aquaculture.ci
Data protection
How aquaculture.ci collects, uses and keeps your personal data
Text awaiting legal review
The data inventory below is derived from how the site actually works and can be read as accurate. The bracketed items are waiting for the controller's legal identity, the ARTCI declaration number and a lawyer's review before publication.
Last updated :
This page describes the data the site processes, why, for how long, and the rights granted to you in Côte d'Ivoire by law n° 2013-450 of 19 June 2013 on the protection of personal data.
On this page
Who is responsible for this data
The data controller is the entity that decides why and how your data is used:
- [exact legal name of PSTACI, legal form and registered address]
- [ARTCI declaration or authorisation number]
- [name and contact details of the data protection officer, if one is appointed]
For any question about your data: info@aquaculture.ci
What the site records
The site is readable without an account. Nothing in this table is recorded until you create one, apart from the last two rows.
| Data | Why | Kept for |
|---|---|---|
| Phone number | Create your account and send you the sign-in code | As long as the account exists |
| Sign-in code (hashed, never stored in clear) | Check that you hold the number | Deleted automatically 24 h after expiry |
| Name, category, region, species, language — all optional | Tailor the content and contacts shown to you | As long as the account exists |
| Quiz results | Show your progress and unlock levels | As long as the account exists |
| Record book: date, feed, mortality, oxygen, temperature, notes | Your own farm tracking | As long as the account exists |
| Questions asked of the advisor, their usefulness and the sources cited | Find content gaps and health signals | Stored with no link to your account |
| IP address passed on by the reverse proxy | Limit abuse of the forms and the API | Held in server memory only, never written to the database |
The site asks for no postal address, no identity document and no payment details, and uses no advertising trackers.
On what basis
Your number is collected with your consent, given when you request a sign-in code. Profile details and the record book are supplied by you, on your own initiative.
[final legal qualification of each purpose, to be confirmed by counsel]
Who else has access
Your data is not sold, exchanged, or passed to third parties for commercial purposes. Four providers are involved, each for a single task:
- Orange Côte d'Ivoire — Receives your number and the text of the SMS, in order to deliver your sign-in code.
- Anthropic (Claude API) — Receives the text of your advisor question and the library extracts. Neither your number nor your account is sent.
- Sentry — Receives technical error reports. Phone numbers and codes are stripped before they are sent.
- OpenStreetMap — Map tiles are loaded by your browser, so OpenStreetMap sees your IP address when you open the map.
Transfers outside Côte d'Ivoire
The advisor and the error monitoring rely on providers established outside Côte d'Ivoire, which means a transfer of data abroad within the meaning of law n° 2013-450.
[destination countries, contractual safeguards and the matching ARTCI authorisation]
Your rights
Law n° 2013-450 allows you to:
- Access the data concerning you
- Have it corrected when it is inaccurate
- Ask for your account and the data attached to it to be deleted
- Object to a processing operation or ask for it to be restricted
- Withdraw your consent at any time, without affecting what was done before
To exercise any of these rights, write to info@aquaculture.ci. We reply within [response time to be set]. We may ask you to confirm that you hold the number in question, so that your data is not handed to someone else.
If the answer does not satisfy you, you may refer the matter to the Autorité de Régulation des Télécommunications de Côte d'Ivoire (ARTCI), which oversees personal data protection. [ARTCI complaint contact details]
How this data is protected
- Sign-in codes are hashed: reading the database does not reveal a code.
- Each code is tied to the browser that requested it, expires after 5 minutes and allows only five attempts.
- The number of code requests is capped per number and per connection, so nobody can rain SMS on your number.
- Traffic to and from the site is encrypted (HTTPS).
- The session cookie is signed and cannot be read by scripts on the page.
Minors
[the programme's position on the minimum age for an account, in particular for the Academy's youth cohorts]
Changes to this page
This page may change as the site changes. The date of the last update is shown at the top. Any significant change will be announced on the site.
See also: create an account · PSTACI