1. Introduction

The purpose of this Privacy Policy is to inform users of the

site www.armures.org (hereinafter the "Site") regarding how their data

personal data are collected, used, stored, and protected.

Armures places great importance on respecting privacy and

personal data security. To this end, the organization applies the best

international data protection practices, particularly those

inspired by the General Data Protection Regulation (GDPR) and

recognized cybersecurity standards.

By using this Site, you agree to this policy.

2. Data controller

The data controller for personal data is:

Armures

Non-profit organization dedicated to awareness and training in

cybersecurity in the Democratic Republic of Congo.

Email address: contact@armures.org

Website: www.armures.org

Publication Director: Honew Kitesi

3. Data collected

Depending on the services used, Armures may collect the following categories of

the following data:

Identification data

• First and last name;

• Email address;

• Organization or job title (if applicable).

Communication data

• Information submitted via contact forms; • Requests for information;

• Incident reports.

Technical data

• IP address;

• Browser type;

• Operating system;

• Connection data;

• Information regarding navigation on the Site.

Donation-related data

When donations are made via a secure payment provider:

• Information required for the transaction;

• Donation history;

• Payment confirmation.

Important: Armures never collects full credit card numbers.

Payments are processed directly by specialized and secure service providers.

4. Purposes of processing

The data collected is used exclusively for:

• Respond to user requests;

• Provide access to the educational content and resources offered;

• Ensure the operation and security of the Site;

• Improve user experience;

• Generate anonymized traffic statistics;

• Manage donations and contributions;

• Prevent abuse, fraud, or malicious acts;

• Comply with applicable legal obligations.

5. Legal basis for processing

The processing carried out by Armures is based in particular on:

• User consent;

• Performance of requested services;

• Legitimate interest related to the security and improvement of the Site;

• Applicable legal and regulatory obligations.6. Data sharing

Armures never sells, rents, or markets the personal data of

its users.

Certain data may only be transmitted to service providers

technical services involved in the operation of the Site, including:

• Web hosting;

• Secure payment services (Stripe or equivalent);

• Statistical analysis services;

• Site security and protection services.

These service providers are contractually bound to respect the confidentiality and

security of the processed data.

7. Data retention

Personal data is kept only for the time necessary

the purposes pursued:

Category Maximum duration

Contact messages 12 months

Cookies 13 months

Anonymized statistical data 24 months

Donation-related data In accordance with applicable legal obligations

Once these periods have expired, the data is deleted or anonymized.

8. User rights

Subject to applicable legal provisions, each user has the

following rights:

• Right of access;

• Right to rectification;

• Right to erasure;

• Right to object;

• Right to restrict processing;

• Right to withdraw consent when it serves as the basis for

processing.

Any requests can be sent to: contact@armures.org

Armures will endeavor to respond within a reasonable timeframe.

9. Data security

Armures implements appropriate technical and organizational measures to

to protect personal data against:

• Unauthorized access;

• Accidental disclosure;

• Data loss or destruction;

• Unauthorized alterations;

• Cyberattacks and intrusion attempts.

However, as no system is entirely risk-free, Armures cannot

guarantee absolute security.

10. Policy Updates

Armures reserves the right to modify this Privacy Policy at any

time to reflect legal, technical, or

organizational.

The most recent version is always available on the Site.

11. Governing Law

This policy is governed by the laws applicable in the Democratic Republic

of the Congo, while drawing inspiration from international standards for the protection of

personal data.