Last updated: 7 November 2026The Inter-Governmental Action Group against Money Laundering in West Africa (GIABA) attaches great importance to protecting the privacy of the people who use its website. This policy explains, in plain terms, what personal data is collected, why, with whom it is shared, how long it is kept and how you can exercise your rights.
1. Data controller
The controller of the data collected on the website is the GIABA Secretariat, a specialised institution of ECOWAS:
- Address: Yoff Aourar, Ngor Diarama Hotel road, Dakar, Senegal
- Telephone: +221 33 859 18 18
- Email: secretariat@giaba.org
The Secretariat has appointed an internal focal point for personal data matters, who can be contacted at the same email address by writing “Personal data” in the subject line.
2. Our principles
GIABA processes personal data in accordance with the ECOWAS principles on the protection of personal data, without prejudice to the privileges and immunities it enjoys. These principles are as follows:
- Lawfulness and fairness: data is collected transparently, for stated purposes.
- Data minimisation: only strictly necessary data is requested.
- Accuracy: data is kept up to date and can be corrected at your request.
- Limited retention: data is not kept longer than necessary.
- Security and confidentiality: data is protected against unauthorised access.
3. Data collected and purposes
| Situation | Data collected | Purpose |
|---|
| Contact form | First name, last name, email address, telephone (optional), subject and content of the message | To respond to your request for information, documentation, partnership or press enquiries |
| Newsletter | Email address | To send you GIABA news, publications and events |
| Application in response to a vacancy notice or call for applications | Data contained in your application: application form, CV, cover letter, qualifications and references | To review your application in accordance with the procedure described in the notice |
| Response to an invitation to tender | Contact details of the bidding company’s representatives | To evaluate bids and manage the contract |
| Browsing the website | Technical data: IP address, browser type, pages viewed, date and time of connection, cookie choices | To ensure the proper functioning and security of the website and to record your consent |
GIABA never sells, rents or transfers your personal data. It is not used for any commercial or advertising purpose.
4. Legal bases for processing
- Your consent, for newsletter subscription and the placement of non-essential cookies. You may withdraw it at any time.
- Your request, when you write to us, submit an application or respond to an invitation to tender.
- GIABA’s legitimate interest in ensuring the security and proper functioning of its website.
- The performance of its mandate as a specialised institution of ECOWAS.
5. Recipients of the data
Your data is accessible only to GIABA Secretariat staff authorised to process it, within the limits of their duties: the communication unit for messages and the newsletter, the human resources unit and the selection panel for applications, and the procurement unit for invitations to tender.It may be processed on GIABA’s behalf and on its instructions by technical service providers (website hosting, email delivery), who are bound by a strict duty of confidentiality. It is disclosed to third parties only where required by a legal obligation or an applicable procedure.
6. Transfers outside the region
Some technical service providers may be located outside the ECOWAS region. In such cases, GIABA ensures that they offer an adequate level of protection and that they are contractually bound to respect the confidentiality and security of the data.
7. Retention periods
| Data | Retention period |
|---|
| Contact form messages | 3 years from the last exchange |
| Newsletter subscription | Until you unsubscribe |
| Successful applications | Placed in the staff member’s personnel file |
| Unsuccessful applications | 2 years after the end of the procedure, unless you object |
| Tender files | Period laid down by GIABA’s financial and accounting rules |
| Technical connection logs | 12 months |
| Cookie choices | 12 months |
At the end of these periods, the data is deleted or anonymised.
8. Security
GIABA implements appropriate technical and organisational measures to protect your data against loss, destruction, unauthorised access, disclosure or alteration: encrypted connection, restricted and individual access to data, protection of the administration interface, regular backups and security updates of the website.
9. Your rights
You have the following rights regarding your personal data:
- Right of access: to know whether data concerning you is being processed and to obtain a copy.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to request the deletion of your data when its retention is no longer necessary.
- Right to object: to object to processing on legitimate grounds.
- Withdrawal of consent: to withdraw your consent at any time, without affecting processing already carried out.
You can unsubscribe from the newsletter at any time using the link at the bottom of each mailing.
10. Exercising your rights
To exercise your rights, write to the GIABA Secretariat at secretariat@giaba.org, stating “Personal data” in the subject line and specifying your request. To protect your data, you may be asked for proof of identity. You will receive a reply within one month of receipt of your request.If you consider that your rights have not been respected, you may submit a complaint to the GIABA Directorate General, which will examine it with the utmost care.
11. Minors
The website is intended mainly for professionals, institutions and the adult general public. GIABA does not knowingly collect data about persons under the age of 18. If you believe that a minor has sent us data, please contact us so that we can delete it.
12. Cookies
The use of cookies on the website and how to change your choices are described in the
cookie policy.
13. Links to other websites
The website contains links to third-party websites (partner organisations, Member States, social networks, video platforms). These websites apply their own personal data rules, which we invite you to consult.
14. Changes to this policy
GIABA may update this policy to reflect changes to the website or to the applicable rules. The date of the last update appears at the top of this page. In the event of a significant change, a notice will be published on the website.
15. Contact
For any questions about this policy or the processing of your data, write to secretariat@giaba.org or visit the
Contact the Secretariat page.
