Privacy Policy | Greenlands DRC

This Privacy Policy explains how Greenlands DRC collects, uses, stores, and protects personal data of visitors, prospective members, members, and other users of this website and the Member Portal. We are committed to operating in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the laws of the Democratic Republic of the Congo.

1. Data Controller

Greenlands DRC, acting through its lawful corporate entity registered in the Democratic Republic of the Congo, is the data controller responsible for the personal data processed through this website and the Member Portal. For data protection enquiries, contact us at privacy@greenlandsdrc.com.

2. Personal Data We Collect

We collect personal data you voluntarily provide through inquiry forms, investment applications, reservation requests, newsletter sign-ups, and Member Portal registration. This includes: name, email address, phone number, WhatsApp number, country, nationality, preferred language, investment range, project interests, and any message content you submit. We also collect data automatically through cookies and similar technologies (see our Cookie Policy).

3. Legal Basis for Processing

We process personal data on the following legal bases: (a) your consent, where you have given clear consent for specific processing such as marketing communications; (b) performance of a contract or pre-contractual steps, where you have applied for membership, investment, or reservation; (c) our legitimate interests in responding to inquiries, operating the business, and maintaining security; and (d) compliance with legal obligations.

4. How We Use Your Data

We use your personal data to: respond to your inquiries; process applications for membership, investment, and reservations; communicate with you about projects that may interest you (where you have consented to marketing); administer the Member Portal; maintain records for legal and regulatory compliance; and protect against fraud and unauthorized access. We do not sell your personal data to third parties.

5. Data Sharing and Recipients

We may share personal data with: (a) our professional advisors, including legal counsel, accountants, and auditors, subject to confidentiality obligations; (b) service providers who process data on our behalf, such as email delivery and cloud hosting providers; (c) competent authorities where required by law. Any transfer of personal data outside the DRC or the European Economic Area is carried out with appropriate safeguards in accordance with applicable law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the duration of any contractual relationship and for the periods required by applicable law for record-keeping. Prospective lead data that does not result in a membership or contract is retained for a reasonable period and then deleted or anonymized unless a longer retention period is legally required.

7. Your Rights

Subject to applicable law, you have the right to: access your personal data; rectify inaccurate or incomplete data; erase your personal data under certain circumstances; restrict or object to processing; data portability; and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise these rights, contact privacy@greenlandsdrc.com. We respond to requests within one month, extendable by two further months for complex requests.

8. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or disclosure. These include access controls, encryption in transit, regular security reviews, and staff training. However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security of data transmitted over the internet.

9. Children

This website and the Member Portal are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take steps to delete such data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "last updated" date. We will notify you of significant changes where required by law. Continued use of the website after changes constitutes acceptance of the updated policy.

11. Contact and Complaints

If you have a question or complaint about this Privacy Policy or our data practices, please contact us at privacy@greenlandsdrc.com. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection supervisory authority.

This document is provided for informational purposes and does not constitute legal advice. Binding agreements and obligations are established solely by the formal legal documentation signed between the parties. In the event of any conflict, the signed legal documentation prevails. For any questions, contact legal@greenlandsdrc.com.