Last updated: September 23, 2026
Groupe Amical Zenitris (“we”, “us”) takes the protection of your personal data very seriously. This policy explains what data we collect through this website, why, how long we keep it and how to exercise your rights. It is drawn up in accordance with the General Data Protection Regulation (GDPR – EU 2016/679), the ePrivacy Directive, the Personal Information Protection and Electronic Documents Act (PIPEDA – Canada), Quebec’s Act respecting the protection of personal information in the private sector (as amended by Law 25) and Moroccan law 09-08.
1. Data controller
Groupe Amical Zenitris – [legal form] – [address], Mohammedia, Morocco – contact@amical-zenitris-groupe.com – +212 6 60 23 44 47 / +33 6 44 68 68 81.
Data protection officer / Person in charge of the protection of personal information
For any question about your data, including within the meaning of Quebec’s Law 25 and PIPEDA: [Full name], [position] – contact@amical-zenitris-groupe.com.
Representative in the European Union
As we are established outside the EU, we have appointed a representative within the meaning of Article 27 GDPR: [name and address of the representative].
2. Data we collect
- Quote request / contact form: full name, company, business e-mail, phone number, need, industry, volume, preferred start date and project description.
- Correspondence: content of the e-mails and calls you send us.
- Technical data: IP address, browser type, pages visited, date and time (server logs, security and spam prevention).
- Cookies and trackers: see our cookie policy.
We do not collect any sensitive data (health, opinions, origin, etc.): please do not include any in the form’s free-text field.
3. Purposes and legal bases
- Responding to your request and preparing a quote — pre-contractual steps taken at your request (Art. 6(1)(b) GDPR); in Canada, the consent you give by submitting the form.
- Managing the business relationship (follow-ups on your request, contract performance) — contract performance and legitimate interest (Art. 6(1)(b) and (f)).
- Website security and spam prevention — legitimate interest (Art. 6(1)(f)).
- Audience measurement and non-essential cookies — your consent (Art. 6(1)(a) GDPR, ePrivacy rules, Law 25), which you can withdraw at any time.
- Compliance with our legal obligations (accounting, requests from authorities) — legal obligation (Art. 6(1)(c)).
We do not use your data for fully automated decision-making or profiling. We will not send you any commercial electronic message without your prior consent, in accordance with Canada’s Anti-Spam Legislation (CASL) and EU rules; every message includes an unsubscribe link.
4. Recipients
Your data is only accessible to authorised Group staff (sales management, Amical Phone and Zenitris divisions). It may be processed on our behalf by contractually bound processors subject to confidentiality:
- Website hosting: [hosting provider, country].
- E-mail service: [provider, country].
- Form spam protection (Google reCAPTCHA, United States) — only if enabled.
Your data is never sold, rented or disclosed to third parties for marketing purposes.
5. Transfers outside the EU and outside Quebec
Our teams are based in Morocco, a country that is not covered by a European Commission adequacy decision. Transfers from the European Economic Area are governed by the Standard Contractual Clauses adopted by the European Commission (Art. 46 GDPR). For personal information originating from Quebec, we carry out a privacy impact assessment before any communication outside Quebec (s. 17 of the Quebec Act) and ensure adequate protection by contract. You can obtain a copy of these safeguards by writing to contact@amical-zenitris-groupe.com.
6. Retention periods
- Quote requests and prospects: 3 years from your last contact, then automatic deletion.
- Clients: for the duration of the contract, then archived for the applicable statutory limitation periods.
- Server logs: 12 months maximum.
- Cookie choices: 6 months, after which we ask for your consent again.
7. Security
We implement appropriate technical and organisational measures: encrypted connection (HTTPS), restricted named access, regular updates, backups. In the event of a data breach posing a risk, we notify the competent authority (within 72 hours under the GDPR; the Office of the Privacy Commissioner of Canada and Quebec’s Commission d’accès à l’information where there is a risk of serious injury) and, where necessary, the individuals concerned.
8. Your rights
If you are located in the European Union
You have the right to access, rectify, erase, restrict, port and object to the processing of your data (including for direct marketing), the right to withdraw your consent at any time and, in France, the right to set instructions regarding your data after your death.
If you are located in Canada
You may access your personal information and have it corrected, withdraw your consent (subject to legal or contractual restrictions), and find out how it is used and to whom it has been disclosed. In Quebec, you may also request that its dissemination cease or that any hyperlink be de-indexed, and that it be provided to you in a structured, commonly used technological format (portability).
How to exercise your rights
Write to contact@amical-zenitris-groupe.com stating your request. We may ask for proof of identity if we have reasonable doubt. We respond free of charge within one month (GDPR) or 30 days (PIPEDA, Law 25), which may be extended where the law allows; you will be informed if so.
Complaints to a supervisory authority
If you believe your rights have not been respected, you may contact:
- in the EU: the data protection authority of your country (list of EU authorities);
- in Canada: the Office of the Privacy Commissioner of Canada;
- in Quebec: the Commission d’accès à l’information;
- in Morocco: the CNDP.
9. Cookies
Non-essential cookies (audience measurement, third-party content) are only set with your consent, collected through the cookie banner; refusing is as easy as accepting. Details in our cookie policy.
10. Services performed on behalf of our clients
This policy covers data collected through this website. When we make or receive calls on behalf of a client company, or build, host or maintain a website, an application or an artificial intelligence solution (chatbot, assistant) for it, that company is the data controller and we act as its processor, following its instructions under a contract compliant with Article 28 GDPR. For calls, we comply with the applicable do-not-call lists (Bloctel in France, the National Do Not Call List in Canada). To exercise your rights over such data, please contact that company first; we will assist it.
The AI solutions we deploy for our clients rely on model providers (OpenAI, Anthropic, Google) through their business offerings, whose data is not used by default to train the models. The chosen provider, data location and transfer safeguards are specified in each client’s contract. People interacting with a chatbot are informed that they are dealing with an AI system.
11. Minors
Our services are intended for businesses. This website is not intended for persons under 16 (14 in Quebec) and we do not knowingly collect their data.
12. Changes
We may update this policy; the date of the latest update appears at the top of the page. We will inform you by appropriate means of any significant change.