What we collect, why we collect it, how long we keep it, and how you take back control. Compliant with Law 09-08 (CNDP) and with GDPR for European Union visitors.
Impactium never sells your data. We do not share any personal data with data brokers, advertising platforms intended for resale, or third parties that are not strictly necessary to perform the service you ask of us. The data we collect serves three purposes only · responding to you, measuring our website's audience, and executing the missions you entrust to us.
We apply a principle of minimization · we collect only what is necessary, and we delete what we no longer use. The estimators work without account creation. The diagnostics you launch online leave no nominal trace unless you choose to send us the results to obtain a follow-up.
| Nature | Purpose | Legal basis | Retention |
|---|---|---|---|
| Contact formname, email, company, message | Respond to your request, qualify your need, prepare a scoping call | Pre-contractual execution · consent | 36 months after last exchange |
| Estimator resultsdata entered, score calculated | Send you your scorecard, propose a deeper dive | Explicit consent (checkbox) | 12 months if non-client · duration of the mission if client |
| Browsing datatruncated IP, pages viewed, device | Measure audience, improve UX, fix bugs | Legitimate interest · consent for non-essential cookies | 14 months (Google Analytics 4) |
| Commercial exchangesemails, call notes, briefs | Manage client relationship, execute contracted missions | Contractual execution | 5 years after end of mission (accounting obligation) |
| HR Intel newsletteremail, editorial preferences | Send you the quarterly analyses you subscribed to | Consent with active opt-in | Until unsubscribe |
We do not collect sensitive data within the meaning of article 1 of Law 09-08 (religious or political opinions, union membership, health, sex life, offenses). The estimators do not process individual employee data · they operate on aggregated data that you enter yourself.
Your data is accessible exclusively to members of the Impactium team who have an identified operational need · processing your request, executing the mission, accounting management. No access is open to third parties outside of the subprocessors listed below, strictly framed contractually.
No data is transferred to a country that does not present guarantees equivalent to those of Morocco, except when you yourself initiate a step that involves it (newsletter subscription, use of an integrated external service). International transfers, when they occur, rest on standard contractual clauses or on explicit consent.
The impactium.ma site uses two categories of cookies. Strictly necessary cookies ensure the operation of the site (language preference, session, security). They do not require consent because you cannot use the site without them.
Audience measurement cookies (Google Analytics 4) are placed with your agreement and use a truncated IP to anonymously measure the most viewed pages, navigation paths, and estimator completion rate. You can refuse or withdraw your consent at any time via the cookie banner present on all pages of the site, or via your browser settings.
We do not use advertising cookies, no third-party tracking pixel for retargeting purposes, and no fingerprinting service. The detailed list of cookies placed is accessible in the management banner, which allows control cookie by cookie.
In accordance with Law 09-08 and GDPR, you have the following rights over your personal data at any time · these rights are exercised free of charge, without justification, by writing to contact@impactium.ma from the address concerned. The response is provided within 30 days.
Our technical and organizational measures include HTTPS encryption across the entire site, encrypted off-site backups, named access to internal databases with two-factor authentication, subprocessors compliant with recognized standards (ISO 27001, SOC 2), and periodic reviews of our procedures. In the event of a data breach likely to create a risk to your rights, we will notify the CNDP within 72 hours and, if the risk is high, we will inform you individually.
Online estimators and calculators operate client-side · the data you enter only transits through our servers if you explicitly choose to transmit it to us to receive a detailed scorecard.
The impactium.ma site and its services are intended for an adult professional audience. We do not knowingly collect data concerning minors. If you are a legal representative and believe that data relating to a minor appears in our processing, write to contact@impactium.ma · we will proceed with deletion as quickly as possible.
This policy may evolve to reflect regulatory changes, the addition of a new service, or the arrival of a new subprocessor. Significant modifications are subject to a notification on the home page for 30 days and, when you have given us an email address, an information by message. The date of the last update appears at the top of this page.
For any question, exercise of rights, or report concerning the processing of your personal data, write to contact@impactium.ma specifying the nature of the request. If your request does not obtain a satisfactory response within 30 days, you can refer directly to the CNDP via the form accessible on cndp.ma.