ALD Automotive SA (Moroccan entity) and privacy

ALD Automotive SA (Moroccan entity) is a provider of mobility services, including operational vehicle leasing, fleet management and remarketing activities. This privacy policy explains our practices regarding the personal data of users of our carmarket.ayvens.com ("you").

We respect your privacy and therefore we process your personal data in accordance with the Law No. 09-08 on the protection of individuals with regard to the processing of personal data (hereinafter "Law 09-08") which provides a framework for the processing of personal data of natural persons by companies established in Morocco.

1. General principles

ALD Automotive SA (Moroccan entity) understands your concerns regarding the confidentiality of your personal information. Below we describe how we acquire and use that information and outline your rights. Please read this carefully, so that the process is as fair, transparent and secure as possible.

The following principles are central to how we process your personal information:

Transparency and fairness: When we collect and process your personal information, we inform you as to who collects and receives these data, and the reasons for this. When required by law, we always seek your prior consent (e.g., before collecting any sensitive information or sending any direct marketing material). We never use your personal information for purposes that are incompatible with the purposes outlined here.
Legitimacy: ALD Automotive SA (Moroccan entity) does not collect or process personal information without a lawful reason. We use your personal information only for appropriate business purposes for which we are duly authorized for by the CNDP (e.g., to provide services, manage relationships with customers, manage customer vehicle fleets, and perform accurate invoicing, or for marketing activities, profiling to better serve customers, to conduct satisfaction surveys or draft reports and comply with our legal obligations).
Minimization: We only collect the personal information strictly necessary for data processing, as set out in this document. We collect sensitive information only where relevant. We take all reasonable measures to ensure that your personal data on record is accurate, complete and up to date.
Privacy: We endeavor to ensure privacy when implementing personal data processing. To this end we also ensure that our safeguards are appropriate and that your information is protected.

2. About us

ALD Automotive SA (Morocco) is the data controller of your personal data.

Our contact details:

Km 10 Route d’EL Jadida – Lissasfa Park

Casablanca

E-mail:E-mail : abdellah.kettani@aldautomotive.com

You can reach our data protection officer via: narjiss.elomari@aldautomotive.com

3. How we use your personal data and which personal data is used

PROCESSING	LEGAL BASIS	DATA SUBJECTS CONCERNED	DATA COLLECTED
Assessment and identification of the customer in order to conclude a sales contract	Contract	Legal representatives	Identity document of the legal representative; RC (register de commerce) certificate
Management of the contractual relationship car dealers and traders (B2B)	Contract	Legal representatives	Surname; first name; position; e-mail address; phone and mobile number ID Card company rep employee and/or ID company rep; Power of attorney with signature ; RC (register de commerce) certificate ; Tax identification proof ; Bank account details
Management of the contractual relationship retail (B2C and small B2B)	Contract	Individuals legal representatives for small companies	Individuals: ID card and address proof, driving license and the tax identification number ; e-mail address; phone and mobile number Compagnies : RC (register de commerce) certificate
Anti-money laundering and fighting the financing of terrorism	Legal obligation	Legal representatives; Company members; UBO if accessible locally; individual customers	Name; First name of the legal representatives; Identity document; RC (register de commerce) certificate : • Full name (given names and surname); • Gender; • Function title; • Date of birth; • Complete residential address; Screening results
PROCESSING	LEGAL BASIS	DATA SUBJECTS CONCERNED	DATA COLLECTED
Marketing or promotional activities ; Sending newsletters, surveys, or satisfaction polls	Consent	Customers Traders	Name; First name; Postal address; E-mail address; Telephone number
Pick-Up Services	Contract	Drivers	Name of the driver ; address and postal code of the driver's pick up address ; driver's phone number ; driver's email address
Driver's handover of the Vehicle	Contract	Drivers	Name of the driver ; Driver's phone number ; Driver's email address
Sales via the auction platform to traders (i.e. legal persons or companies)	Consent	Natural person acting on behalf of their business; (pseudo-) UBO(s) if accessible locally; Director(s) and, if applicable, Counterparty Representatives	Full name (given names and surname); Gender ; Residential private address ; Date of birth ; Identification number ; Screening results / For director(s) and counterparty Representatives : Full name (given names and surname); Gender ; Function title ; Date of birth ; Complete residential address
Defleeting	Legal obligation	Drivers	Vehicule ; papers of the vehicule
Price setting	Legitimate interest	contact person at a garage	Name ; Professional telephone number ; Professional email address
Refurbishment of the vehicle	Contract	drivers	deleting of personal data contained in the car
Retail (B2C and small B2B)	Contract	individuals, small companies	Individuals: ID card and address proof, driving license and the tax number/tax identification number Companies : RC (register de commerce) certificate

4. How long do we keep your personal information

Personal data is kept by ALD Automotive SA (Moroccan entity), in an active base, for the time necessary to achieve the objective pursued at the time of their collection, in full compliance with the Moroccan laws.

