Last updated:
This policy describes the personal data RDS, Réseaux de Solutions processes when you use expseasons.com, why it is processed, who it is shared with, and the rights you can exercise. It describes how this site actually works rather than a template.
RDS, Réseaux de Solutions, Douala, Cameroon, organiser of EXP Seasons and EXP Summit 2026.
For any question or request about your data: e-contact@expseasons.com.
Account. When you create an account: your email address, and if you provide them, your full name, phone number and preferred language. Your password is never visible to us — it is held and hashed by our authentication provider.
Membership card. If you provide them: your city, country, headline or job title, organisation, LinkedIn profile and photo. They appear on your Innovation Club card, which only you choose to download and share. While QR verification is on, anyone who scans the code sees your first name, photo, tier and membership expiry; you can switch it off or reset the link at any time.
Sex and date of birth. Optional. Never published or shown on the card; used for anonymous audience statistics. ExpSeasons administrators can see them individually and correct any profile data; each of their changes is logged.
Enquiries. When you complete the enquiry form: company name, contact name, email address, phone number and the message you write.
Press accreditation. The outlet you represent, contact name, email address and phone number.
Companies and delegations. If you manage a delegation: the company’s legal name, VAT number, billing address and country; and for each person you enter, their first and last name, email address, phone number, institution, position, together with the role, group and notes you record.
Security and reliability. An IP address is used transiently to rate-limit the public forms and by the anti-bot service. Addresses that permanently rejected an email are retained so that we stop writing to them. Administrative actions are logged with the identifier and email address of whoever took them.
We collect no payment card details on this site. We use Google Analytics to measure the site’s audience — pages viewed, device type, approximate origin of visits — which sets that service’s own cookies in your browser.
When you share Expseasons Media content while signed in, the link carries a random code of your own. If someone creates an account or buys after opening that link, we record that your link brought them; they do not see who shared it and you do not see who they are. The record is kept with their account.
Purchases. When you buy an Innovation Club membership or a single-session access we record the order (product, amount, currency), its payments (payment method, provider reference; for mobile money the number used, the currency, the local amount and the rate applied), the billing country the provider reports, and the sentence waiving your right of withdrawal that you ticked, with the moment you ticked it. Card details are entered at Stripe, never on this site.
Live video and replays. The Innovation Club membership and single-session accesses are bought and listed on expseasons.com (“My access”); on expseasons.media your account determines what you may watch (the membership or access, its source and its validity). Playback goes through Cloudflare Stream, which receives your IP address and a signed playback token valid for ten minutes; we keep no viewing history.
To run your account and your access; to answer a commercial enquiry or an accreditation request; to organise the event and receive delegations; to send you the emails the service requires (address confirmation, password reset); to protect the site from abuse; and to meet our legal and accounting obligations.
The legal basis is, depending on the case, performance of a contract or steps taken before entering one, our legitimate interest in securing the service, or your consent where consent is required.
Newsletter. If you tick the newsletter box on the home page, an enquiry or an accreditation request, we record your address as pending and send you a confirmation email: only your confirmation switches on our news (seasons, speakers, reminders). If you switch the option on in your account, your subscription is confirmed immediately, with no confirmation email: consent is the click itself, made from your already signed-in account. Either way, the legal basis is your consent, which you can withdraw at any time through the unsubscribe link in every message or from your account. Accredited journalists may receive our releases on the basis of our legitimate interest, with the same unsubscribe link.
We do not sell your data and do not share it for advertising. It is processed on our behalf by:
Supabase — authentication, database and application functions.
Cloudflare — site hosting and anti-bot protection of the forms.
Amazon Web Services (SES) — sending the service’s emails, from the eu-central-1 region (Frankfurt, Germany), including handling delivery failures.
Google and Apple — only if you choose to sign in with one of them, in which case they pass us your email address and name.
Google Analytics — audience measurement for the site: pages viewed, device type and approximate origin of visits, collected on our behalf by Google.
Cloudflare Stream — delivery of live sessions and replays on expseasons.media: your IP address and a signed playback token, valid for ten minutes, are passed to it to serve the video.
Stripe — card payments: you are sent to its payment page, which receives the amount, your email address and your card details; it reports the payment status and the billing country back to us.
pawaPay — mobile money payments: it receives the phone number you enter, the amount and the currency, and reports the payment outcome back to us.
3T Ticket — worth singling out: if your company registers you for the event, your participant record (name, email, phone, institution, position, role, group and notes) is passed to 3T Ticket, who issue the invitations and tickets.
These providers involve transfers outside Cameroon, in particular to the European Union and the United States.
Account data is kept while the account exists. Enquiries and accreditation requests are kept while they are being handled and then for as long as our accounting and evidential obligations require. Event data is kept for the organisation and follow-up of that event. The email suppression list is kept indefinitely, precisely so that those addresses are never written to again. Newsletter contacts are kept until they unsubscribe, then for twelve months with only the unsubscribed marker so that an import cannot re-add them; sending logs are kept for twenty-four months.
You may request access to your data, its correction or erasure, restriction of its processing, its portability, and you may object to processing based on our legitimate interest.
Write to e-contact@expseasons.com. We answer within one month. If you are in the European Economic Area these rights are yours under the GDPR, and you may lodge a complaint with your data protection authority.
Access is controlled in the database itself by row-level policies: every read and every write is checked by the server rather than by the interface. Roles are never read from data supplied by the browser. Administrative actions are logged.
No photograph or video of an identifiable person is published on this site without a written licence naming the licensor, the scope of use and its expiry. That rule is enforced technically: a publication missing any of those three is refused by the database.
Any substantive change — in particular a new recipient — is published here with a new update date.