This document is the same as the one available in the XVAR app.
The processing of personal data collected via the XVAR application is carried out by XVAR, acting as data controller. XVAR undertakes to comply with Law No. 09-08 on the protection of individuals with regard to the processing of personal data, as well as the requirements and recommendations of the CNDP.
XVAR collects only the data necessary for the proper use of the application and the provision of services: identity (last name, first name, profile photo), age or date of birth, contact details, location, published content (videos, photos, performance statistics, interactions, and messages). Technical data (IP address, device type, login identifiers, error logs) may also be collected for security, fraud prevention, and service improvement purposes.
Data is used to:
Data processing is based primarily on the free, specific, and informed consent of the user, collected upon registration and upon acceptance of this policy. This consent may be withdrawn at any time via account settings or by writing to contact@xvar.ma, without retroactive effect on the lawfulness of processing already carried out.
Personal data is stored on secure servers. XVAR implements technical measures (encryption, backups, access control, logging) and organizational measures (internal procedures, confidentiality clauses, staff awareness) designed to ensure the confidentiality, integrity, and availability of data. In the event of hosting or transfer of data abroad, XVAR complies with the requirements of Law 09-08 and, where applicable, with the formalities required before the CNDP.
Data may be shared only:
Apart from these cases, data is neither assigned, rented, nor sold to third parties, except where required by law or by a request from a competent authority.
Information relating to minors is processed with particular care and, where required, with the authorization of the holder of parental authority. Minors’ profiles are visible only to verified users (clubs, recruiters, supervisors), and certain interaction features may be restricted. Parents or legal guardians may at any time exercise rights of access, rectification, and deletion of the minor’s data.
Videos and images published via XVAR are protected by image rights and the right to privacy. By posting content and accepting this policy, the user authorizes XVAR to republish or share it on its official channels (website, social networks, application) for non-exclusive purposes of promotion, communication, and showcasing the platform and talent. Any person may request the removal of content concerning them by writing to contact@xvar.ma; XVAR will examine the request and, upon acceptance or legal obligation, will remove the content within a reasonable time, without prejudice to uses already made within the initially accepted purpose.
Personal data is retained for the entire duration of account use. It is then deleted or anonymized no later than 12 months after account closure, unless a legal obligation requires a longer retention period (notably for evidence, security, or dispute management). Certain technical data and security logs may be retained for an additional limited period strictly necessary for these purposes.
In accordance with Law 09-08, every user has a right of access, rectification, deletion, objection and, where applicable, portability of their data. These rights may be exercised by writing to contact@xvar.ma or directly via the features provided in the application. Proof of identity may be requested in order to protect the confidentiality of the data.
Where required by law, the processing carried out by XVAR is subject to the necessary declarations or authorization requests before the CNDP, notably in the event of transfer of data abroad or processing relating to minors or sensitive data. XVAR reserves the right to amend this privacy policy to take into account legal, regulatory, or technical developments; any significant update will be announced in the application and may, where applicable, require renewed acceptance by the user.
