al-isbaah-ksa

PERSONAL DATA

Definitions

The Publisher: The natural or legal person who publishes the online communication services to the public.

The Site: All websites, Internet pages, and online services offered by the Publisher.

The User: The person using the Site and its services.


1 – Nature of data collected

In the course of using the Sites, the Publisher may collect the following categories of data concerning its Users:

  • Civil status, identity, identification data…

  • Connection data (IP addresses, event logs, etc.)


2 – Communication of personal data to third parties

No communication to third parties.

Your data will not be disclosed to third parties. However, you are informed that they may be disclosed pursuant to a law, a regulation, or a decision by a competent regulatory or judicial authority.


3 – Prior information for the communication of personal data to third parties in the event of a merger / acquisition

Prior information and opt-out possibility before and after the merger / acquisition.

In the event that we take part in a merger, acquisition, or any other form of transfer of assets, we undertake to ensure the confidentiality of your personal data and to inform you before they are transferred or subjected to new privacy rules.


4 – Data aggregation

Aggregation with non-personal data
We may publish, disclose, and use aggregated information (information relating to all our Users or to specific groups or categories of Users, combined in such a way that an individual User can no longer be identified or mentioned) and non-personal information for sector and market analysis, demographic profiling, promotional and advertising purposes, and other commercial purposes.

Aggregation with personal data available from the User’s social media accounts
If you connect your account to another service account in order to enable cross-posting, that service may provide us with your profile information, login details, and any other information you have authorized for disclosure. We may aggregate this information with that of other Users.


5 – Collection of identity data

Free consultation
Browsing the Site does not require prior registration or identification. It can be done without providing any personal data about yourself (name, surname, address, etc.). We do not record any personal data for simple browsing of the Site.


6 – Collection of identification data

Use of the User’s identifier only for access to services
We use your electronic identifiers only for and during the execution of the contract.


7 – Collection of device data

No collection of technical data
We do not collect or store any technical data from your device (IP address, Internet service provider, etc.).


8 – Cookies

Retention period for cookies
In accordance with CNIL recommendations, the maximum retention period for cookies is 13 months after their first placement on the User’s device, as is the duration of the User’s consent to the use of these cookies. The cookie’s lifespan is not extended with each visit. The User’s consent must therefore be renewed at the end of this period.

Purpose of cookies
Cookies may be used for statistical purposes, in particular to optimize the services provided to the User, based on the processing of information regarding frequency of access, page customization, operations carried out, and information viewed.

You are informed that the Publisher may place cookies on your device. The cookie records information about browsing on the service (pages visited, date and time of visit, etc.) that we may read during subsequent visits.

Right of the User to refuse cookies
You acknowledge being informed that the Publisher may use cookies. If you do not wish to have cookies placed on your device, most browsers allow you to disable cookies through the settings options.


9 – Retention of technical data

Technical data is kept for the strictly necessary period to achieve the purposes mentioned above.


10 – Retention and anonymization period for personal data

Retention of data during the contractual relationship
In accordance with Article 6-5° of Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, personal data subject to processing shall not be retained beyond the time required to fulfill the obligations defined upon contract conclusion or the predetermined duration of the contractual relationship.

Retention of anonymized data beyond the contractual relationship / after account deletion
We retain personal data strictly for the duration necessary to achieve the purposes described in this Privacy Policy. Beyond that period, they will be anonymized and kept solely for statistical purposes and will not be used in any way.

Deletion of data after account deletion
Mechanisms for data purging are in place to ensure effective deletion once the retention or archiving period necessary to achieve the determined purposes has been reached. In accordance with Law No. 78-17 of January 6, 1978, you also have a right to deletion of your data, which you can exercise at any time by contacting the Publisher.

Deletion of data after 3 years of inactivity
For security reasons, if you have not logged in to the Site for three years, you will receive an email inviting you to log in promptly, otherwise your data will be deleted from our databases.


11 – Account deletion

Account deletion upon request
The User may delete their Account at any time, by simple request to the Publisher OR through the account deletion option available in the Account settings, where applicable.

Account deletion in case of violation of the Privacy Policy
In the event of a violation of one or more provisions of the Privacy Policy or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict, without prior notice and at its sole discretion, your use and access to the services, your account, and all the Sites.


12 – Security breach notification

User information in case of a security breach
We undertake to implement all appropriate technical and organizational measures to ensure a level of security appropriate to the risks of accidental, unauthorized, or illegal access, disclosure, alteration, loss, or destruction of personal data concerning you.

If we become aware of illegal access to personal data concerning you stored on our servers or those of our service providers, or of unauthorized access resulting in the identified risks above, we undertake to:

  • Notify you of the incident as soon as possible;

  • Examine the causes of the incident and inform you;

  • Take the necessary measures, within reasonable limits, to mitigate the negative effects and harm that may result from said incident.

Limitation of liability
Under no circumstances may the commitments defined above regarding notification in the event of a security breach be considered as an acknowledgment of fault or liability regarding the occurrence of the incident in question.


13 – Transfer of personal data abroad

Transfer of data to countries with an equivalent level of protection
The Publisher undertakes to comply with applicable regulations regarding transfers of data to foreign countries, including as follows:

  • The Publisher transfers Users’ personal data to countries recognized as providing an equivalent level of protection.

  • The Publisher transfers Users’ personal data outside countries recognized by the CNIL as having sufficient protection, having obtained authorization from the CNIL to carry out such transfer.

For the list of these countries: CNIL – Data protection worldwide
https://www.cnil.fr/en/data-protection-worldwide


14 – Modification of the Privacy Policy

In case of modification of this Privacy Policy, we undertake not to substantially lower the level of confidentiality of your data without prior information of the persons concerned.

We undertake to inform you in case of a substantial modification of this Privacy Policy and not to lower the level of confidentiality of your data in a substantial way without informing you and obtaining your consent.


15 – Governing law and dispute resolution

Application of French law (CNIL legislation) and jurisdiction of courts
This Privacy Policy and your use of the Site are governed by and interpreted in accordance with the laws of France, in particular Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms.

The choice of applicable law does not affect your rights as a consumer in accordance with the law of your place of residence. If you are a consumer, both you and we agree to submit to the non-exclusive jurisdiction of the French courts, which means you may bring a claim related to this Privacy Policy in France or in the EU country where you live.

If you are a professional, all actions against us must be brought before a court in France.

In case of a dispute, the parties will seek an amicable solution before any legal action. If these attempts fail, any disputes concerning the validity, interpretation, and/or execution of the Privacy Policy must be brought, even in the event of multiple defendants or third-party claims, before the French courts.


16 – Data portability

The Publisher undertakes to offer you the possibility of retrieving all of your personal data upon simple request. The User is thus guaranteed better control of their data and retains the possibility of reusing it. This data must be provided in an open and easily reusable format.