Privacy Policy

Politique de Confidentialité

Last updated: November 28, 2025

1. Introduction

Ste Aznag Cars ("we," "our," or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with Moroccan Law 09-08 on the Protection of Personal Data and international data protection standards.

Our Commitment: We are registered with the CNDP (Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel) and comply with all Moroccan data protection regulations.

2. Data Controller / Responsable du Traitement

Company Name: Ste Aznag Cars

ICE: 001732961000040

RC: 5651 Agadir

Address: Boulevard des F.A.R., Galerie Yassine n°2, Agadir, Morocco

Phone: +212 660 180 709

Email: contact@aznagcars.com

Data Protection Contact: privacy@aznagcars.com

3. Personal Data We Collect / Données Personnelles Collectées

We collect the following categories of personal data:

3.1 Identity Information

  • Full name (first name, last name)
  • Date of birth
  • Nationality
  • Passport or national ID number
  • Driver's license number and expiry date
  • Photograph (from ID documents)

3.2 Contact Information

  • Email address
  • Phone number (mobile and landline)
  • WhatsApp number
  • Residential address
  • Emergency contact details

3.3 Financial Information

  • Credit card details (last 4 digits, expiry date, card type)
  • Billing address
  • Payment transaction history
  • Bank pre-authorization records

Note: Full credit card numbers are not stored by us but are processed securely by our payment service providers.

3.4 Rental Information

  • Booking and reservation details
  • Vehicle selection and preferences
  • Pickup and drop-off locations and dates
  • Additional services requested (GPS, child seat, etc.)
  • Rental agreement and contract details
  • Inspection reports and vehicle condition records

3.5 Usage and Technical Data

  • GPS location data (for equipped vehicles)
  • Mileage and trip information
  • Vehicle diagnostic data
  • Website browsing activity and cookies
  • IP address and device information
  • Communication preferences

3.6 Incident and Compliance Data

  • Accident and damage reports
  • Police reports and insurance claims
  • Traffic violations and fines
  • Customer service communications
  • Complaint records and dispute resolution

4. How We Collect Personal Data / Modes de Collecte

We collect personal data through the following methods:

  • Direct Collection: When you make a booking online, by phone, email, or WhatsApp
  • At Pickup: When you present documents and sign the rental agreement
  • During Rental: Through GPS tracking devices in vehicles (with your consent)
  • Website: Through cookies, forms, and browsing activity
  • Third Parties: From payment processors, credit card companies, insurance providers, and authorities (for fines or legal matters)
  • Publicly Available Sources: If required for verification or fraud prevention

5. Legal Basis and Purposes of Processing / Base Légale et Finalités

We process your personal data based on the following legal grounds and for the following purposes:

5.1 Contract Performance

Processing necessary to fulfill our rental agreement with you:

  • Managing bookings and reservations
  • Providing rental services and vehicles
  • Processing payments and refunds
  • Managing security deposits
  • Vehicle delivery and return
  • Customer support and assistance

5.2 Legal Obligations

Processing required by Moroccan law:

  • Tax and accounting requirements
  • Reporting traffic violations to authorities
  • Responding to legal requests and court orders
  • Compliance with anti-money laundering regulations
  • Maintaining rental records as required by law
  • Insurance and liability documentation

5.3 Legitimate Interests

Processing necessary for our legitimate business interests:

  • Fraud prevention and detection
  • Debt collection and financial management
  • Vehicle security and theft prevention through GPS tracking
  • Fleet management and maintenance optimization
  • Service quality improvement and customer satisfaction
  • Website security and functionality
  • Internal record keeping and business analytics

5.4 Consent

Processing based on your explicit consent:

  • Marketing communications (email, SMS, WhatsApp)
  • Special offers and promotions
  • Customer satisfaction surveys
  • Optional cookies and analytics
  • Sharing testimonials or reviews

Note: You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Data Sharing and Recipients / Destinataires des Données

We may share your personal data with the following categories of recipients:

6.1 Service Providers

  • Payment processors and banks
  • IT hosting and cloud service providers
  • Website analytics and marketing platforms
  • Email and SMS service providers
  • GPS tracking and telematics providers
  • Accounting and legal advisors

All service providers are bound by strict data processing agreements and can only process data on our instructions.

6.2 Insurance Companies

In case of accidents, damage, or theft, we share relevant information with our insurance providers to process claims.

6.3 Authorities and Law Enforcement

  • Moroccan police and gendarmerie
  • Tax authorities
  • Courts and judicial authorities
  • Traffic enforcement agencies
  • CNDP (data protection authority)

We only share data with authorities when legally required or to protect our rights and property.

6.4 Business Transfers

If we merge with, are acquired by, or sell assets to another company, your personal data may be transferred to the new entity, subject to the same privacy protections.

