Privacy policy

The controller of the data collected in connection with the services offered on NAVETTO.MA is:

Name

Navetto

Legal form

[To be completed]

Registered office

Centre-Ville, Rue de la Foire, Agadir 84000 – Morocco

Legal identifier / RC

[To be completed]

Email

Info@navetto.ma

Phone

+212636857340

For any question relating to this Policy or to the use of your personal data, you may contact us at the address indicated above.

NAVETTO processes personal data in accordance with applicable Moroccan law, in particular Law No. 09-08 on the protection of individuals with regard to the processing of personal data, as well as the applicable rules and requirements of the National Commission for the Control of Personal Data Protection (“CNDP”).

Depending on your use of NAVETTO, we may collect different categories of data.

2.1. Identification data

We may in particular collect:

• first and last name;
• email address;
• phone number;
• address or pick-up location;
• address or destination where needed for the booking;
• passenger information;
• information needed to identify the Customer.

2.2. Booking data

We may collect the information needed to organise and follow a booking, in particular:

• date and time of the journey;
• pick-up location;
• destination;
• booking number or reference;
• number of passengers;
• number and nature of bags where that information is needed;
• flight information where the booking is linked to a flight;
• special requests communicated at the time of booking;
• booking history;
• cancellations, changes, refunds and complaints.

2.3. Payment data

Where payment is made online, certain information relating to the transaction may be processed.

Depending on the payment method used, bank details may be processed directly by our payment provider and not retained by NAVETTO in a form allowing their subsequent use.

NAVETTO may nevertheless retain certain information relating to the transaction, such as:

• amount paid;
• date and time of payment;
• transaction status;
• payment method used;
• transaction reference;
• information relating to refunds.

2.4. Technical data

When you use our website or digital services, certain technical data may be collected automatically, in particular:

• IP address;
• browser type and version;
• operating system;
• device type;
• browser language;
• date and time of connection;
• pages viewed;
• browsing data;
• technical and security logs.

This information may in particular be used to ensure the security, stability and proper operation of the platform.

2.5. Communications with NAVETTO

When you contact NAVETTO by email, phone, contact form or any other channel, we may retain:

• the content of your request;
• your contact details;
• the information needed to handle your request;
• the history of our exchanges.

Your data may be collected:

• when you create an account;
• when you make a booking;
• when you complete a form;
• when you make or attempt a payment;
• when you contact our customer service;
• when you use our website or digital services;
• when you request a change, a cancellation or a refund;
• when you take part in a promotional operation;
• through technologies such as cookies, where their use applies.

We endeavour to collect only the data needed for the purposes for which they are used, in accordance with the principles of proportionality and purpose provided by Law No. 09-08.

Your personal data may be used for the following purposes:

4.1. Providing NAVETTO services

We use your data in order to:

• process your booking request;
• arrange the connection with the Provider;
• pass on to the Provider the information needed to perform the transport;
• send you your booking confirmation;
• communicate operational information relating to your journey;
• manage changes and cancellations;
• process refunds where they apply.

4.2. Managing our relationship with you

Your data may also be used in order to:

• respond to your requests;
• handle your complaints;
• provide assistance;
• inform you about your booking;
• follow up incidents linked to a booking.

4.3. Security and fraud prevention

We may process certain data in order to:

• detect and prevent fraudulent transactions;
• protect our platform;
• prevent misuse;
• detect behaviour that may compromise the security of NAVETTO, its Customers or its Providers;
• defend our rights in the event of a dispute.

4.4. Complying with our legal obligations

Certain data may be retained or communicated where necessary to:

• comply with a legal or regulatory obligation;
• respond to a request from a competent authority;
• establish, exercise or defend a right in court;
• comply with our accounting, tax or administrative obligations.

4.5. Improving our services

Subject to applicable rules, we may use certain data to:

• analyse use of our platform;
• improve the user experience;
• improve our services;
• detect technical errors;
• develop new features;
• produce statistics.

Where possible, data used for statistical purposes are aggregated or anonymised.

