CNDP Compliance & Data Protection Notice

1. PREAMBLE

Sept-Marianne, developed and operated by Saad Aboussabr (Auto-entrepreneur), acknowledges the importance of personal data protection and is committed to operating in compliance with Moroccan Law 09-08 promulgated by Dahir No. 1-09-15 of Safar 22, 1430 (February 18, 2009).

This document outlines the measures and legal posture adopted to ensure compliance with the requirements of the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).

2. DECLARATION OF PROCESSING

The processing of personal data related to the management of User accounts on the Sept-Marianne platform is subject to the necessary formalities with the CNDP, in accordance with applicable regulations.

3. RIGHTS OF THE DATA SUBJECT

Pursuant to Articles 5, 7, 8, and 9 of Law 09-08, every User whose data is processed by the Platform has the following rights:

• Right to Information: To be informed of the collection and purpose of processing.
• Right of Access: To obtain confirmation that their data is being processed and to access such data.
• Right of Rectification: To correct inaccurate or incomplete data.
• Right of Opposition: To object, on legitimate grounds, to the processing of their data.

To exercise these rights, requests should be sent to: saadabou.labworks@gmail.com.

4. DATA HOSTING AND TRANSFERS

Users are informed that for technical reasons related to cloud infrastructure, data may be hosted on secure servers located outside of Morocco. In such cases, the Owner ensures that the transfer is compatible with CNDP regulations concerning cross-border data flows, utilising providers that offer adequate levels of protection.

5. RESPONSIBILITY FOR SUB-PROCESSING (USER FORMS)

When you use Sept-Marianne to build forms, manage clients, or collect data from third parties ("Respondents"):

1. You (The User) are the Data Controller. You act as the "Responsable du Traitement" as defined by Law 09-08.
2. We (The Owner) are the Data Processor. We act as the "Sous-traitant".

As the Data Controller, it is YOUR LEGAL OBLIGATION to:

• Notify the CNDP of your data processing activities.
• Obtain necessary consents from your Respondents.
• Ensure you do not collect sensitive data (health, ethnicity, etc.) without specific CNDP authorization.

Saad Aboussabr disclaims all liability for the User's failure to comply with CNDP notification requirements regarding their own data collection activities using the Platform.

6. SECURITY MEASURES

We implement technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. These measures include encryption where feasible, and secure application architecture.

7. CONTACT

For inquiries regarding CNDP compliance, please contact us at: