Clear information about the data used by the University, the purposes of processing and the rights of the people concerned.
Data protection
Official university document
Last updated 15 October 2026
At a glance
The journey of personal data
01Data
02Collection
03Use
04Protection
05Retention
06Deletion
01
Applicable framework
Processing carried out for the university section is governed in particular by Gabonese Law No. 025/2023, which amends Law No. 001/2011 on personal-data protection. The APDPVP is Gabon’s supervisory authority. The formalities applicable to each activity and any international transfers must be confirmed by the Institution.
This page describes the website and the digital services currently offered. Each new processing activity must be assessed, explained appropriately and subject to any required formalities before it is implemented.
The records available in this repository do not establish which legal or natural person formally determines the purposes and means of each university processing activity. The Institution must designate the controller, publish its official contact details and identify the contact point for data-protection requests before this policy can be finalized.
03
Data and purposes
Depending on the service used, the data may include:
01 · Contactcontact details and the content submitted through a contact form;
02 · Admissionidentity and academic-background information and documents submitted with an admission request;
03 · Accountdata needed to create and secure an account when that space is available;
04 · Assistantmessages sent to an assistant, without sensitive or confidential data;
05 · Technicaltechnical data needed for the security, availability and performance measurement of the website.
04
Processing identified on this website
Required fields are marked in each form; missing required information prevents submission. The repository does not provide an approved legal basis or retention schedule for each activity. These details must be settled by the designated controller.
Summary of identified digital processing
Activity
Data and use
Identified recipients
Legal basis and retention
Contact
Contact details and message supplied to receive a reply; required fields are shown in the form.
Designated team; email sent through Resend.
To be confirmed by the controller; period not documented.
Online admission
Identity, contact details, date of birth, academic background and documents needed to review an application; required fields govern submission.
Admissions team; application data through Supabase; acknowledgement through Resend.
To be confirmed by the controller; period not documented.
Public assistant
Messages voluntarily submitted to receive a response. Do not enter sensitive or confidential data.
The server sends the content to OpenAI.
To be confirmed by the controller; provider and internal periods not verified.
Audience and performance
Optional measurements loaded after acceptance; refusal does not affect public access.
Vercel Analytics, Speed Insights and any tags configured in Google Tag Manager.
Consent choice requested; actual tags, basis and periods must be checked in the production container.
Map requested by a visitor
Connection to Google after choosing to load a map or open a directions link.
Google Maps receives the request directly from the browser.
Provider region, trackers and retention details need confirmation.
05
Providers and transfers
The code uses Vercel (deployment, Analytics and Speed Insights), Supabase (authentication, database and application services), Sanity (some editorial content), Resend (transactional email), Cloudflare Turnstile when configured (automated-submission protection), and OpenAI for messages sent to the public assistant. Google Maps provides external maps and YouTube provides embedded videos; those connections begin only after a visitor action.
Actual regions, subprocessors, provider retention periods and transfer mechanisms were not verified in production settings or contracts. Gabonese Law No. 025/2023 regulates transfers outside Gabon; the Institution must confirm the applicable formalities before describing any transfer safeguard.
No approved retention schedule for university processing was found in the repository. The Institution must define and document the periods, archiving and deletion rules. The application code does not show an automated admissions decision; decisions should be made by university staff under their procedures.
Never enter a password, medical data or a confidential document in a field that does not expressly request it.
07
Your rights
Anyone concerned may exercise the rights provided by law, including requesting access, correction, updating or erasure where applicable, objecting to certain processing, and withdrawing consent when consent is the basis. Send requests to the official contact point that the Institution must confirm.
A complaint may also be brought before the APDPVP. Publishing this policy does not replace the declarations, authorizations, impact assessments or records required for a specific processing activity.
