PRIVACY AND DATA PROTECTION POLICY

​

Plantynia is a digital platform operated by the company ZERIMAR S.A.R.L. AU (hereinafter, the “Company”).

 

The Company is committed to protecting the privacy and personal data of Plantynia users. This Privacy Policy explains what information we may collect, the purposes for which we use it, with whom we may share it and what rights users may exercise.

​

This policy applies to the Plantynia website, its mobile application and the digital services offered through these platforms.

​

1. Personal data we may collect

A. Data provided directly by the user

Depending on the services used, we may collect the following data:

• First and last name.

• Email address.

• Account access password.

• Date of birth, when required for a specific service.

• Telephone number, when provided by the user.

• Information provided through contact forms, registration forms or service request forms.

• Information relating to agronomic consultations, photographs of plants, crops, pests, diseases and problems described by the user.

• Information necessary to manage purchases, subscriptions, courses and other contracted services.

 

Users should avoid including third parties’ personal data in the forms or photographs they submit, unless they are authorised to do so.

​

B. Technical data collected automatically

When browsing and using Plantynia, certain technical data may be collected, such as:

• IP address.

• Device type, browser and operating system.

• Information about the connection and the operation of the platform.

• Date and time of access.

• Pages and tools viewed.

• Technical identifiers associated with certain services, such as push notifications.

• Information obtained through cookies and similar technologies, in accordance with the Cookie Policy and the user's consent preferences.

​

Geographical location will only be processed when technically necessary for a particular feature and the user has granted the corresponding permissions, where required.

​

2. Purposes of data processing

The Company may process personal data for the following purposes:

• To create and manage user accounts and provide access to Plantynia's features.

• To manage purchases, payments, invoicing, subscriptions and service requests.

• To provide consultancy and agronomic diagnostic services, as well as prepare and send technical reports.

• To manage registration and participation in courses, training programmes and educational activities, and issue certificates where applicable.

• To send communications necessary for the provision and management of contracted services.

• To send push notifications relating to Plantynia features, alerts and content, when the user has enabled this service.

• To send newsletters, updates and commercial communications when the necessary consent exists or another valid legal basis applies.

• To analyse the operation of the platform and improve its content, tools and services.

• To detect technical incidents, prevent fraudulent use and protect the security of accounts and the platform.

• To comply with the legal, tax and administrative obligations applicable to the Company.

 

3. Legal basis for processing

Personal data will be processed in accordance with applicable legislation and, depending on the circumstances, on the following legal bases:

• The performance of a contract or the implementation of measures requested by the user before entering into a service agreement.

• Compliance with the Company's legal obligations.

• The user's consent, where required, for example, for certain commercial communications, non-essential cookies or notification permissions.

• The Company's legitimate interest in maintaining security, preventing fraud and improving its services, provided that the user's rights and freedoms do not override that interest.

​

Where processing is based on consent, the user may withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before such withdrawal.

​

4. Third-party services and technology providers

In order to provide and maintain Plantynia's services, the Company may use external providers that process certain personal data on their own behalf or as data processors, depending on the role they perform.

These may include:

​

Wix.com

The platform uses Wix.com's technological infrastructure to host and manage the website and certain features, such as forms, user accounts and digital services.

​

Wix may process the technical and personal data necessary to provide these services, in accordance with its terms and privacy policies.

​

OneSignal

Plantynia may use OneSignal to manage the sending of push notifications.

​

This provider may process technical device identifiers, notification subscription information and other data necessary to deliver messages. Users may disable notifications through their device settings or the options available within the service.

​

Payment gateways

Payments are managed through authorised external providers, which may include PayPal and/or Paymentwall when this service is enabled.

​

The data required to process transactions and carry out security or fraud prevention checks may be processed directly by these providers.

​

The Company does not store complete bank card details on its own servers. The processing of payment data is also governed by the privacy policies of the payment gateway used.

​

Other providers

The Company may use other providers for hosting, communications, analytics, advertising, email and technical maintenance whenever necessary to provide its services.

​

Access to data will be limited to the information required for each provider's role and will be subject to the applicable contractual and legal obligations.

​

5. Disclosure and transfer of data

The Company does not sell its users' personal data.

​

Data may be disclosed to technology and payment service providers when necessary to provide Plantynia's services, as well as to public authorities or competent bodies where there is a legal obligation to do so.

 

As some providers may operate from other countries, personal data may be processed or stored outside Morocco, including in the European Economic Area or other territories.

​

Where international data transfers take place, the Company will endeavour to apply the safeguards and measures required by the applicable data protection legislation.

​

6. Data retention

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.

In particular:

• Account data will be retained while the account remains active or for as long as necessary to manage the relationship with the user.

• Data relating to purchases, payments and invoicing may be retained for the periods required by tax, accounting and administrative legislation.

• Data relating to consultations, courses and services will be retained for as long as necessary to provide the service and manage any potential incidents or claims.

• Data used for commercial communications will be retained until the user withdraws their consent or requests to stop receiving such communications, where this is the legal basis for processing.

• Technical and browsing data will be retained for the periods established by the relevant services and according to their purpose.

​

When data is no longer necessary, it will be deleted or anonymised, unless there is a legal obligation to retain it.

​

7. Users' rights

In accordance with applicable legislation, users may exercise the rights they are entitled to in relation to their personal data, including:

• The right to access their personal data.

• The right to request the rectification of inaccurate or incomplete data.

• The right to request the deletion of their data where legally permitted.

• The right to request the restriction of certain processing activities.

• The right to object to certain processing activities where there are legal grounds to do so.

• The right to withdraw consent where processing is based on consent.

• The right to request data portability where this right is applicable.

• The right to lodge a complaint with the competent data protection authority, where applicable.

 

Unsubscribing from commercial communications

Users may stop receiving newsletters and commercial communications by using the unsubscribe mechanism included in the messages themselves or through the following form:

https://www.zerimarlaboratoire.com/en/suppression-contact

​

Unsubscribing from commercial communications does not necessarily entail the deletion of the account or the interruption of messages strictly necessary for managing contracted services.

​

Account deletion

To request the deletion of an account and the associated personal data, users may use the form available at:

https://www.zerimarlaboratoire.com/en/suppression-contact

 

The request will be reviewed and processed in accordance with applicable legislation. Certain data may be retained where there is a legal obligation or a legitimate reason justifying its retention.

​

8. Information security

The Company applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

​

These measures may include access controls, permission management, security measures implemented by technology providers and mechanisms to protect communications and digital infrastructure.

​

However, no electronic transmission or storage system can guarantee absolute security.

​

9. Use of cookies and similar technologies

Plantynia uses cookies and similar technologies to ensure the operation of the platform, remember preferences and, where applicable, analyse the use of its services.

​

Users can consult details about cookie categories, their purposes and the available management options in our Cookie Policy.

​

10. Privacy of minors

Plantynia is not specifically directed at minors. Minors must use services requiring registration, contracting or the processing of personal data with the involvement or authorisation of their legal representatives whenever required by applicable legislation.

​

If the Company becomes aware that personal data belonging to a minor has been collected in circumstances that breach applicable legislation, it will take appropriate measures to review and, where applicable, delete such data.

​

11. Amendments to this Policy

The Company may update this Privacy Policy to reflect legislative or technical changes or new Plantynia features.

​

The current version will be available on this same page. Users are advised to consult it periodically.

 

12. Contact details

For any enquiries regarding this Privacy Policy or to exercise rights relating to personal data, you may contact the Company through the following channels:

Brand: Plantynia
Data Controller: ZERIMAR S.A.R.L. AU
Email: info@plantynia.com
Telephone: +212 808665650
Registered office: 116, Avenue Imam Mouslim, 2ème étage, Dradeb, Tangier, Morocco.