Legal notice

The website at https://expatcloud.us (the Site) is published by:

• Company name: E-Business Afrika
• Legal form: LLC / SARLU / LTD
• Registered office: Kolwezi, Democratic Republic of the Congo
• Company website: www.ebafrika.com
• Email: contact@ebafrika.com
• Solutions architect and publication director: Ir. Roland MANTAMA

Technical providers are selected for their compliance with ISO/IEC 27001:2022 security standards. The hosting provider guarantees data availability, integrity and confidentiality in accordance with Regulation (EU) 2016/679 on the protection of individuals in relation to the processing of personal data.

The Site and its constituent elements, including text, graphics, logos, icons, photographs, source code, databases and software architecture, are protected by copyright and sui generis database rights.

Any reproduction, public communication, adaptation, translation or use, in whole or in part and by any means, without the express prior written consent of E-Business Afrika is unlawful and constitutes infringement under applicable intellectual property law.

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), data subjects have the following rights over their personal data:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)

To exercise these rights, email contact@ebafrika.com. The controller undertakes to respond within one month of receiving the request, in accordance with Article 12(3) GDPR.

The Privacy policy describes how personal data is processed.

ExpatCloud ECM Pro is designed, developed and operated in accordance with the following international standards:

• ISO/IEC 27001:2022. Information security management systems. Security measures are aligned with Annex A controls, including access control, cryptography, communications security and incident management.
• ISO/IEC 27701:2019. Privacy information management systems (PIMS). Personal data is processed in accordance with the standard's additional requirements for controllers and processors.
• ISO 15489-1:2016. Information and documentation, records management. The standard's principles apply throughout the records lifecycle, from creation and capture through classification, access, retention and final disposition.
• ISO 14641:2018. Electronic archiving. This standard specifies how to design and operate a system for preserving electronic information. The integrity, long-term preservation and traceability of archived documents are guaranteed in accordance with the standard.

As the controller within the meaning of Article 4(7) GDPR, E-Business Afrika applies the following technical and organisational measures:

• Data minimisation (Article 5(1)(c)). We collect only data that is adequate, relevant and necessary for the purposes of processing.
• Security of processing (Article 32). We use AES-256-GCM encryption at rest and TLS 1.3 in transit. Integrity checks use SHA-256 fingerprints. Role-based access follows the principle of least privilege.
• Records of processing activities (Article 30). We maintain a record of processing categories, purposes, categories of data subjects and applicable security measures.
• Breach notification (Articles 33 and 34). We notify the competent supervisory authority of any personal data breach within 72 hours. We also notify affected individuals where the breach is likely to pose a high risk.
• Data protection by design and by default (Article 25). We incorporate safeguards when designing each platform feature.
• Impact assessment (Article 35). We conduct a data protection impact assessment for processing likely to pose a high risk to individuals' rights and freedoms.

E-Business Afrika endeavours to keep the information on the Site accurate and current. The publisher cannot guarantee that the information is complete, accurate or up to date.

Users rely on this information at their own risk. The publisher accepts no liability for direct or indirect loss arising from access to the Site or use of its information, except in cases of its own gross negligence or wilful misconduct.

Access to the Site may be interrupted without notice for maintenance, updates, other technical reasons or force majeure. Such interruption does not give rise to compensation.

These legal notices are governed by the law applicable at the registered office of E-Business Afrika. Any dispute arising from their interpretation or performance falls within the exclusive jurisdiction of the courts for the publisher's registered office, subject to mandatory provisions to the contrary.

For users subject to European Union law, the mandatory provisions of Regulation (EU) 2016/679 and national legislation transposing Directive 2011/83/EU on consumer rights continue to apply.