Privacy Policy

Last updated: July 2026

This Privacy Policy applies to personal data collected through the PragmaGeeks Talent Portal (talent.pragmageeks.com), operated by PragmaGeeks SARL, a company incorporated under Moroccan law, with registered offices in Casablanca, Morocco.

1. Legal Framework

PragmaGeeks processes personal data in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, and the implementing regulations issued by the Commission Nationale de Contrôle de la Protection des Données à Caractère Personnel (CNDP).

Where candidates are residents of the European Economic Area, we also apply the principles of the General Data Protection Regulation (GDPR) as a matter of good practice.

2. Data Controller

The data controller responsible for your personal data is:

• Entity: PragmaGeeks SARL
• Address: Casablanca, Morocco
• Contact: privacy@pragmageeks.com

3. Data We Collect

When you submit an application through this portal, we collect:

• Full name and email address
• LinkedIn profile URL
• Education level and seniority level
• Notice period and salary expectation
• Work preferences (remote / hybrid / on-site)
• Current location
• Professional skills list
• Curriculum Vitae (CV) in PDF format

We also collect technical data (IP address, browser type) for security and fraud prevention.

4. Purpose and Legal Basis

Recruitment Matching

We use your data to assess your profile against current and future opportunities and to present your candidacy to prospective employers in Europe. This processing is based on your explicit consent (Law 09-08, Article 3(c)).

Communication

We may contact you by email to confirm your application, verify your identity, or notify you of relevant opportunities. This is based on our legitimate interest in maintaining an active talent network.

Security

All uploaded CVs are scanned for malicious content. We log security events for fraud prevention. This is based on our legitimate interest in protecting our systems and users.

5. Data Retention

Your profile data is retained for a maximum of 12 months from the date of submission, unless you withdraw consent earlier or we place you in a role — in which case data is retained for the duration of any contractual relationship plus the applicable statutory period under Moroccan law.

You will receive an email notification before your data is deleted, giving you the option to renew your consent and remain in our network.

6. Data Sharing

We do not sell or rent your personal data. We may share it with:

• Prospective employers — only with your prior consent and only for specific opportunities that match your profile.
• Service providers — including cloud hosting providers and email delivery services, who act as data processors under contractual data processing agreements.
• Regulators — if required to do so by applicable Moroccan law or a competent authority.

7. International Transfers

Our infrastructure is hosted in Europe (Hetzner, Germany). Transferring your data to this jurisdiction is conducted under appropriate safeguards, consistent with the requirements of Law 09-08 and the CNDP framework for cross-border data transfers.

8. Your Rights

Under Moroccan Law 09-08, you have the right to:

• Access — request a copy of your personal data we hold
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data at any time
• Opposition — object to processing for direct marketing or legitimate interest purposes
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@pragmageeks.com. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the CNDP — the Moroccan data protection authority — at www.cndp.ma.

9. Security

We apply technical and organisational measures to protect your data:

• All traffic is encrypted via HTTPS (TLS 1.2+)
• CVs are stored outside the public webroot and are not directly accessible via URL
• All uploaded files are scanned for malware before storage
• Access to personal data is restricted to authorised staff only
• Servers are protected by firewall rules, intrusion detection, and regular security updates

10. Cookies

This portal uses a session cookie required for form security (CSRF protection). No third-party analytics or advertising cookies are used. If Cloudflare Turnstile bot protection is active, a technical cookie may be set by Cloudflare — see Cloudflare's Privacy Policy.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of this portal constitutes acceptance of the updated policy.

12. Contact

For any data protection queries, contact our privacy team at privacy@pragmageeks.com.