Personal Data Protection Policy

1. Identity of the Data Controller

The controller responsible for processing personal data is:

CIRTASOFT, represented by its legal director.

2. Data Collected

As part of our IT and technology services activities, we collect and process the following data concerning our prospects and clients:

• First and last name
• Professional email address
• Phone number
• Company name
• Job title / Position held
• Company website
• Industry sector

3. Purposes of Collection

Personal data is collected and processed exclusively for the following purposes:

• Responding to your requests for contact, information, or quotes
• Offering IT solutions tailored to your specific needs
• Ensuring follow-up of the pre-contractual and contractual commercial relationship
• Managing our projects and service offerings
• Conducting internal commercial analyses and statistics
• Improving our services and technological offerings

4. Legal Basis for Processing

The processing of your personal data is based on:

• Your free and informed consent
• The execution of pre-contractual measures taken at your request
• Our legitimate interests in developing our commercial activity

5. Data Recipients

Your personal data is processed exclusively by authorized CIRTASOFT personnel.

No data is sold, rented, or transferred to third parties.

Your data may be transmitted to technical subcontractors (email sending services) only within the framework of contracts including strict confidentiality clauses and compliance with Law No. 18-07.

6. Retention Period

The collected data is retained for three (3) years from:

• The last contact or interaction on your part for prospects
• And 10 years from the end of the contractual relationship for clients

This period may be extended in case of legal obligations or for the defense of our rights in court.

7. Data Security

CIRTASOFT implements appropriate technical and organizational measures to ensure:

• The confidentiality of your data
• The integrity of stored information
• The availability of data for authorized processing
• Protection against unauthorized access, loss, or accidental destruction

These measures include: data encryption, access controls, secure backups, and staff training.

8. Your Rights

In accordance with Articles 7, 34 to 36 of Law No. 18-07, you have the following rights:

Right of Access

You may request to know the personal data we hold about you.

Right of Rectification

You may request the correction of inaccurate or incomplete data.

Right to Object

You may object to the processing of your data for legitimate reasons.

Right to Withdraw Consent

You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9. International Data Transfer

CIRTASOFT does not transfer your personal data outside of Algeria without first obtaining the authorizations required by Law No. 18-07 and without implementing appropriate safeguards for the protection of your data.

10. Cookies and Similar Technologies

Our website may use technical cookies necessary for the proper functioning of the site. You are informed of their use and can disable them through your browser settings.

11. Complaints

If you believe that the processing of your personal data does not comply with regulations, you may file a complaint with the competent authority in Algeria.

12. Policy Updates

CIRTASOFT reserves the right to modify this personal data protection policy at any time to adapt to legal, regulatory, or technical changes.
The current version is available on our website cirtasoft.com and will be communicated to you in case of substantial modification.