Important: We do not sell your personal data to third parties for marketing purposes.

7. International Data Transfers / Transferts Internationaux

Some of our service providers (e.g., cloud hosting, email services) may be located outside Morocco. When we transfer your personal data internationally, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by data protection authorities
  • Adequacy decisions recognizing equivalent data protection standards
  • Privacy Shield or similar certification frameworks
  • Binding corporate rules for transfers within corporate groups

8. Data Retention / Durée de Conservation

We retain your personal data only for as long as necessary for the purposes outlined in this policy and as required by law:

Data TypeRetention Period
Booking and rental records5 years after rental end (legal requirement)
Financial and tax records10 years (legal requirement)
Accident and insurance claims10 years after claim resolution
Customer account data3 years after last activity
Marketing consent3 years from last consent or contact
GPS tracking data90 days after rental end
Website cookies and analyticsAs specified in Cookie Policy (max 13 months)
Correspondence and complaints3 years after resolution

After the retention period expires, we securely delete or anonymize your personal data unless longer retention is required by law or for the defense of legal claims.

9. Data Security / Sécurité des Données

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

Technical Measures:

  • SSL/TLS encryption for data transmission
  • Encrypted storage of sensitive data
  • Secure backup systems
  • Firewall and intrusion detection systems
  • Regular security audits and vulnerability assessments
  • Access controls and authentication systems

Organizational Measures:

  • Staff training on data protection
  • Confidentiality agreements with employees and contractors
  • Role-based access controls (only authorized personnel can access data)
  • Data breach response procedures
  • Regular privacy impact assessments
  • Vendor security due diligence

Data Breach Notification: In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and the CNDP within 72 hours as required by law.

10. Your Data Protection Rights / Vos Droits

Under Moroccan Law 09-08, you have the following rights regarding your personal data:

10.1 Right of Access (Droit d'Accès)

You can request confirmation of whether we process your personal data and obtain a copy of your data and information about how it is processed.

10.2 Right to Rectification (Droit de Rectification)

You can request correction of inaccurate or incomplete personal data.

10.3 Right to Erasure (Droit à l'Effacement)

You can request deletion of your personal data when:

  • It is no longer necessary for the purposes for which it was collected
  • You withdraw your consent and there is no other legal basis
  • You object to processing and there are no overriding legitimate grounds
  • The data has been processed unlawfully

Note: This right is not absolute and may be limited by legal obligations to retain certain records.

10.4 Right to Restriction (Droit à la Limitation)

You can request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or object to processing.

10.5 Right to Data Portability (Droit à la Portabilité)

You can request to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

10.6 Right to Object (Droit d'Opposition)

You can object to processing based on legitimate interests or for direct marketing purposes. We will stop processing unless we have compelling legitimate grounds.

10.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.

10.8 Right to Lodge a Complaint

You can file a complaint with the CNDP if you believe your data protection rights have been violated.

How to Exercise Your Rights:

To exercise any of these rights, please contact us at:

  • Email: privacy@aznagcars.com
  • Phone: +212 660 180 709
  • Mail: Aznag Cars, Data Protection Officer, Boulevard des F.A.R., Galerie Yassine n°2, Agadir, Morocco

We will respond to your request within 30 days. We may request identity verification before processing your request to protect your privacy.

11. Supervisory Authority / Autorité de Contrôle

If you are not satisfied with our response or believe we have violated your data protection rights, you have the right to lodge a complaint with the Moroccan data protection authority:

CNDP - Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel

Address: Angle Bd. Annakhil et Rue Oum Rabia, Hay Riad, Rabat, Morocco

Phone: +212 537 57 64 31

Fax: +212 537 57 13 89

Email: cndp@cndp.ma

Website: www.cndp.ma

12. Cookies and Tracking Technologies / Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyze website traffic, and personalize content. For detailed information about our cookie practices, please see our Cookie Policy.

You can control cookie preferences through your browser settings or our cookie consent banner.

13. Children's Privacy / Protection des Mineurs

Our services are not intended for individuals under 21 years of age (the minimum rental age). We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

14. Changes to This Privacy Policy / Modifications

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Posting the updated policy on our website with a new "Last updated" date
  • Sending you an email notification (if you have an account with us)
  • Displaying a prominent notice on our website or during the booking process

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

15. Contact Us / Nous Contacter

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Data Protection Contact:

Email: privacy@aznagcars.com

Phone: +212 660 180 709

Mail: Aznag Cars, Data Protection Officer

Boulevard des F.A.R., Galerie Yassine n°2

Agadir, Morocco

Version 1.0 - Effective November 28, 2025

This Privacy Policy complies with Moroccan Law 09-08 on the Protection of Personal Data and is registered with the CNDP.

Tap to chat