4.6. Commercial communications

NAVETTO may, where legally authorised and in accordance with applicable rules, use your contact details to send you commercial or promotional communications.

Where your consent is required, those communications will be sent only after that consent has been obtained.

You may at any time ask no longer to receive commercial communications.

Depending on the processing concerned, your data may be processed in particular:

• to perform a booking or a contract to which you are a party;
• to comply with a legal obligation;
• where you have given your consent, where that consent is required;
• to pursue a legitimate interest of NAVETTO, subject to respect for your rights and interests;
• where processing is necessary to establish, exercise or defend rights.

Law No. 09-08 provides in particular several situations in which consent is not necessary, including where processing is necessary to perform a contract or to comply with a legal obligation.

NAVETTO does not sell your personal data.

We may however communicate certain data to third parties where necessary to provide our services or to comply with our obligations.

6.1. Transport providers

When you make a booking, the information needed to perform the transport may be communicated to the relevant Provider.

This may in particular include:

• name of the Customer or passenger;
• phone number;
• pick-up location;
• destination;
• flight information;
• date and time of the journey;
• information needed to organise the transport.

The Provider uses this information to provide the booked service and to fulfil its obligations linked to the booking.

6.2. Technical providers

We may use providers who supply us in particular with:

• IT hosting;
• technical infrastructure;
• payment services;
• messaging services;
• customer-support tools;
• security tools;
• analytics tools;
• IT and maintenance services.

Where these providers process data on behalf of NAVETTO, we ensure that appropriate confidentiality and security obligations are put in place.

Law No. 09-08 in particular requires the controller to choose processors presenting sufficient guarantees and to frame the processing concerned.

6.3. Competent authorities

We may communicate certain data to public or judicial authorities where that communication is required or authorised by law.

Some of our technical providers or partners may be established outside Morocco.

In that case, any transfer of personal data to a foreign country will be carried out in accordance with the applicable requirements of Law No. 09-08 and any procedures or authorisations that may be required from the CNDP.

Moroccan regulation specifically frames international transfers of personal data and provides different conditions depending on the destination country and the situation concerned.

NAVETTO will not carry out an international data transfer in breach of the applicable rules.

NAVETTO retains personal data for no longer than is necessary for the purposes for which they were collected, subject to legal retention obligations.

In general:

• data relating to a booking are retained for the period needed to manage the booking and the contractual relationship;
• certain data may be retained longer where they are needed to manage a dispute or to exercise or defend rights;
• certain accounting or transactional data may be retained for the period imposed by applicable regulation;
• data used for prospecting purposes are retained in accordance with applicable rules and for the period needed for that purpose.

At the end of the applicable retention period, the data are deleted, anonymised or archived where the law allows or requires it.

The CNDP recalls that data allowing identification must be retained for a limited period not exceeding that needed for the purpose of the processing, subject to applicable special regimes.

NAVETTO implements appropriate technical and organisational measures designed to protect personal data against in particular:

• unauthorised access;
• loss;
• accidental or unlawful destruction;
• alteration;
• unauthorised disclosure;
• unlawful processing.

Access to the data is limited to the persons and providers who need access for their functions or obligations.

However, no transmission or storage of data on the Internet can be guaranteed as absolutely secure.

In the event of an incident affecting data security, NAVETTO will take the appropriate measures in accordance with applicable legal obligations.

Security and confidentiality obligations are in particular requirements of Law No. 09-08.

NAVETTO may use cookies and similar technologies in particular to:

• ensure the operation of the site;
• remember certain preferences;
• secure sessions;
• measure audience;
• analyse use of the site;
• improve the services.

Non-essential cookies may be subject to applicable consent rules.

Detailed arrangements relating to cookies are set out in our Cookie Policy, where it is published separately.

In accordance with Law No. 09-08, you have in particular, on the terms provided by that law, rights concerning your personal data.

You may in particular:

Right to information

You have the right to be informed of the essential characteristics of the processing of your data, in particular its controller, its purposes, its recipients and how to exercise your rights.

Right of access

You may ask whether NAVETTO processes personal data concerning you and, on the terms provided by law, obtain information about those data and their processing.

