Privacy Policy

1 Information We Collect

We may collect the following categories of personal information when you interact with our website or services:

1.1 Information You Provide Directly

• Contact Information: Name, first name, last name, company name, email address, telephone number, and any other information you provide through our contact form.
• Business Information: Job title, company name, industry sector, and nature of your inquiry or project request.
• Account Credentials: Username and password for users authorized to access our internal staff portal (SCADACOM Portal).
• Correspondence: Any communications you send to us via email, contact forms, or other channels.

1.2 Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.
• Device Information: Hardware model, unique device identifiers, and mobile network information.
• Usage Data: Information about how you interact with our website, including links clicked and features used.
• Cookies: Small data files stored on your device to enhance your browsing experience (see Section 7).

2 How We Use Your Information

SCADACOM uses the personal data we collect for the following purposes:

• Responding to Inquiries: To respond to your questions, service requests, and contact form submissions.
• Business Communications: To send you information about our services, projects, and company updates where you have consented or where we have a legitimate interest.
• Portal Access Management: To manage and authenticate access to our internal management portal for authorized staff.
• Service Delivery: To deliver, maintain, and improve our telecom services and operational activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations in Morocco and other jurisdictions where we operate.
• Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Analytics: To analyze website usage patterns to improve our website and user experience.
• Recruitment: To process and respond to job applications and CVs submitted to us.

3 Legal Basis for Processing

We process your personal data on one or more of the following legal bases:

• Consent: Where you have given us clear consent to process your personal data for a specific purpose (e.g., marketing communications).
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary to comply with a legal obligation to which SCADACOM is subject under Moroccan law or applicable international regulations.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

4 Disclosure of Your Information

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting our business (e.g., IT hosting, email services), subject to strict confidentiality agreements.
• Business Partners: With technology vendors and business partners strictly for the purpose of delivering agreed services, and only with your knowledge.
• Legal Requirements: When required by law, court order, or governmental authority in Morocco or other applicable jurisdictions.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity, subject to the same privacy protections.
• Protection of Rights: When we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

• Contact form inquiries: Retained for 3 years from the date of last communication.
• Staff portal accounts: Retained for the duration of employment and 5 years thereafter, in compliance with Moroccan labor regulations.
• Website analytics data: Retained for a maximum of 26 months.
• Legal and contractual records: Retained for 10 years in accordance with Moroccan commercial law.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized.

6 Security of Your Information

SCADACOM implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• Encrypted data transmission using SSL/TLS protocols (HTTPS).
• Access controls and authentication mechanisms for our internal portal.
• Regular security assessments and vulnerability testing.
• Staff training on data protection and security practices.
• Physical security measures at our premises and data centers.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

7 Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. We use the following types of cookies:

• Essential Cookies: Strictly necessary for the website to function properly (e.g., session management, security). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Preference Cookies: Enable the website to remember your preferences and settings.

You can control and/or delete cookies as you wish through your browser settings. Disabling cookies may affect the functionality of certain parts of our website.

8 Your Rights

Under Moroccan Law No. 09-08 and applicable data protection regulations, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing or based on legitimate interests.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP) in Morocco.

9 International Data Transfers

SCADACOM operates across multiple African countries. When we transfer personal data outside of Morocco, we ensure that appropriate safeguards are in place to protect your information, in compliance with Moroccan Law No. 09-08 and applicable data protection standards.

Such safeguards may include:

• Transferring data only to countries with adequate data protection laws.
• Implementing standard contractual clauses with data recipients.
• Ensuring recipients maintain equivalent data protection standards.

10 Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to information collected by SCADACOM through our website and services.

11 Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete such information from our records.

12 Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any significant changes by:

• Posting the updated policy on this page with a revised "Last Updated" date.
• Sending an email notification to registered portal users where changes are material.

Your continued use of our website after the posting of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us: