Privacy and Personal Data Protection Policy

Version 1.0 – June 2026

Important Notice

This English version is provided as an informative translation of the Privacy and Personal Data Protection Policy of SARL BAKKAR TRAVAUX PUBLICS.

The official and legally binding version is the Arabic version approved and signed by the company.

In the event of any discrepancy or difference in interpretation between language versions, the Arabic version shall prevail.

1. Company Overview

SARL BAKKAR TRAVAUX PUBLICS, hereinafter referred to as “the Company”, is a company specialized in the manufacture of electrical poles and related accessories.

As part of its industrial and commercial activities, the Company collects and processes personal data relating to its customers, partners, suppliers, employees, job applicants and visitors.

The purpose of this Policy is to inform all concerned parties about the nature of the data collected, the purposes of processing, the security measures implemented, and the rights granted to them under the laws and regulations in force in the People’s Democratic Republic of Algeria.

2. Personal Data Collected

2.1 Customer and Business Partner Data

• Full name and company name
• Postal address, email address and telephone number
• All necessary tax-related information
• Banking information required for commercial transactions
• Order history and records of commercial transactions

2.2 Employee and Job Applicant Data

• Civil status information and personal contact details
• Employment contract information, salaries and social benefits

2.3 Data Collected Through Digital Platforms

• IP addresses and browsing data on our digital platforms
• Contact information submitted through electronic forms or email
• Communication logs maintained for tracking and auditing purposes

3. Purposes of Data Processing

The Company processes personal data for the following purposes:

• Management and execution of commercial contracts and orders
• Billing, debt collection, accounting and financial management
• Human resources management, payroll administration and professional training
• Compliance with legal and regulatory obligations (tax, social security and customs requirements)
• Security of facilities, equipment and individuals
• Corporate communication and promotion of the Company’s products
• Continuous improvement of products and services
• Handling requests, complaints and the exercise of data subject rights

4. Legal Basis for Processing

Any processing of personal data carried out by the Company is based on one of the following legal grounds:

• Performance of a contract or implementation of pre-contractual measures requested by the data subject
• Compliance with a legal obligation applicable to the Company
• The legitimate interests of the Company, provided that such interests do not override the rights and freedoms of the data subjects
• The explicit consent of the data subject where required

5. Data Retention Period

Personal data is retained for the period necessary to achieve the purposes for which it was collected, taking into account legal limitation periods and applicable archiving requirements.

• Customer data and commercial contracts: 10 years from the end of the contractual relationship
• Accounting and tax records: 10 years in accordance with applicable Algerian legislation
• Employee data: duration of employment plus the legally required retention period
• Unsuccessful job applicants: 2 years from the date of the last contact
• Video surveillance recordings: 30 days unless subject to a judicial request

6. Data Recipients

Personal data is made available to authorized internal departments of the Company, including Management, Human Resources, Accounting, Commercial and Production departments.

Data may also be disclosed to:

• Subcontractors and technical service providers acting on behalf of the Company and bound by confidentiality obligations
• Competent public authorities (tax administration, social security bodies and judicial authorities) where required by law
• Banking and financial partners involved in payment processing

The Company does not sell, rent or transfer personal data to third parties for commercial purposes.

7. Data Security

SARL BAKKAR TRAVAUX PUBLICS implements appropriate technical and organizational measures to ensure the security, confidentiality and integrity of personal data against unauthorized access, loss, alteration or disclosure.

These measures include in particular:

• Access control to facilities and information systems
• Management of user permissions and access rights
• Regular backup of data and systems
• Employee awareness and training regarding information security best practices
• Regular updates of the tools and software used

8. Rights of Data Subjects

In accordance with applicable legislation, any person whose data is processed by the Company has the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restriction of processing

To exercise these rights, data subjects may submit their requests by postal mail or email to the address indicated in Article 10 of this Policy.

9. Data Transfers

As part of its normal activities, the Company does not transfer personal data outside the territory of Algeria.

Should such a transfer become necessary, the Company will ensure in advance that the receiving country provides an adequate level of protection or that appropriate safeguards are implemented (contractual clauses, confidentiality commitments, etc.).

10. Contact and Complaints

For any questions regarding this Policy or to exercise your rights, you may contact SARL BAKKAR TRAVAUX PUBLICS through:

• Postal Address:
  P.O. Box No. 39420 – Oued El Alenda, El Oued Province, Algeria
• Email Address:
  info@bakkar-poteaux.com

If your complaint is not satisfactorily addressed, you may refer the matter to the competent data protection authority in Algeria.

11. Policy Updates

This Policy may be amended at any time in order to reflect legal, regulatory or organizational developments or changes in the Company’s practices.

The version in force shall be the version maintained by the Company’s legal department.

Any substantial modification will be communicated to the concerned parties through appropriate means.