Privacy policy

One single standard, worldwide

Xearth is an international company. Rather than applying a different level of protection depending on each person's country, we chose the most demanding standard as our common baseline: Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR).

In practice, the rights and safeguards described below are granted to you whether you write from Europe, Africa, the Americas or Asia, even where the law of your country is less protective.

Data controller

XEARTH, a company registered in Côte d'Ivoire and operating internationally, is the controller of the data collected on the xearth.ci website.

For any question about your data: monsite@xearth.ci.

The international framework we apply

Depending on your situation, several texts may apply to your data. We process it so as to satisfy, as far as possible, all of the following:

• Regulation (EU) 2016/679 (GDPR), including its extraterritorial application under Article 3;
• Convention 108+ of the Council of Europe, the first binding international treaty on data protection;
• the African Union Convention on Cyber Security and Personal Data Protection, known as the Malabo Convention;
• ECOWAS Supplementary Act A/SA.1/01/10 on personal data protection;
• Law No. 2013-450 of 19 June 2013 of Xearth's country of registration;
• the national laws applicable to the visitors concerned, notably the UK GDPR, the Californian CCPA/CPRA, the Brazilian LGPD and Canada's PIPEDA;
• the data protection regimes of our other markets: Singapore's PDPA and India's DPDP Act (PDPC), as well as the PDPL laws of Saudi Arabia and the United Arab Emirates.

What we collect

The site only collects personal data when you write to us through the contact form:

• your name, your email address and, if you provide it, the name of your company;
• the content of your message, the page it was sent from and the site language;
• your consent (ticked box) and the date it was sent.

What we do not collect

Browsing the site involves no audience measurement and no advertising tracking, and no tracking cookie is set (see the cookie policy). We carry out no profiling and no automated decision producing legal effects concerning you.

When the form is relayed by our server, the IP address may be used temporarily to prevent abuse (rate limiting, bot filtering); it is not kept with your message.

Why, and on what legal basis

This information is used only to answer your request and, if you wish, to continue the conversation that follows. We never use it for other purposes without informing you beforehand.

The legal bases are your consent, given by ticking the box on the form, and Xearth's legitimate interest in answering the professional requests it receives, within the meaning of Article 6 of the GDPR.

Recipients and processors

Your information is accessible only to the Xearth people handling your request, wherever they are located, and passes through our professional email service.

Any processors we use are bound by contract to the obligations of Article 28 of the GDPR: acting on instructions, ensuring confidentiality, applying security measures and deleting data at the end of the assignment. Your information is neither sold, rented nor passed on to third parties for commercial purposes.

International data transfers

Because our teams and our providers are spread across several countries, your data may be accessed from a country other than yours, including outside the European Economic Area.

These transfers are framed by the mechanisms of Chapter V of the GDPR: an adequacy decision of the European Commission where one exists, or otherwise the standard contractual clauses adopted by Implementing Decision (EU) 2021/914, supplemented where necessary by additional technical measures such as encryption.

Retention period

Messages received and the exchanges that follow are kept for at most 24 months after the last contact, then deleted. If a contractual relationship begins, data is kept for the duration of the contract and the applicable statutory limitation periods.

Security

The site is served over HTTPS. Access to our email is restricted to authorized people and protected by appropriate authentication measures, with rights reviewed regularly.

Our practices are covered by external certifications: PCI DSS Level 1 for payment security and ISO certifications for quality management. The corresponding certificates are provided on request.

Your rights, wherever you are

We grant every person, regardless of nationality or residence, the following rights. To exercise them, write to monsite@xearth.ci: we reply within one month.

• access the data we hold about you and obtain a copy of it;
• have inaccurate or incomplete information corrected;
• obtain the deletion of your data;
• restrict or object to a processing operation;
• receive your data in a structured format and pass it to a third party (portability);
• withdraw your consent at any time, without affecting processing already carried out;
• not be subject to a decision based solely on automated processing.

Complaints and supervisory authorities

If our answer does not satisfy you, you may refer the matter to the data protection authority competent for your country of residence: for example a supervisory authority of a European Union member state, the Information Commissioner's Office in the United Kingdom, or the Telecommunications/ICT Regulatory Authority of Côte d'Ivoire (ARTCI).

We cooperate with any competent authority that questions us about a processing operation described in this policy.

Minors

The site is aimed at professionals. We do not knowingly collect data from people under 18, nor data falling within the special categories protected by Article 9 of the GDPR.

Changes

This policy may change with the site or with international regulation. The update date appears at the top of the page; significant changes are announced on the site.