This policy defines the conditions and procedures for the collection, processing, conservation, securing and, where applicable, communication of personal data, as well as the rights recognized to the data subjects, as provided by the aforementioned law.

Personal data collected from employees, clients, and service providers of ONYX PLAST are processed lawfully, fairly, and transparently, exclusively for specified, explicit, and legitimate purposes, and are only used within the strict limits of these purposes, in accordance with the principle of purpose limitation provided by current legislation.

Data processing carried out by ONYX PLAST is based on:
1. Compliance with legal and regulatory obligations.
2. The execution of contracts.
3. The consent of the data subjects when required.

Within the framework of its missions and professional activities, ONYX PLAST collects and processes personal data through, notably, the following channels:
1. All correspondence and communications, whether written, electronic, or carried out by any other means, between the data subjects and the various structures of ONYX PLAST.
2. Its official website as well as its institutional accounts and pages on social media.
3. Acts, documents, and contractual supports, including employment contracts and commercial contracts.
4. Forms, declarations, and requests, in paper or electronic format.
5. Visits, meetings, and exchanges conducted at the company’s sites.

ONYX PLAST collects, in compliance with Law No. 18-07, different categories of personal data:
1. Sensitive data: health data or other information protected by law, collected only when necessary. All this data is processed securely and only for the purposes provided by law.
2. Identification data: surname, first name, date and place of birth, contact details.
3. Professional data: position, employer, professional background, diplomas, and qualifications.
4. Financial data: income, banking, and payment information.

ONYX PLAST collects and processes personal data in compliance with Law No. 18-07 for the following purposes:
1. Access to controlled areas: management of access authorizations (badges).
2. Legal and regulatory compliance: respect for legal and regulatory obligations.
3. Contractual and administrative management: administration of personnel, apprentices, and trainees; management of contracts, remuneration, working hours, training, clients, and suppliers.
4. Security of property and persons: video surveillance and visitor logs.
5. Commercial and marketing activities: processing of complaints, development of studies and statistics, creation of subscription cards.

Data is kept only for the duration necessary for the purposes for which it was collected, in accordance with the law, and according to the duration validated by the competent national authority.

Data is processed manually and electronically and protected by appropriate technical and organizational measures. Although all precautions are taken to prevent loss, theft, unauthorized access, or modification, the company cannot guarantee absolute security against all existing computer risks.

Data collected by ONYX PLAST may be communicated, in compliance with Law No. 18-07, to the following recipients:
1. Authorized internal personnel (HR, IT, legal, commercial, occupational medicine).
2. External partners and service providers (subcontractors, suppliers, delegates).
3. Competent public authorities (tax, social security, judicial, and financial).
4. Professionals bound by professional secrecy (lawyers, bailiffs, notaries, auditors).
5. Control and regulatory bodies: entities responsible for verifying the company’s compliance with laws and regulations, particularly regarding data protection, security, and taxation, such as data protection authorities, external auditors, and certification bodies.

Personal data collected by ONYX PLAST is primarily intended for its internal use. However, it may be communicated, within the framework of its activities, to:
1. Authorized internal personnel of the company. Subcontractors are required to implement confidentiality and security measures in accordance with Law No. 18-07 and contractual commitments.
2. Suppliers, service providers, and partners.
3. Competent public authorities.

ONYX PLAST may transfer personal data outside of Algeria only if the recipient country offers a sufficient level of protection. Transfers are secured by contractual guarantees or other mechanisms compliant with the law. Transferred data is used only for the intended purposes. Each transfer is documented and monitored to ensure continuous compliance with legislation.

In accordance with the provisions of Law No. 18-07 of June 10, 2018, when consulting the ONYX PLAST website, cookies or similar technologies may be placed on the user’s terminal. These cookies are used exclusively to ensure the proper functioning of the site, measure the audience, and improve the user experience. The user has the option to manage, disable, or delete cookies at any time through their browser settings, without affecting the lawfulness of processing previously carried out.

In accordance with Law No. 18-07 of June 10, 2018, ONYX PLAST ensures the special protection of personal data of minors. Any processing concerning them, particularly in the context of internships, apprenticeships, or training, requires the prior consent of the legal representative when required by law. This data is processed only for legitimate purposes, with reinforced security and confidentiality measures adapted to its sensitivity.

In accordance with Law No. 18-07, every person has the following rights:
1. Right of opposition: to oppose, for legitimate reasons, the processing of their personal data.
2. Right to information: to know the identity of the data controller, the purposes and information relating to the personal data collected, and to obtain a copy of this data.
3. Right of access: to access all data concerning them and information on its processing.
4. Right of rectification: to request the correction or updating of inaccurate or incomplete data.

Any data subject may lodge a complaint with the National Authority for the Protection of Personal Data (ANPDP).

In the event of an incident, ONYX PLAST detects, assesses, informs the ANPDP and the data subjects, and takes corrective measures.

Data is archived or destroyed securely after the legal retention period or at the end of its purpose.

Regular audits are conducted to verify compliance with legal obligations and security and confidentiality commitments.

ONYX PLAST reserves the right to update this policy to reflect:
1. Technical developments (software updates, installation of video surveillance systems, and reinforcement of cybersecurity).
2. Organizational changes (creation of new services, merger with other companies, reorganization of internal responsibilities).

In accordance with Law No. 18-07 of June 10, 2018, any person may exercise their rights of access, rectification, opposition, limitation, or deletion with the data controller. Requests can be sent by mail or email:

• Email: contact@onyxplast.com
• Address: ZAC, 85 Lots, Lot n°01, Section 10, Îlot 231, Ouled Saber, Sétif, Algeria

The company responds within legal deadlines and assists individuals in exercising their rights