Privacy and Personal Data Protection Policy

Last Updated: June 1, 2025

At SolvyTech (here in after “we”, “us”, “our”), accessible from https://en.solvytech.com, protecting the privacy of our visitors and clients is a top priority.

This Privacy Policy transparently details the types of information we collect, how we process it, and your rights as a user. It aims to ensure our compliance with applicable regulations, including the General Data Protection Regulation (GDPR) for our European visitors and Moroccan Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data.

1. Identity of the Data Controller

The Data Controller responsible for the data collected on this website is: Company: SOLVYTECH Contact Email: [email protected]

2. Collection of Personal Data

We only collect data necessary for our consulting, development, and IT service activities. The types of data include:

• Identification and Contact Data: First name, last name, company name, professional email address, phone number, postal address.
• Technical and Browsing Data: IP address, browser type, internet service provider (ISP), pages visited, timestamps. This data is collected notably via our server logs for security and maintenance purposes.
• IT Project-Related Data: Technical information or access credentials voluntarily provided by the client for the purpose of preparing quotes or executing missions (e.g., current infrastructure details, development needs, temporary server access for audits).
• Voluntarily Provided Information: Any data communicated via our contact forms or during commercial interactions.

3. Purposes of Processing

Your data is processed for explicit, legitimate, and determined purposes:

• Client Relationship Management: Processing quote requests, executing service contracts (Managed Services, DevOps, Web/Odoo Development), invoicing, client support, and accounting.
• Security and Maintenance: Monitoring our infrastructure, detecting and preventing security incidents, performing technical audits, and maintaining our services.
• Service Improvement: Anonymized statistical analysis of website audience to optimize user experience (UX).
• Professional Communication (B2B Marketing): Sending information about our services, technical newsletters, or new offers, only if you have consented or if you are already a client, in compliance with regulations.

4. Cookies and Tracking Technologies

Our website uses cookies to improve your navigation and analyze traffic.

• Functional Cookies: Essential for the technical operation of the site.
• Audience Analysis Cookies: We prioritize privacy-respecting solutions (such as self-hosted Matomo) to measure audience in an anonymized way, without transferring data to massive third parties.

Our site provides a cookie management tool allowing you to accept or refuse non-essential cookies at any time during your first visit.

5. Data Sharing and Transfer

SolvyTech commits to never selling, renting, or trading your personal data. It may be shared only in the following cases, strictly limited to what is necessary:

• Technical Subprocessors and Service Providers: Hosting providers (Data Centers, VPS), payment service providers, or secure internal management tools. These providers are subject to strict confidentiality and security obligations.
• Legal Obligations: If required by law, we may be obligated to transmit data to competent authorities.
• International Transfer: As SolvyTech is based in Morocco and operates internationally, data transfers may occur during the execution of our services. We ensure these transfers are framed by appropriate security guarantees.

6. Data Security

As experts in Infrastructure, DevOps, and Security, data protection is at the core of our business. We implement reinforced technical and organizational protection measures:

• Widespread use of encryption (SSL/TLS) for communications.
• Hosting on secure, monitored, and regularly updated architectures.
• Strict access control to data within our technical team.
• Regular and secure backup policies.

7. Data Retention Period

We retain your data only for the duration necessary for the purposes pursued:

• Prospect Data: 3 years after the last contact initiated by you.
• Client Data: For the duration of the contractual relationship, plus legal prescription periods (intermediate archiving of 5 to 10 years) to meet accounting and fiscal obligations.
• Technical Data (Server logs): Retained for a maximum duration of 12 months for security reasons.

8. Your Rights

In accordance with applicable regulations (GDPR and Law 09-08), you have the following rights regarding your data:

• Right of access, rectification, and update of your information.
• Right to erasure (“right to be forgotten”) and restriction of processing, subject to our legal obligations.
• Right to data portability.
• Right to object to processing for legitimate grounds.
• Right to withdraw your consent at any time (e.g., via the unsubscribe link in our emails).

To exercise these rights, please contact our Data Protection Officer (DPO) by email at: [email protected]

9. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time to reflect changes in our services or regulations. Any modification will be published on this page with a revised “Last Updated” date.