Personal Data Protection Notice

In accordance with Algerian Law No. 18-07 - Updated December 2025

Protection of Personal Data

SofizPay (EURL SofizPay) processes personal data in compliance with applicable laws and regulations, particularly Algerian Law No. 18-07 on the protection of natural persons with regard to the processing of personal data, published on June 10, 2018 in Official Journal No. 34.

This information aims to inform you about the objectives and purposes pursued in the context of personal data processing implemented by SofizPay, how this data is used, and the rights you have.

SofizPay has appointed a Data Protection Officer (DPO), who ensures that the processing of personal data implemented by SofizPay complies with applicable regulations.

1. What is Personal Data?

Any information, regardless of its medium, relating to an identified or identifiable person, directly or indirectly, in particular by reference to an identification number or to one or more elements specific to their physical, physiological, genetic, biometric, mental, economic, cultural or social identity. (Art. 3 of Law 18-07)

2. Why does SofizPay collect your personal data?

Personal data is collected with the prior consent of the person concerned for explicit, legitimate and specific purposes. This data cannot be used subsequently in a manner incompatible with these purposes. The personal data collected is strictly necessary for the intended purpose in a relevant and proportionate manner.

SofizPay collects and uses different types of personal data, such as:

  • Identification data (surname, first name, date of birth, postal address, etc.)
  • Data relating to family situation (marital status, etc.)
  • Data relating to economic, financial and tax situation (social security number, tax number, bank account details, etc.)
  • Information relating to professional situation (education level, employment, etc.)
  • Data necessary for combating fraud, money laundering and terrorist financing

⚠️ SofizPay does not process any "sensitive" data relating to your racial or ethnic origins, political opinions, religious beliefs, trade union membership, genetic or biometric data unless this is a legal obligation.

The personal data that SofizPay uses may be communicated directly by you or obtained from our service providers / supervisory authority / third parties for the purpose of verifying or enriching our databases.

In some cases, SofizPay may collect information without being in direct contact with you. This may, for example, be the case when your contact details are provided to us by one of our suppliers, service providers or a customer if you are, for example, a family member, co-borrower, legal representative, etc.

3. For what purposes is your data used?

The personal data collected is used for:

In compliance with legal and regulatory obligations to which SofizPay is subject:

  • Combating money laundering and terrorist financing
  • Combating tax fraud, carrying out tax audits and notification obligations
  • Responding to potential requests from a duly authorized public or judicial authority

As part of your contractual relationship for the following main purposes:

  • The conclusion, management and execution of your contracts with the platform
  • Customer commercial management and commercial prospecting through loyalty actions, monitoring and improving the quality of customer relations (satisfaction surveys, emails, SMS, communication on social networks, any other communication...)
  • Updating customer knowledge, providing personal spaces and accounts on the internet or mobile (including connection management, implementation of security measures for your account)

In pursuit of a legitimate interest (deployment and development of electronic payment services):

  • Information system management and Data Protection Officer (DPO)
  • Staff awareness at SofizPay by recording calls made and received by call centers
  • Personalization of offers and service improvement

✓ To respect your choice, SofizPay will ask for your consent for certain specific processing operations.

4. Who are the recipients of your personal data?

The recipients of your personal data may be, within the strict framework of the purposes mentioned above:

1Duly authorized SofizPay personnel
2Partners, delegates, subcontractors, service providers and suppliers
3Managers involved in the contract
4Persons interested in the contract
5Financial and judicial authorities according to the scope authorized and provided for by the regulations in force
6Certain regulated professions such as lawyers, notaries and auditors

5. Is your data transferred outside Algerian territory?

Your personal data is processed and stored in SofizPay's data centers on national territory.

However, in very rare cases, it may be transferred outside national territory.

If this is the case, these transfers abroad will be carried out by SofizPay in strict compliance with the laws and regulations in force.

📧 If you wish to know about these measures, we invite you to contact the SofizPay Data Protection Officer (DPO) by submitting a request (contact details below).

6. What is the retention period for your personal data?

Personal data is kept for a limited period that does not exceed the time necessary to achieve the purposes for which it was collected, in compliance with legal limitation periods and the various obligations imposed by regulations.

Customer data is kept for the entire duration of the contract, to which is added the legal limitation periods. Once this period has expired, your data is deleted from SofizPay's systems. Unless otherwise stipulated by regulation.

🔒 7. How is your data secured?

Appropriate physical and organizational security measures are implemented by SofizPay to ensure the confidentiality and protection of personal data.

SofizPay also requires every subcontractor, partner, and supplier to provide appropriate guarantees to ensure the security and confidentiality of personal data.

8. What are your data rights and how can you exercise them?

In accordance with applicable regulations, you have the following rights:

Right to information:

According to Article 32 of Law No. 18-07, unless they have already been informed, any person requested to collect their personal data must be informed beforehand, in an express and unequivocal manner, by the data controller or their representative.

Right of access:

According to Article 34 of Law No. 18-07, the person concerned has the right to obtain from the data controller:

  • Confirmation that personal data concerning them is or is not being processed, the purposes of the processing, the categories of data concerned and the recipients
  • Communication, in an intelligible form, of their data being processed, as well as any available information on the origin of the data

Right to rectification:

According to Article 35 of Law No. 18-07, the person concerned has the right to obtain, free of charge, from the data controller:

  • The updating, rectification, erasure or blocking of personal data whose processing does not comply with this law
  • Notification to third parties to whom personal data has been communicated of any update, rectification, erasure or blocking of personal data

Right to object:

According to Article 36 of Law 18-07, the person concerned has the right to object, for legitimate reasons, to personal data concerning them being processed. They have the right to object to data concerning them being used for prospecting purposes, particularly commercial, by the current data controller or that of subsequent processing.

Prohibition of direct prospecting:

According to Article 37 of Law 18-07, direct prospecting is prohibited by means of an automatic calling device, fax, email or any means employing technology of the same nature that uses, in any form whatsoever, the contact details of a natural person who has not given their prior consent.

📝 If you wish to exercise any of the rights listed above, please send your letter or email to the Data Protection Officer (DPO) whose contact details you will find below.

🆔 In order for your request to be admissible, and to allow us to have proof of your identity, please include a photocopy / scan of your identity document.

⚖️ In accordance with current regulations, you can also file a complaint with the national authority for the protection of personal data (ANPDP).

9. How to contact the Data Protection Officer?

In case of questions or any need related to the use of your personal data, we invite you to contact the DPO, the dedicated contact for the protection of personal data.

You can contact:

📧

Email

By email: contact@sofizpay.com

📮

Adresse postale / العنوان البريدي / Postal Address

By mail: at the following address: Rue kasraoui el-hachemi, Mecheria, Naama, Algeria

⚠️ In case of persistent disagreement regarding your personal data, you have the right to contact the national authority for the protection of personal data (ANPDP).

Last updated: December 2025