Privacy policy

1. Data controller

The data controller is the Advanced Programme of Specialisation in Public Finance (PSSFP), Messa Campus, Yaoundé — Cameroon.

The designated contact point for data protection matters is the Head of the PSSFP information systems department, reachable at the address given at the end of this document.

2. Applicable law and jurisdiction

The processing described in this policy is governed by Cameroonian law. The Cameroonian courts alone have jurisdiction over any related dispute.

Any complaint regarding the processing of your data may be addressed to the PSSFP at the contact address given at the end of this document and, failing a satisfactory reply, brought before the competent national authority for the protection of personal data.

3. Data collected

• Identity data: title, surname, first name, date and place of birth, gender, nationality, marital status.
• Contact data: phone number(s) and email address — both are mandatory, the email address carrying all official communications up to the admission decision — together with postal address, city and country.
• Academic and professional data: qualification, institution, year awarded, professional situation, employer.
• Passport photograph uploaded by the applicant.
• Minimal technical security data: IP address and timestamp on sign-in and submission.

4. Purposes

• Creating and managing the applicant account.
• Assembling, processing and assessing the application file by the admissions committee.
• Communicating with the applicant (submission confirmation, requests for further documents, decision).
• Fraud prevention and portal security.

5. Legal basis

Processing is based on the applicant's consent, collected through a dedicated checkbox at registration, and on the PSSFP's legitimate interest in organising its recruitment procedures and keeping them secure.

6. Recipients and processors

Your data is intended for authorised PSSFP departments and members of the admissions committee. It is neither sold nor transferred to third parties for commercial purposes.

The following technical processors handle data on our behalf, strictly within the scope of their assignment:

• Cloudflare, Inc. (United States) — Turnstile anti-robot protection service. The IP address and technical browsing signals are transmitted; no application data is. This service is retained for portal security: without it, the public form would be exposed to automated submissions.
• Short message (SMS) delivery provider — phone number and content of the authentication message.
• Email delivery provider — email address and content of notifications.
• Hosting of the platform and of supporting documents.

7. Transfers outside Cameroon

Use of the anti-robot protection service mentioned above entails a transfer of technical data outside Cameroonian territory. That transfer is limited to the data strictly necessary to detect automated submissions and includes no part of the application file.

8. Retention period

The data of unsuccessful applicants is retained for the duration of the intake and for up to twenty-four (24) months after the results are published, then archived or deleted.

The data of admitted applicants is retained for ten (10) years from publication of the results, the period required to manage studies, issue degrees and evidence the course of study. This period is distinct from that of the student record, which is governed by the institution's own archiving rules.

9. Security

The PSSFP implements appropriate technical and organisational measures: encrypted communications (HTTPS), private storage of documents (photograph, acknowledgement of receipt) through time-limited signed links, access control and logging of sensitive actions.

10. Data breach

In the event of a data breach likely to create a risk to your rights, the PSSFP informs the competent national authority without undue delay and, where the risk is high, notifies the individuals concerned directly by email at the address recorded in their file.

11. Your rights

You have the right to access, rectify, erase, restrict and port your data, as well as the right to withdraw your consent.

To exercise these rights, write to the contact address quoting your file number. You will receive a reply within a maximum of thirty (30) days of receipt of the request.

Withdrawing consent may prevent your application from being processed further.

12. Cookies

The portal only uses cookies strictly necessary for it to work (maintaining a secure session, remembering your chosen language, anti-robot protection). No advertising tracking cookie is placed.