Effective as of December 15, 2023

1. Purpose

We may ask you to provide us with personal data about yourself in the following cases:

The purpose of this Policy is to inform you about the means we implement to process your personal data, in strict compliance with your rights.

We inform you that in processing your personal data, we comply with the Law No. 78-17 of January 6, 1978 on Information Technology, Files and Freedoms, in its current version (hereinafter the "Information Technology and Freedoms Act"), as well as the Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR").

2. Definitions

The following definitions are those derived from the GDPR and the Information Technology and Freedoms Act:

PERSONAL DATA or DATA - Personal data is any information relating to an identified or identifiable natural person. This person can be identified directly (e.g., name and surname) or indirectly (e.g., by a telephone number or license plate number, an identifier such as social security number, a postal or email address, as well as voice or image), by means of a single piece of data or by the combination of several pieces of data (e.g., a woman living at a certain address, born on a certain day, and a member of a certain association).

RECIPIENT - The natural or legal person, public authority, service, or any other body authorized to receive communication of data recorded in a file or processing by virtue of its functions.

FILE - A file is a data processing operation that is organized in a stable and structured set of data. The data in a file is accessible according to specific criteria.

DATA CONTROLLER - The Data Controller is the legal entity (company, municipality, etc.) or natural person who determines the purposes and means of a processing, i.e., the objective and the way to achieve it. In practice and in general, it is the legal entity embodied by its legal representative.

PROCESSOR - The Processor is the natural or legal person (company or public organization) who processes data on behalf of another organization ("the Data Controller") as part of a service or provision.

PROCESSING - Processing of personal data is an operation or set of operations involving personal data, regardless of the method used (collection, recording, organization, storage, adaptation, alteration, extraction, consultation, use, communication by transmission or dissemination, or any other form of provision, reconciliation). Processing of personal data is not necessarily computerized: paper files are also affected and must be protected under the same conditions. Processing of data must have a specific objective and purpose prior to the collection and use of the data.

3. Who is Responsible for Processing Personal Data?