisions about you and do no profiling.

5. Legal basis

We process your data with your consent (Article 192 of the Digital Code), which you give by ticking the box on the form. You can withdraw it at any time, as easily as you gave it, by writing to [email protected]. Withdrawal does not affect what we did before. After withdrawal we delete your data, except what the law requires us to keep.

6. Who can access it

• Members of our team who handle enquiries, each with a personal account and a role that gives access to enquiries. Other staff cannot see them.
• Our technical processors, who act only on our instructions and under contract: Vercel Inc. (United States) for website hosting; Neon Inc. for the database, located in Germany (Frankfurt); Resend (United States) for internal notifications to our team, containing only the enquiry reference, not your contact details or message; our email provider, when we reply to you by email.
• Courts or public authorities, only when the law requires it.

7. Transfers outside the DRC

Your data is stored outside the Democratic Republic of the Congo, in Germany and the United States, by the processors listed above. Our contracts with these providers require them to protect your data, use it only on our instructions and help us respect your rights. Data is encrypted in transit.

8. How long we keep it

• Your enquiry and our exchanges: 24 months after the latest of these dates: when you sent the enquiry, when it was closed, or our last exchange with you. Staff simply viewing it does not extend this period. We then delete your data or make it anonymous.
• If the enquiry leads to a quote, order or invoice: the information needed is kept in our accounting records for the period required by OHADA accounting law.
• In a dispute or under a legal obligation, we may keep the data concerned until it is resolved.
• Hosting provider technical logs: for the limited period set by the hosting provider.
• Backups: deleted data may remain in our backups until their retention cycle ends, then it is erased. We do not bring it back when restoring a backup.

9. Your rights

Free of charge, you can:

• find out whether we process data about you, and what data, why, with whom and for how long (Article 209);
• get a copy of your data (Article 210), also in a common digital format you can pass to another company (Article 211);
• have inaccurate or outdated data corrected or completed (Article 214);
• have your data erased (Articles 215 and 216);
• object to its processing on legitimate grounds, and object to any marketing without giving a reason (Article 213);
• withdraw your consent at any time (Article 196);
• complain to the Data Protection Authority (Article 220).

To exercise these rights, send a dated and signed request to [email protected] or to the postal address in section 1, with your enquiry reference if you have it. We may ask for proportionate proof of identity, then we reply within 30 days.

10. Security

The site uses an encrypted connection (HTTPS). Only authorised team members can access enquiries, each with a personal account. Staff cannot change a submitted enquiry. Our providers encrypt stored data and we make regular backups.

11. Cookies

The public site uses only a cookie that remembers your chosen language, and stores your display theme (light or dark) in your browser. Both are needed for the site to work. We use no advertising cookies and no audience-measurement tools.

12. Changes

We may update this policy. The version is shown at the top of the page. Each enquiry records the version you accepted. We will not change how we use data already collected without your consent.