Privacy policy

1. Data controller

Personal data processed in the Africa Customer Week application (the "Application") is processed under the responsibility of the TotalEnergies Marketing subsidiary of your country ("TotalEnergies"), in compliance with applicable data protection regulations, including, in Cameroon, Law No. 2024/017 of 23 December 2024 on the protection of personal data.

2. Data about users

We process the following data about you:

• identification: name, phone number, email address (optional);
• assignment: subsidiary, station, function or department, access profile;
• sign-in and security: password (stored as an irreversible hash), verification codes, sign-in dates, IP address, log of sensitive actions;
• activity: customers registered, campaign results and rankings;
• acceptance of these terms: accepted version, date and IP address.

3. Data about customers

For customers registered at a station, we process: first and last name, phone number, email address (optional), consent to receive SMS or emails, satisfaction survey answers, confirmation and promotional codes, station and registering agent.

4. Purposes and legal bases

This data is processed in order to:

• manage accounts and access to the Application (performance of the employment or partnership relationship);
• run the Africa Customer Week campaign: customer registration, SMS confirmation, promotional codes, survey, rankings (legitimate interest of TotalEnergies);
• send marketing communications to customers who have consented (consent, which may be withdrawn at any time);
• secure the Application, prevent fraud and keep evidence of operations (legitimate interest and legal obligations).

5. Recipients

Data is accessible, within the limits of their duties, to authorised persons at TotalEnergies and in the station network (managers, administrators, supervisors). It may be shared with technical service providers acting on behalf of TotalEnergies (hosting, SMS and email delivery), who are bound by confidentiality and security obligations. It is never sold or rented.

6. Transfers outside the country

Some technical providers may be located outside your country. In that case, TotalEnergies ensures that such transfers are covered by appropriate safeguards in accordance with applicable regulations.

7. Retention periods

• User accounts: for as long as the account is active, then up to 12 months after deactivation or deletion.
• Customer data: for the duration of the campaign and up to 3 years after the last contact for customers who consented to communications; withdrawn consent is applied without delay.
• Security logs and proof of acceptance: up to 5 years.
• Export files: deleted automatically after a short period.

8. Security

TotalEnergies implements appropriate technical and organisational measures: access limited by profile and subsidiary, encryption of passwords and sensitive codes, secure connection, logging of sensitive operations.

9. Your rights

You have the right to access, rectify and erase your data, to object to and restrict its processing, and to withdraw your consent at any time. You can update part of your information yourself from your profile. For any other request, contact your administrator or the data protection contact of your TotalEnergies subsidiary.

You may also lodge a complaint with the data protection authority competent in your country.

10. Changes to this policy

This policy may be updated. Any new version will be presented to you at your next sign-in and must be accepted to keep using the Application.