RCM
Data controller: GDPR Conseil Maroc SARL (“RCM”), Morocco. Privacy contact: Contact@rgpdconseilmaroc.com. The full address of the headquarters and legal identifiers must be added in the legal notices before final publication.
On-site treatment
| Purpose | Data | Legal basis | RCM Conservation |
|---|---|---|---|
| Respond to a request, prepare a quote or mission | Name, work email, organization, subject, message, planner score if sent | Pre-contractual measures requested by the person | Up to 3 years after the last active exchange for a prospect; then deletion or archiving justified |
| Manage a customer relationship | Contact details, exchanges, documents and contractual elements | Execution of the contract and legal obligations | During the relationship, then according to the applicable legal deadlines |
| Secure the site and fight spam | Technical data, anti-robot control result, security logs | RCM's legitimate interest in protecting the service | Limited duration defined with technical service providers |
| Remember cookie preferences | Selected categories, date, version and expiration | Consent for optional categories; operation necessary to maintain the choice | 183 days maximum |
Mandatory nature
Fields marked as mandatory are required to process the request. Without them, RCM will not be able to respond. Do not transmit sensitive data, identity documents or third party data in the initial form.
Automated decision
The planner produces an indicative estimate in your browser. It triggers no legal decision, no refusal of service and no automated commercial profiling.
Recipients and service providers
Access is limited to authorized persons from RCM and the necessary service providers: hosting/CDN of the site during deployment, Web3Forms for the delivery of forms and hCaptcha for the fight against spam. RCM must retain subcontracting contracts, limit access and regularly check the configuration of these services.
International transfers
RCM is established in Morocco and certain technical service providers may process data outside the European Economic Area. For data subject to the GDPR, each transfer must be governed by an appropriate mechanism, including standard contractual clauses where necessary, as well as an assessment of guarantees and additional measures. These elements must be confirmed contractually before putting into production.
Your rights
Depending on the applicable law, you can request access, rectification, erasure, limitation, opposition, portability and withdrawal of consent. You can also define instructions for the fate of your data when the applicable law provides for it. Write to Contact@rgpdconseilmaroc.com specifying your request. RCM may request proof of identity only in the event of reasonable and proportionate doubt.
You may lodge a complaint with the competent authority, including the CNIL in France or CNDP in Morocco.
Security and update
RCM implements access controls, minimization, encryption of exchanges, appropriate backups and incident management proportionate to the risks. No site can guarantee absolute security. Policy revised on August 28, 2026; it must be reviewed each time there is a change of service provider, purpose or flow.