Controller and contact
Minassati determines the processing needed to operate the website, create files, communicate with customers, secure access and deliver ordered services.
Privacy requests can be sent to contact@minassati.ma. Include the relevant file or order reference when available.
Data processed
Categories depend on the service and file stage.
- Contact details, language, city, residence country and communication information.
- Project, company, shareholder, manager and beneficial-owner information.
- Supporting documents voluntarily uploaded to the private portal.
- Order, package, amount, payment, consents and processing history.
- Security data, access records and pseudonymized fingerprints used to prevent abuse.
Purposes and legal grounds
Data is used to answer requests, create and manage files, deliver services, provide tracking, prevent fraud, comply with applicable duties and protect Minassati or customer rights.
Depending on the activity, processing relies on a request or contract, consent where required, a legal duty or legitimate interests in securing and improving the platform.
Recipients and providers
Access is limited to authorized Minassati members, necessary technical providers and, where a procedure requires it, qualified professionals or competent authorities involved in the file.
Providers may support hosting, databases, authentication, private storage, email delivery, security, maintenance or payments. They receive only what is necessary for their role.
Retention and deletion
Draft links are generally time-limited. Link expiry blocks public access but does not itself mean immediate deletion of underlying data.
Data remains for the useful life of the file and then under a schedule reflecting contractual, accounting, tax, evidentiary and security requirements. Unneeded data is deleted or anonymized under applicable procedures.
Security and transfers
Controls include role-based access, random limited links, non-public storage, temporary downloads, file size/type validation, event logs and abuse limits.
Some technical providers may process data outside Morocco. Minassati evaluates contractual safeguards, technical measures and Moroccan formalities or authorizations before enabling such processing where required.
Your rights
Subject to legal conditions, you may request access, correction, updating, objection or deletion. Proportionate identity verification may be required to prevent disclosure to another person.
Deletion cannot always be immediate when retention is necessary to deliver the service, comply with an obligation or protect a right.