Right of rectification

You may request the rectification or updating of personal data that are inaccurate, incomplete, ambiguous or out of date.

The CNDP indicates in particular that the right of rectification may cover updating, rectification, erasure or locking of the data on the terms provided by law.

Right to object

You may object, on the terms provided by law, to the processing of your personal data on legitimate grounds.

Right relating to prospecting

You may ask no longer to receive commercial communications from NAVETTO in accordance with applicable rules.

The exercise of a right does not necessarily affect processing that NAVETTO is legally required to carry out or that is necessary to perform an ongoing booking.

To exercise your rights or ask a question about your personal data, you may contact NAVETTO at:

Email

Info@navetto.ma

Postal address

Centre-Ville, Rue de la Foire, Agadir 84000

In order to protect your data, NAVETTO may request certain information allowing it to verify the identity of the requester where necessary.

Requests are handled in accordance with the time limits and conditions provided by applicable law.

If you consider that your rights relating to your personal data are not being respected, you may also contact the National Commission for the Control of Personal Data Protection (CNDP). The CNDP indicates in particular that data subjects may contact the body holding their data and, in the event of difficulty, lodge a complaint with it.

When you make a booking for another person, you may need to communicate that person’s personal data to NAVETTO.

In that case, you must ensure that you are authorised to communicate those data and, where necessary, have informed the person concerned of that communication.

The information will be used only for the purposes provided by this Policy and for performance of the booking.

You are responsible for the accuracy of the information you communicate to NAVETTO.

You must provide accurate, complete and up-to-date information where it is needed for your booking.

Incorrect or incomplete information may in particular prevent the Provider from performing the transport correctly.

NAVETTO may ask you to correct or update certain information where necessary.

NAVETTO’s services are not intended to allow children to make bookings directly without the involvement of a responsible adult.

Where a booking concerns a child or a minor, the necessary data may be provided by the parent, legal representative or responsible adult making the booking.

NAVETTO does not seek to collect personal data voluntarily from children beyond what is needed to organise a booking made by a responsible adult.

Even where you refuse commercial communications, NAVETTO may send you communications strictly necessary to perform or manage your booking.

This may in particular include:

• a confirmation;
• a change;
• a cancellation;
• information concerning the Provider;
• information concerning the pick-up time or location;
• safety information;
• a request needed to process your booking;
• information concerning a refund.

These communications are not commercial communications.

When you send a complaint to NAVETTO, certain data may be retained in order to:

• examine the complaint;
• communicate with you;
• verify the circumstances of the booking;
• contact the Provider where necessary;
• process a refund request;
• prevent fraud or abuse;
• protect the rights of NAVETTO or its Customers;
• constitute or retain the elements needed to defend a right in court.

NAVETTO’s website or communications may contain links to sites or services operated by third parties.

NAVETTO is not responsible for those third parties’ privacy practices.

We recommend that you consult the privacy policies applicable to the services concerned before communicating your personal data to them.

NAVETTO may change this Privacy Policy in order to take account in particular of:

• the evolution of its services;
• the technical evolution of the platform;
• the evolution of its partners and providers;
• the evolution of regulation;
• recommendations or requirements of the competent authorities.

The applicable version is the version published on NAVETTO.MA at the relevant time.

Where necessary, NAVETTO may inform users of a substantial change by an appropriate means.

For any question concerning this Privacy Policy or the processing of your personal data:

NAVETTO — Address

Centre-Ville, Rue de la Foire, Agadir 84000

Email

Info@navetto.ma

Phone

+212636857340

For requests relating specifically to personal data:

Data-protection email

Info@navetto.ma

The competent Moroccan authority for the protection of personal data is:

NAVETTO undertakes to comply with the formalities and obligations applicable to it in the field of personal data protection.

The CNDP indicates that processing falling under Law No. 09-08 is, depending on its nature, subject to prior formalities such as a declaration or authorisation, subject to applicable exemptions.

This Privacy Policy enters into force as from:

It applies to personal-data processing carried out in connection with NAVETTO services as from that date, subject to the rights and obligations provided by applicable law.