Privacy policy
How Rivena collects, uses and protects personal data gathered through the rivena.ma website, under Law No. 09-08 on the protection of individuals with regard to the processing of personal data.
Data controller
The data controller is RIVENA S.A.R.L. A.U., whose registered office is at Imm. 7, rue Moulay Rachid, appt 10, 4th floor, Hassan, Rabat, Morocco.
For any question about your data, write to contact@rivena.ma or send a letter to the registered office.
This policy covers the rivena.ma website. Data processed in Rivena software, such as the Rivena Fleet application, is governed by the agreement with each company that uses it.
Data collected
We collect only the data needed to handle your request. No sensitive data within the meaning of Law No. 09-08 is requested.
- Contact form: full name, company, work e-mail address, topic of your request and the content of your message. Your phone number is optional: it is collected only if you choose to provide it.
- E-mails sent directly to contact@rivena.ma, including open applications: your e-mail address, the content of your message and any attachments, in particular your CV.
- Technical connection data: IP address, date and time, pages requested and browser type, processed by the site’s host to deliver the pages and keep them secure.
- Display preferences (language, light or dark theme), stored in your browser.
Purposes of processing
Your data is processed for the following purposes only:
- Answering your request for a demo, a quote or information.
- Reviewing your application for a job or an internship and replying to you.
- Preparing and following up the commercial and contractual relationship.
- Keeping the site secure and preventing abuse.
- Meeting our legal and accounting obligations.
Legal basis and consent
Processing of form data rests on your consent, given by ticking the box provided before you send the form, and on pre-contractual steps taken at your request. E-mails and applications you send us directly are processed in order to reply to them, at your request.
Technical connection data is processed to keep the site secure and working properly, which is a legitimate interest of Rivena.
You may withdraw your consent at any time by writing to contact@rivena.ma, without affecting the lawfulness of processing carried out beforehand. Data linked to a contract is also kept to meet our legal, accounting and tax obligations.
Recipients and processors
Your requests are read only by the people at Rivena responsible for answering them, and only to the extent they need.
We do not sell, rent or exchange any personal data. No data is passed on for advertising purposes.
The following technical providers act as processors, on Rivena’s instructions and solely for the purposes of the service:
- WEBRAIN OÜ (is*hosting, Estonia), host of the site on a server located in France: it serves the pages, receives the form content to pass it to the e-mail delivery service and processes technical connection data.
- Resend (United States), e-mail delivery service: it forwards the content of the contact form to our mailbox.
- Hostinger, provider of the contact@rivena.ma mailbox: it hosts the inbox where form requests and the e-mails sent to us, including applications, are received and kept.
Location and transfers
All three providers are established outside Morocco: the site’s server is located in France, in the European Union, and Resend is based in the United States. The data passed to them is limited to the content of the contact form, e-mails sent to contact@rivena.ma and the technical connection data described above.
These transfers rest on Article 44 of Law No. 09-08: your express consent, given by ticking the box on the form, and pre-contractual steps taken at your request.
Retention periods
Data is kept for no longer than is necessary for the stated purposes:
- Contact requests with no commercial follow-up: three years at most from the last exchange.
- Unsuccessful applications: two years at most from the last exchange, unless you ask us to delete them sooner.
- Data linked to a contractual relationship: the term of the contract, then ten years under accounting and tax obligations.
- Technical connection data and e-mail delivery copies held by our providers: a limited period, set by each provider for the security and operation of its service.
Security
Exchanges between your browser and the site are encrypted (HTTPS, TLS protocol).
The site does not store requests in a database: the content of the form is forwarded by e-mail to the contact@rivena.ma mailbox, to which access is restricted to the people responsible for handling requests.
In the event of a data breach likely to affect your rights, we inform you and make the required notifications.
Your rights
Under Law No. 09-08, you have the right to access and rectify your personal data, including having it erased, and to object to its processing.
- Right of access: confirm that your data is being processed and obtain a copy.
- Right of rectification: have inaccurate or incomplete data corrected.
- Right to object: object, on legitimate grounds, to the processing of your data.
- Right to erasure: request deletion of data whose retention is no longer justified.
Exercising your rights
Send your request to contact@rivena.ma or by post to the registered office, stating what you are asking for. Proof of identity may be requested to avoid disclosure to a third party.
We reply as soon as possible, and in any event within the time limits set by Law No. 09-08. You may also lodge a complaint with the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP).
Changes to this policy
This policy may change to reflect regulatory or technical developments. The date of the last update is shown with the table of contents on this page. In the event of a substantial change, we inform the people concerned.