Privacy Policy

Last updated: 26 August 2026

1. Introduction

This Privacy Policy explains how AFETOP SA, operating under the AFETOP Group brand, collects, uses, stores, protects and otherwise processes personal data in connection with afetop.com and related corporate communications.

AFETOP is an international business advisory, professional intermediation and business development organization operating from Morocco and working with clients, partners, professionals, companies and other stakeholders internationally.

AFETOP is committed to protecting personal data and respecting applicable data protection laws, including, where applicable, Moroccan Law No. 09‑08 relating to the protection of individuals with regard to the processing of personal data, under the supervision of the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP).

Where the General Data Protection Regulation (EU) 2016/679 (GDPR) applies to a particular processing activity, AFETOP will also process personal data in accordance with the applicable GDPR requirements.

This Privacy Policy applies primarily to personal data collected through the corporate website, contact forms, professional communications and other interactions with AFETOP.

2. Data Controller

The data controller is:

AFETOP SA
[Registered address]
Morocco
Email: contact@afetop.com

For privacy‑related requests, you may contact AFETOP using the contact details above.

3. Personal Data We May Collect

Depending on the nature of your interaction with AFETOP, we may collect:

• First and last name
• Professional email address
• Company or organization name
• Job title or professional role
• Telephone number
• Country or business location
• Information contained in your messages or requests
• Information voluntarily provided in connection with a business opportunity, project or service inquiry
• Correspondence and records of communications with AFETOP
• Information necessary to evaluate or manage a professional relationship
• Technical information such as IP address, browser type, device information, pages visited and access dates, where collected through website technologies or analytics tools

AFETOP seeks to collect only information that is relevant and reasonably necessary for the purposes described in this Policy.

4. How We Collect Personal Data

Personal data may be collected when you:

• Contact AFETOP through a website form;
• Send us an email;
• Request information about AFETOP services;
• Communicate with our representatives or professional partners;
• Participate in a business, investment, trade or advisory discussion;
• Subscribe to an AFETOP communication or newsletter, where applicable;
• Browse or interact with our websites, where technical or analytics technologies are enabled.

5. Purposes of Processing

AFETOP may process personal data for the following purposes:

• Responding to inquiries and requests;
• Providing information about AFETOP services;
• Assessing potential professional relationships;
• Communicating with clients, prospects, partners and professional contacts;
• Managing business relationships;
• Facilitating professional introductions and business opportunities;
• Preparing or reviewing proposals, engagements or commercial discussions;
• Improving the functionality, security and performance of our websites;
• Managing communications and subscriptions;
• Maintaining business and administrative records;
• Preventing fraud, misuse, unauthorized access and security incidents;
• Complying with applicable legal and regulatory obligations.

AFETOP does not sell personal data.

AFETOP does not intentionally disclose personal data to third parties for their own independent commercial marketing purposes.

6. Legal Basis for Processing

Depending on the circumstances, processing may be based on:

• Your consent;
• The performance of a contract or steps taken at your request before entering into a contract;
• AFETOP's legitimate interests in managing professional and commercial relationships;
• Compliance with legal or regulatory obligations;
• Another lawful basis applicable under the relevant data protection legislation.

Where consent is required, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

7. Professional and Business Communications

Because AFETOP operates in an international B2B environment, communications may involve professional contact information and information relating to companies, projects, mandates, transactions or business opportunities.

Information voluntarily provided to AFETOP for a professional purpose may be used to assess, manage and respond to the relevant business request.

AFETOP will seek to limit the processing of personal data to what is relevant to the legitimate professional purpose for which it was provided.

8. Disclosure to Third Parties

AFETOP may disclose or provide access to personal data where reasonably necessary to:

• Technology, hosting, email or communication service providers;
• Professional advisers and service providers;
• Legal, regulatory, governmental or judicial authorities where required;
• Business partners or professional counterparties where disclosure is necessary for a specific request or business relationship and is permitted by applicable law.

Where appropriate, AFETOP seeks to ensure that service providers process personal data only for authorized purposes and implement appropriate confidentiality and security measures.

AFETOP does not sell personal data to third parties.

9. International Data Transfers

AFETOP operates internationally and may use service providers or communicate with professional counterparties located outside Morocco.

Where personal data is transferred, hosted or accessed internationally, AFETOP will seek to comply with applicable Moroccan data protection requirements, including applicable CNDP requirements concerning transfers abroad, as well as any other applicable data protection legislation.

Where required, appropriate contractual, organizational or legal safeguards will be implemented.

10. Cookies and Analytics

AFETOP may use:

• Strictly necessary cookies or similar technologies required for website operation;
• Security and technical cookies;
• Analytics or audience‑measurement technologies, where enabled.

Where applicable, analytics services may collect technical information such as IP address, device information, browser information and pages visited.

You may configure your browser or available cookie controls to restrict or refuse certain cookies. Restricting cookies may affect certain website functionalities.

AFETOP will not describe a specific analytics retention period unless that period corresponds to the actual configuration of the relevant service.

11. Data Retention

AFETOP retains personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account:

• The nature of the relationship;
• The purpose of the processing;
• Legal and regulatory requirements;
• Legitimate business requirements;
• The need to establish, exercise or defend legal rights.

Different categories of information may therefore be retained for different periods.

Where personal data is no longer required, AFETOP will take reasonable steps to delete, anonymize or securely dispose of it, subject to applicable legal retention requirements.

12. Data Security

AFETOP implements reasonable technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, disclosure or other unlawful processing.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

13. Your Data Protection Rights

Subject to applicable law, you may have rights concerning your personal data, including rights to:

• Access your personal data;
• Request correction of inaccurate or incomplete information;
• Request deletion where legally applicable;
• Object to certain processing;
• Request restriction of processing where legally applicable;
• Withdraw consent where processing is based on consent;
• Request data portability where the applicable legislation provides such a right;
• Lodge a complaint with the competent data protection authority.

Under Moroccan Law No. 09‑08, individuals have, in particular, rights of access, rectification and opposition in accordance with the applicable legal framework. The CNDP is the competent Moroccan supervisory authority.

Where the GDPR applies, additional GDPR rights may also apply depending on the circumstances.

14. Exercising Your Rights

To exercise a privacy‑related right or ask a question concerning the processing of your personal data, contact:

Email: contact@afetop.com

Please provide sufficient information to allow AFETOP to identify the relevant request and respond appropriately.

AFETOP may request reasonable information to verify the identity of the person making a request where necessary to protect personal data against unauthorized disclosure.

15. Complaints

If you believe that your personal data has been processed unlawfully, you may contact AFETOP first so that we can review the matter.

You may also have the right to contact the competent data protection authority, including the CNDP in Morocco, or another competent supervisory authority where applicable.

16. Changes to This Privacy Policy

AFETOP may update this Privacy Policy from time to time to reflect changes in its activities, technology, legal requirements or data‑processing practices.

The latest version will be published on this page with the corresponding Last updated date.

17. Contact

For any question concerning this Privacy Policy or the processing of personal data by AFETOP:

AFETOP SA
[Registered address]
Morocco
Email: contact@afetop.com
Website: afetop.com

---

AFETOP Group
Connecting Expertise. Building Value.