Privacy policy
Last updated :
Data controller
The data controller is Eurastech, Angle Bd Lalla Yacout et rue El Arrar 9, Résidence Galis, 4e étage, appartement 17, Casablanca. Contact: contact@bugrescue.ma. Déclaration CNDP n° 0-0000/0000.
The processing described here is subject to law 09-08 on the protection of individuals with regard to the processing of personal data, and to the rules of the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP).
Data collected
Diagnostic form: store address, technology used, degree of urgency, monthly order volume, host and phone number. The number is used solely to call you back about the incident reported.
WhatsApp and email exchanges: the content of the messages needed to qualify and follow up the intervention.
Intervention: timestamped access and action logs, technical excerpts and configuration items strictly necessary for diagnosis. BugRescue Maroc does not extract or retain the client's own customer databases, except for a backup explicitly requested in the mandate.
No master password and no banking data is requested or stored.
Purposes and legal basis
Data is processed in order to answer a diagnostic request, perform the service ordered, keep a traceable record of actions carried out on the client's site, and meet accounting and legal obligations.
The basis for processing is performance of the contract or of pre-contractual measures requested by the data subject, and compliance with legal obligations for record keeping.
Retention periods
Requests with no follow-up: twelve months from the last exchange.
Intervention files and associated logs: three years from the end of the service, so that the actions taken can be evidenced.
Accounting and contractual records: ten years, as required by Moroccan law.
Backups made under a subscription: for the retention period of the plan taken out, then automatically deleted.
Recipients and processors
Data is neither sold nor rented. It is accessible only to BugRescue Maroc staff assigned to the file.
Technical providers may access it within the limits of their assignment: the site host (Cloudflare, Inc. — 101 Townsend St, San Francisco, CA 94107, USA), a professional email service, and WhatsApp where the client chooses that channel. Some of these providers are established outside Morocco; the corresponding transfers are subject to the formalities required by law 09-08.
Security
Access to client systems is named, temporary and limited to the scope of the mandate. Every action is timestamped. Access is revoked when the intervention closes, and the client is asked to disable the accounts created.
Exchanges with the site are encrypted in transit. Technical material collected is held on restricted-access storage.
Your rights
You have a right of access, rectification, objection on legitimate grounds and deletion of data concerning you. You may exercise these rights by writing to contact@bugrescue.ma, providing proof of identity. You will receive an answer within thirty days.
You may also lodge a complaint with the CNDP, the Moroccan supervisory authority, whose contact details are published on its official site.