The retention period is therefore initially set by ALD Automotive SA (Moroccan entity) according to the operational needs necessary for the execution of each individual rental contract and taking into consideration any recommendations of the local Data protection authority CNDP.

However, certain longer retention periods may result from legislative and regulatory texts. Some laws also require that documents/information containing personal data be retained for a specific period of time for evidentiary purposes or in anticipation of possible litigation until the action in question is time-barred. Ayvens is therefore obliged to keep certain personal data beyond the execution of the lease contracts, even though it no longer has any use for them, in the form of so-called intermediate archives.

At the end of these periods, the personal data is:

Anonymized; and/or
Purged

5. Who ALD Automotive SA (Moroccan entity) may share your personal data with

In principle, we do not share your data with third parties. However, as part of the execution of the sales contract, we may share company information and personal data with AyvensGroup & Ayvens’s affiliates/ SG Group in order to streamline the KYC process.

6. Export of personal data outside of Morocco and/or the EEA

ALD Automotive SA (Moroccan entity) is duly authorised by the CNDP for abroad transfers of personal data by the authorization N° T-HB-88/2018.

As part of the process of sharing company information and personal data with Ayvens Group & Ayvens's affiliates and SG Group, the collected personal data can be subject to transfers outside Morocco.

In general, all of the Ayvens databases are located inside the European Union. However, Ayvens may transfer your personal data from the Europe to countries within or outside the European Economic Area. The countries outside of the EEA may not provide the same level of protection as is available in the EEA.

If we transfer your personal data outside the EEA, we will ensure that adequate levels of protection are in place in relation to the processing of your personal data. Hence, Ayvens will before transferring your personal data outside Europe make sure to implement a Standard Contractual Clauses (SCC). This applies to our support team based in India (SGGSC).

7. Your rights

In order to protect data subjects concerned by the processing of personal data, the Law 09-08 has implemented rights.

The rights of data subjects are: the right to information, the right of access, the right to rectification and the right to object:

The right to information : The obligation to provide information during the collection of data, provided for in Article 5 of Law 09-08, concerns the prior information of any person in a precise, express and unequivocal manner of the use or storage of computerized data concerning him/her.
The right of access : as recognized in Article 7 of Law 09-08, is the right that allows any person to access information concerning him or her to ensure its accuracy.
The right to rectification : as recognized in Article 8 of Law 09-08, individuals may request the rectification of information concerning them, in particular when it is inaccurate or incomplete.
The right to object : as recognised in Article 9 of Law 09-08, allows any person whose personal data is being processed to object, free of charge, to the use of data concerning him or her for prospecting purposes, in particular commercial prospecting.

8. Security and data storage

ALD Automotive SA (Moroccan entity) protects your data through technical and organizational security measures, including:

Up-to-date policies and work instructions and regular verification of compliance;
Segregation of duties and roles, so that our employees only have access to your personal data if it is necessary for their function and role;
Effective training of our employees on the rules, issues and risks involved;
Physical security of the premises where we process your personal data (e.g., access control and video surveillance cameras);
Numerous IT security measures (secure servers, firewalls and encryption).

Only those teams and employees who need to know your information within our company can access it. ALD Automotive SA (Moroccan entity) make sure to implement administration rights and policies within our company, and we take all measures to ensure that employees, advisers and service providers keep your files confidential.

9. Cookies Policy & Websites

ALD Automotive SA (Moroccan entity) may collect data via cookies to improve the user's browsing experience. Cookies are used, among other tracers, to store preferences and settings in order to save time, enable login, combat fraud, analyze the performance of the website and the services provided by the renter, and compile visit statistics.

For more details you can consult our Cookie policy by following this link:

https://carmarket.ayvens.com/cookiepolicy/

10. Updates of this Privacy Policy

We may modify this Privacy Policy periodically to be compliant with any new regulations, so please review it regularly. If we change this Privacy Policy, we shall notify you by means of providing a notice on our website homepage. This Notice was last amended on March 4^th, 2024.

11. How to contact us

To exercise the rights set out in the article 10 at any time, please send us a letter or an email to the following address ALD Automotive SA (Moroccan entity), Km 10 Route d’El Jadida- Lissasfa Park, Casablanca : or contact your local Ayvens Data Protection Officer through narjiss.elomari@aldautomotive.com, and we will handle your request