Last updated: October 11, 2026 · Version 2026-10-11-v2
Privacy Notice and Personal Data Protection
This notice explains which personal data Paaleng Technology processes when you use the website https://paalengtechnology.com, why, with whom it is shared, how long it is kept and how to exercise your rights.
1. Data controller
PAALENG TECHNOLOGY SARL — Quartier Sonfonia Centre, Commune de Sonfonia, Conakry, République de Guinée. RCCM: registration in progress; NIF: in progress.
For any question or request about your data: contact@paalengtechnology.com.
2. Legal framework
Processing is carried out in accordance with Guinean Law L/2016/037/AN on cybersecurity and the protection of personal data and ECOWAS Supplementary Act A/SA.1/01/10 on personal data protection. Where Regulation (EU) 2016/679 (GDPR) applies, in particular to people located in the European Union, you also have the rights it provides.
3. Data we process
| Category | Data | Source |
|---|---|---|
| Account | Full name, email address, password (stored only in irreversibly hashed form), preferred language, date and version of the terms accepted, email verification status | You, when signing up |
| Learning | Course enrolments, progress, completed lessons, quiz results, certificate requests, certificates issued (name, course, date, verification code) | Your use of the Academy |
| Quote requests and contact | Name, email, phone, company, country, category, message, indicative budget, optional attachment | You, via the form |
| Waiting list | Email address and the pillar concerned (Academy, MarketPlace, Services) | You, via the “Notify me” form |
| Orders (when available) | Products, amounts, delivery name, address and phone | You, when ordering |
| Technical data | IP address, date and time, pages viewed, browser type; log of account actions (sign-ins, failed attempts, registrations) | Generated automatically |
We do not collect sensitive data (health, opinions, biometrics…) or identity documents. Data marked as required in a form is necessary for the requested service; without it, that service cannot be provided.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, giving access to courses, tracking your progress, issuing certificates and enabling their verification | Performance of the contract (Terms of Use) |
| Answering your quote requests and messages, preparing a commercial proposal | Pre-contractual steps taken at your request |
| Informing you when a pillar opens (waiting list) | Your consent, which you can withdraw at any time |
| Securing the Platform, preventing fraud and abuse, diagnosing incidents | Legitimate interest in keeping the service secure |
| Complying with our legal obligations (accounting, requests from authorities) | Legal obligation |
We do not send marketing without your consent and we do not sell your data. No decision producing legal effects for you is based solely on automated processing: quiz scores are calculated automatically, but issuing a certificate is reviewed by a team member.
5. Recipients and technical providers
Your data is accessible only to authorised members of the Paaleng Technology team, as their role requires, and to the following technical providers acting on our behalf:
- Amazon Web Services (AWS) — hosting of the website and its database (Frankfurt region, Germany), CloudFront content delivery network (relay servers worldwide) and processing of outgoing emails;
- Brevo — sending transactional emails (confirmations, notifications);
- Hostinger — the domain’s business email (emails you send us);
- Cloudflare — domain name management (DNS);
- Google Fonts — displaying the site’s fonts: your browser contacts Google’s servers, which receive your IP address;
- YouTube (Google) — playing videos embedded in courses and on the homepage.
Online payment is not enabled at this time; if it is, the payment provider and the data shared with it will be stated here before it is activated.
When a certificate is issued, anyone with its verification code can publicly see the holder’s name, the course title and the date of issue: this is the very purpose of authenticity verification. Your data may also be disclosed to authorities where the law requires it.
6. Transfers outside Guinea
The website is hosted in the European Union (Germany), and some providers may process data in other countries, including the United States. These transfers are necessary to run the service; they are made to providers that contractually commit to protecting the data, and in compliance with the conditions set by Guinean law for transfers to a third country.
7. Retention periods
| Data | Period |
|---|---|
| Account and learning data | As long as the account is active. After 24 months without sign-in, the account is deleted or anonymised, after prior notice. |
| Certificates issued | For as long as authenticity verification is useful to the holder, unless they ask for withdrawal |
| Quote requests and attachments | 3 years after the last exchange |
| Waiting list | Until the pillar concerned opens, then 6 months, or until you unsubscribe |
| Orders and accounting records | 10 years, in line with applicable accounting obligations |
| Technical logs and activity log | 12 months at most |
| Email confirmation link | 24 hours, then deleted |
| Sign-in session | 7 days, or 30 days if you tick “Remember me” |
These periods may be extended where the law requires it or to defend our rights in a dispute.
8. Cookies
The website uses a single cookie: connect.sid, a session cookie that is strictly necessary for sign-in, form security and remembering your language. It is not used for any advertising tracking and therefore does not require consent. We use no audience measurement tools and no advertising cookies.
When you start a YouTube video (and, in courses, when a video lesson is displayed), YouTube may set its own cookies, governed by Google’s privacy policy. On the homepage, a video only loads when you click on it.
9. Security
Our measures include: encrypted connections (HTTPS), passwords stored in irreversibly hashed form, a protected session cookie (HttpOnly, Secure), protection against cross-site request forgery (CSRF), limits on sign-in attempts and form submissions, checks on the type of uploaded files, and administration access restricted to authorised people. If a data breach is likely to put your rights at risk, we notify the competent authority and, where appropriate, the people concerned, as provided by law.
10. Your rights
You have the rights to information, access, rectification, erasure, objection on legitimate grounds and, where the conditions are met, restriction and portability of your data. Where processing is based on your consent (waiting list), you may withdraw it at any time.
To exercise your rights, write to contact@paalengtechnology.com from the address linked to your account, or specifying the request concerned. We reply within one month. Proportionate verification of your identity may be requested to protect your data.
If you believe your rights are not being respected, you may contact the competent Guinean personal data protection authority. If you live in the European Union, you may also contact the supervisory authority of your country (in Romania: ANSPDCP).
11. Minors
The Platform is intended for people aged at least 16. A younger minor may only sign up with the consent of their legal guardian, who may exercise their rights on their behalf.
12. Changes to this notice
This notice may be updated to reflect changes to the services, providers or the law. The date and version number are shown at the top of the page; registered users are informed of any significant change before it takes effect.
This English version is provided for convenience; in case of discrepancy, the French version prevails.