Privacy Policy

Last updated: December 2025

The purpose of this privacy policy is to inform users of the AtlasCyberAman.com website (hereinafter "the Site") about how their personal data is collected, used, protected and about the rights they have, in accordance with Moroccan law no. 09-08 relating to the protection of natural persons with regard to the processing of personal data.

1. Data Controller

The data controller for personal data is:

Name / Company name: AtlasCyberAman SARL AU
Address: 19 Rue Ibnou El Adil, Bourgogne, Casablanca, Morocco
Contact email: privacy@atlascyberaman.com

2. Personal data collected

The following data may be collected when using the Site:

Identity: last name, first name
Contact information: email address, phone number
Information submitted via contact or quote request forms
Exchanges conducted via communication channels integrated into the site (e.g., form, chat)
Technical data: IP address, browser type, browsing data (cookies)

The data collected is strictly necessary for the purposes described below.

3. Purposes of the processing

Personal data is collected and processed for the following purposes:

Respond to requests submitted via the Site's forms
Managing customer relationships and contact follow-up
Prepare quotes, invoices or service agreements
Improve the Site's functionality and user experience
Ensuring the security of the Site and preventing fraudulent use

The data is not used for purposes other than those explicitly stated.

4. Legal basis for processing

The processing of personal data is based on:

The user's explicit consent, when they fill out a form or contact the Site
Contractual necessity, when processing is required to provide a service or perform a contract
Compliance with legal obligations applicable to the data controller

5. Mandatory or optional nature of the data

The data marked as mandatory on the forms is necessary for processing requests. Failure to provide this information may prevent access to certain features or services of the Site.

6. Data Recipients

The personal data collected is intended exclusively for:

To the data controller and authorized persons
To the technical service providers involved in the operation of the Site (including the Wix platform)

The data is not sold, transferred, or rented to unauthorized third parties.

7. Data Hosting and Transfer

The data is hosted on the Wix.com platform, whose servers are located abroad. This data transfer is subject to a specific authorization request to the CNDP, in accordance with the articles of Law 09-08 relating to cross-border data flows.

The data controller ensures that these transfers offer an adequate level of protection in accordance with the requirements of Law No. 09-08 and Wix 's contractual commitments regarding data protection.

8. Data retention period

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including:

Contact details: duration of relationship + 3 years
Data for legal or accounting purposes: retention period as required by applicable regulations

9. Data Security and Technical Compliance

Data security is at the heart of AtlasCyberAman's DNA. We selected Wix.com Ltd.'s infrastructure after a rigorous audit of their certifications and security measures.

9.1 Infrastructure Certifications The hosting of our Site and our customer data relies on an infrastructure certified to comply with the most rigorous international standards:

ISO 27001: Information Security Management System (ISMS) Certification.
SOC 2 Type 2: Independent audit attesting to the effectiveness of security, availability and confidentiality controls over a continuous period.
PCI DSS Level 1: Maximum security standard for payment transactions and data.
ISO 27017 & 27018: Cloud-specific security and protection of personal information (PII) in the cloud.

9.2 Technical Protection Measures To guarantee the integrity and confidentiality of the data, the following measures are deployed:

Encryption in Transit: All communications between your browser and our Site are encrypted via the TLS 1.2 protocol (or higher) using advanced SSL certificates.
Encryption at Rest: Your data stored in our databases is encrypted according to the AES-256 (Advanced Encryption Standard 256 bits) standard, the most robust industry standard.
Key Management: Critical data is protected via FIPS 140-2 certified hardware security modules (HSMs).

9.3 Monitoring and Access Control

24/7/365 Monitoring: Our infrastructure benefits from continuous monitoring by a dedicated Security Operations Center (SOC), coupled with intrusion detection systems (SIEM).
Anti-DDoS Protection: Automated defense mechanisms protect the Site against distributed denial-of-service attacks.
Strict access control: Administrative access to data by our teams is restricted to what is strictly necessary ("Need-to-Know"), secured by strong authentication (MFA) and logged for auditing.

10. User Rights

In accordance with Law No. 09-08, any person concerned has the following rights:

Right of access to one's personal data
Right to rectification of inaccurate or incomplete data
Right to object, for legitimate reasons, to the processing of one's data
Right to erasure of data, within the limits provided by law

To exercise these rights, the user can send a request to:

Email: privacy@atlascyberaman.com

A response will be provided as soon as possible and at the latest within the applicable legal time limits.

11. Cookies

The Site may use cookies or similar technologies to improve user experience, measure audience and ensure the proper functioning of the Site.

The user can configure their browser to refuse or limit cookies.

12. Declaration to the CNDP

The processing of data collected via the Site has been declared to the CNDP under receipt number: [IN PROGRESS]

13. Changes to the Privacy Policy

This privacy policy may be updated at any time to reflect legal, regulatory or technical developments.

Users are encouraged to check it regularly.

14. Contact

For any questions relating to this privacy policy or the protection of personal data, you can contact us at:

Email: privacy@atlascyberaman.com