PERSONAL DATA PROTECTION

This personal data protection policy describes the commitments made by IMA to ensure that your personal data is respected when browsing on this site. The General Data Protection Regulation (GDPR), which came into force on May 25, 2018, aims to strengthen the protection of individuals within the European Union. Accordingly, we have to inform you of the use that is made of your data, and the rights you have over it.

1. Which data is processed?

IMA ensures that it only collects data that is strictly necessary for the purpose for which it is processed :

• Identity ;
• Contact details ;
• Connection and browsing data ;
• Information relating to assistance operations (accounting, statistics, assignments, etc.)

Failure to supply this data will mean that IMA is unable to process your request.

2. Which purpose(s) is your personal data processed for? What is the legal basis for processing?

Your personal data will be used to manage its network of service providers and partners, in particular :

• In respect of the performance of the contract :
  • carrying out all administrative operations relating to contracts, orders, invoices and payments;
  • implementing assistance operations;
• in the legitimate interests of IMA GIE, unless you object:
  • supply selections of service providers for the IMA Group;
  • production of business, financial and sales statistics for reporting, steering, analysis, studies and process optimization purposes;
  • the provision of communication tools enabling the dematerialization of relations ;
  • navigation on the site and its improvement in order to facilitate the user experience;
• in respect of legal obligations :
  • compiling and updating documentation on service providers;
  • managing the security of its information systems;
  • managing requests to exercise your rights;
  • implementing control systems, in particular to combat fraud and corruption.

3. Who is/are the recipient(s) of your personal data?

Your data is transmitted to all IMA Group entities, including Wafa IMA Assistance, a company incorporated under Moroccan law, and may be provided to and/or accessed by our subcontractors, as required.

4. How long is your personal data kept for?

Your data is kept for the duration of the commercial relationship plus any applicable limitation periods. Connection data for security management purposes is kept for a maximum of 6 months.

5. What are your rights and how can you exercise them?

In accordance with legal provisions, you have the following rights regarding your personal data:

• Right to access
• Right to rectification
• Right to erasure
• Right to object
• Right to restrict the processing of your data
• Right to portability

You can exercise these rights, subject to providing proof of identity, by contacting the IMA Group's Data Protection Officer at the following address: dpo@ima.eu or Délégué à la Protection des données-Direction des Affaires Juridiques - 118 Avenue de Paris - 79033 NIORT CEDEX 9, France

If you believe that the processing of your personal data constitutes an infringement of legal provisions, you are entitled to file a complaint with France's Commission Nationale de l'Informatique et des Libertés.

6. Recording of telephone conversations

IMA GIE records or listens in on some of the calls. These recordings are used for our legitimate interests and, unless you object, for the purposes of:

• Improving staff skills;
• Monitoring advice and the quality of customer relations;
• Compiling factual elements that can be used for the purposes of preventing and resolving disputes, litigation and pre-litigation;
• Protecting employees in the event of verbal abuse and unpleasant behaviour against them;
• Conducting experiments associated with quality management and monitoring goals and the analysis of conversations based on artificial intelligence techniques.

They may also be used in connection with our legal obligations to:

• manage requests to exercise your rights;
• implement verification mechanisms, in particular relating to the fight against fraud and corruption.

These recordings are intended solely for authorised persons and may be shared and/or accessed by IMA GIE's technical service providers involved in setting up and analysing telephone conversations.

They are kept for a period of six months, except in the event of litigation when they are kept for the duration of the litigation and until the end of the appeal process.