Privacy Policy

Legal Agreements

Last Updated: January 20, 2026

1 Introduction

Riaya Industries S.A. ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.riayaindustries.com (the "Website") or interact with us.

This Privacy Policy is designed to comply with:

  • Moroccan Law No. 09-08 on the Protection of Individuals with regard to the Processing of Personal Data
  • The European Union General Data Protection Regulation (GDPR) for our European visitors
  • International data protection best practices
Please read this Privacy Policy carefully. By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2 Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Riaya Industries S.A.
  • Registered Address: Zone Industrielle, Berrechid, Morocco
  • Data Protection Contact: privacy@riayaindustries.com
  • Phone: +212 522 327 200
Riaya Industries is registered with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) under registration number [CNDP Number - To be completed].

3 Personal Data We Collect

3.1 Information You Provide Directly
We collect personal data that you voluntarily provide to us when you:
  • Fill out contact forms on our Website
  • Subscribe to our newsletter or marketing communications
  • Apply for employment opportunities
  • Request information about our products or services
  • Communicate with us via email, phone, or other means
This information may include:
  • Identity Data: First name, last name, title
  • Contact Data: Email address, telephone number, postal address
  • Professional Data: Company name, job title, professional experience (for job applications)
  • Communication Data: The content of your messages and correspondence with us
3.2 Information Collected Automatically
When you visit our Website, we automatically collect certain information about your device and your visit, including:
  • Technical Data: IP address, browser type and version, operating system, device type
  • Usage Data: Pages visited, time spent on pages, click patterns, referring website
  • Location Data: General geographic location based on IP address
  • Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy for details)

4 Legal Basis for Processing

In accordance with Moroccan Law 09-08 and GDPR principles, we process your personal data based on the following legal grounds:

Purpose

  • Responding to inquiries

  • Processing job applications

  • Sending marketing communications
  • Website analytics and improvement
  • Legal compliance

Legal Basis

  • Legitimate interest / Contract performance

  • Pre-contractual measures / Consent

  • Consent
  • Legitimate interest / Consent
  • Legal obligation

Data Categories

  • Identity, Contact, Communication

  • Identity, Contact, Professional

  • Identity, Contact

  • Technical, Usage

  • All categories as required

5 How We Use Your Personal Data

We use the personal data we collect for the following purposes:
  • To provide and maintain our Website and services
  • To respond to your inquiries, comments, or questions
  • To process and evaluate job applications
  • To send you marketing communications (with your consent)
  • To improve our Website, products, and services
  • To analyze Website usage and trends
  • To protect against fraudulent or illegal activity
  • To comply with legal obligations
  • To enforce our Terms of Use and other agreements

6 Data Sharing and Disclosure

6.1 Third-Party Service Providers
We may share your personal data with third-party service providers who perform services on our behalf, including:
  • Website hosting and maintenance providers
  • Email service providers
  • Analytics providers (e.g., Google Analytics)
  • IT support and security services
These service providers are contractually obligated to protect your personal data and may only use it for the purposes we specify.
6.2 Legal Requirements
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including:
  • To comply with a legal obligation under Moroccan law
  • To protect and defend the rights or property of Riaya Industries
  • To prevent or investigate possible wrongdoing in connection with the Website
  • To protect the personal safety of users of the Website or the public
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will provide notice before your personal data is transferred and becomes subject to a different privacy policy.

7 International Data Transfers

Your personal data may be transferred to and processed in countries other than Morocco. When we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your personal data, including:
  • Transfers to countries recognized as providing adequate protection
  • Use of standard contractual clauses approved by the CNDP or European Commission
  • Other legally recognized transfer mechanisms
For transfers to countries that do not offer an adequate level of protection, we implement additional safeguards to ensure your data is protected in accordance with this Privacy Policy.

8 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Our standard retention periods are:

  • Contact form inquiries: 3 years from last contact
  • Job applications (unsuccessful): 2 years from application date
  • Marketing preferences: Until consent is withdrawn
  • Website analytics data: 26 months
  • Legal and compliance records: As required by applicable law (generally 10 years)

9 Your Rights Under Moroccan Law 09-08

Under Moroccan data protection law, you have the following rights regarding your personal data:
  • Right of Access: You have the right to obtain confirmation of whether we process your personal data and to access that data.
  • Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
  • Right to Object: You have the right to object to the processing of your personal data for legitimate reasons.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at privacy@riayaindustries.com. We will respond to your request within 30 days.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the CNDP:
  • Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP)
  • Address: Angle Boulevard Annakhil et Avenue Mehdi Ben Barka, Hay Riad, Rabat, Morocco
  • Website: www.cndp.ma

10 Additional Rights for European Residents

If you are a resident of the European Economic Area (EEA), you have additional rights under the GDPR, including:
  • Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Restriction of Processing: The right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to Object to Automated Decision-Making: The right not to be subject to decisions based solely on automated processing.
You may also lodge a complaint with your local data protection authority in the EEA.

11 Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
  • Encryption of data in transit using SSL/TLS technology
  • Secure server infrastructure with firewalls and intrusion detection
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and updates
  • Employee training on data protection and security
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously work to enhance our security measures.

12 Children's Privacy

Our Website is not intended for children under 18 years of age. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately at privacy@riayaindustries.com, and we will take steps to delete such information.

13 Third-Party Links

Our Website may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

14 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
  • Data Protection Contact: privacy@riayaindustries.com
  • Address: Riaya Industries S.A., Zone Industrielle, Berrechid, Morocco
  • Phone: +212 522 327 200
We are committed to resolving any concerns you may have about our collection or use of your personal data.