PRIVACY AND DATA PROTECTION POLICY

This Privacy and Data Protection Policy describes how CICA collects, uses, stores and protects the personal data of visitors and users of the cica.gw website.

This policy applies exclusively to data processing carried out through this website and the forms it provides. CICA undertakes to process personal data fairly, transparently and in line with the purposes for which they were collected.

By using this website or submitting forms, the data subject acknowledges having read this policy.

This policy applies to:

• Visitors to the CICA website;
• Users who submit contact, quote or recruitment forms;
• Interactions via the WhatsApp button, when available;
• Technical data collected automatically for website operation and security.

It does not apply to third-party websites accessible through external links.

Contact form

• Name
• Email
• Phone
• Company
• Subject
• Message

Quote form

• Full name
• Company
• Phone
• WhatsApp
• Email
• Service type
• Product or equipment
• Quantity
• Site location
• Expected deadline
• Description
• Attached images or documents

Recruitment form

• Name
• Email
• Phone
• Address
• Education
• Professional experience
• Skills
• Curriculum Vitae
• Cover letter
• Other data provided by the candidate

Technical data

• IP address
• Device type
• Browser
• Operating system
• Date and time of access
• Technical information needed for security and operation

Personal data may be used for the following purposes:

• Responding to received contacts;
• Processing quote requests;
• Contacting potential clients;
• Managing business relationships;
• Responding to product enquiries;
• Responding to equipment enquiries;
• Managing applications and recruitment processes;
• Improving the website and user experience;
• Ensuring website security;
• Detecting abusive or fraudulent use;
• Complying with applicable legal obligations;
• Commercial communications, where there is a suitable legal basis or consent.

CICA does not currently use automated profiling, automated marketing or behaviour-analysis tools, unless expressly stated in a future update of this policy.

Personal data processing may be based, as applicable, on:

• Pre-contractual or contractual steps;
• The data subject’s consent;
• CICA’s legitimate interest, notably for website security and management;
• Compliance with legal obligations.

Personal data will be retained only for as long as necessary to fulfil the purposes for which they were collected, including:

• While the business relationship or request processing lasts;
• For the applicable legal period, where one exists;
• While valid consent exists, where applicable;
• For the time needed to defend rights in administrative or judicial proceedings.

After that period, data will be deleted or anonymised, unless a legal retention duty applies.

CICA does not sell personal data. Sharing may occur only when necessary for:

• Providers supporting website operation, email or hosting;
• Compliance with legal obligations or competent authority orders;
• Protection of the rights, security and integrity of CICA or third parties.

Recipients are required to process data according to CICA’s instructions and appropriate security measures.

Data are stored in systems with access controls and technical measures appropriate to the risk. Only authorised staff access information related to requests, messages or applications.

Forms may allow file uploads (images, PDF or documents). These files are validated for type and size before acceptance.

The data subject should avoid sending documents with unnecessary data or third-party data without authorisation. CICA is not responsible for content improperly sent by the user.

The website may provide a WhatsApp contact button.

Primary number: 956 108 181

Secondary number: 963 335 760

By using WhatsApp, the data subject is also subject to that service’s policies and terms. We recommend reading the provider’s documentation before sharing data.

This website uses cookies. For detailed information, see our Cookie Policy.

Categories used or planned

• Essential: required for operation, security and session management;
• Preference: remember user choices, such as cookie consent;
• Analytics: currently not installed. If added in future, this policy will be updated;
• Marketing: currently not installed. If added in future, this policy will be updated.

CICA does not currently use Google Analytics, Meta Pixel, Google Tag Manager or equivalent tracking tools.

Currently, the website does not integrate third-party traffic analytics or advertising tools. If such integration is implemented, this policy will be updated with the providers, purposes and applicable legal bases.

Commercial communications will only be sent where there is a suitable legal basis or prior consent from the data subject, as applicable.

The data subject may object to marketing communications or withdraw previously given consent at any time.

Under applicable law, the data subject may exercise, where applicable, the following rights:

• Access to their personal data;
• Rectification of inaccurate or incomplete data;
• Erasure of data, where applicable;
• Objection to processing;
• Restriction of processing;
• Data portability, where applicable;
• Withdrawal of consent, without affecting the lawfulness of prior processing;
• Lodging a complaint with the competent data protection authority — [COMPETENT AUTHORITY — TO CONFIRM].

To exercise your rights, contact: contacto@cica.gw

If you believe the processing of your personal data violates applicable law, you may lodge a complaint with the competent authority, after confirmation of the regulator applicable to CICA.

You may also contact CICA first for clarification or resolution.

Some service providers (hosting, email, backups, CDN or security tools) may process data outside Guinea-Bissau. The exact infrastructure should be confirmed and this section updated accordingly.

Where international transfers exist, CICA will seek to ensure appropriate safeguards under applicable law.

CICA implements appropriate technical and organisational measures, including where applicable:

• Use of HTTPS;
• Authentication and access control to the admin panel;
• Password hashing;
• Protection against SQL Injection;
• Protection against XSS;
• Protection against CSRF;
• Form validation;
• Upload validation;
• Backups;
• Security updates;
• Administrative logs, where applicable.

No system is fully immune to risk. CICA does not guarantee absolute security, but seeks to reduce risks proportionately.

The website may contain links to external websites. CICA does not control those websites or their privacy policies. We recommend reading the policies of each site you visit.

This website is not intended for persons under 16. CICA does not intentionally collect children’s data. If inadvertent collection becomes known, the data will be deleted as soon as possible.

CICA may update this policy to reflect legal, technical or operational changes. The current version will always be published on this page, with the update date indicated.

Material changes may be communicated through the website or other suitable means.

For privacy and data protection questions:

CICA
Av. Combatentes de Liberdade da Pátria, Aeroporto
Bissau, Guinea-Bissau

Phones: 956 108 181 | 963 335 760
Email: contacto@cica.gw
Website: cica.gw

Contact page