Privacy Notice
This notice explains how the MDM PASS pre-launch platform handles information submitted through registrations, business-network requests, general requests and administrative interactions.
1. Scope and current operator
MDM PASS is currently presented as a project within MDM GROUP for the purposes of this pre-launch platform, with MYCDIC providing the institutional framework described on the public site. Organisational and legal details may be updated before full launch, and the latest published notice will govern the platform at that time.
2. Information we may collect
Depending on the route you use, MDM may collect identity and contact details, country and city, relationship with Morocco, interests, business or organisation information, application details, messages, consent records, submission metadata, language, source page and internal request references. We do not ask users to send passwords, payment-card details or highly sensitive documents through general public forms.
3. Why the information is used
Information is used to manage the waitlist, understand audience demand, review businesses and projects, respond to requests, assess partnership or access interest, improve the platform, maintain security and audit records, and communicate relevant project updates where the user has agreed or where communication is necessary to answer a request.
4. Legal and operational basis
Where applicable, processing may rely on consent, steps taken at the user’s request, contractual or pre-contractual needs, legal obligations, and proportionate operational interests such as security, fraud prevention and service improvement. The exact basis depends on the request and applicable law.
5. Service providers and disclosures
Authorised MDM personnel may access information where needed. Technical providers may process data on MDM’s behalf, including hosting and configured Google Apps Script, Sheets, Drive or email workflows. Information may also be disclosed where required by law or necessary to protect the platform and users. MDM does not publish applicant data to the public Business Network simply because a form was submitted.
6. International processing
Infrastructure and service providers may operate in more than one country. Where applicable law requires safeguards for international transfers, MDM will use appropriate contractual, technical or organisational measures before relying on that transfer route.
7. Retention
Data is retained only for as long as reasonably needed for the purpose for which it was collected, ongoing review, security, audit, dispute handling or applicable legal requirements. Pre-launch records may be archived or deleted when no longer useful. Specific retention schedules can be refined as the operating structure matures.
8. Your choices and rights
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Requests can be submitted through the Data Requests page or the unified Ideas & Requests route. Identity verification may be required before action is taken.
9. Security
MDM uses layered technical and organisational measures, including protected administrative access and encrypted local storage in the current backend architecture. No online system can promise absolute security, and users should avoid sending unnecessary sensitive information through public forms.
10. Updates and contact
This notice may change as MDM moves from pre-launch to operational phases or as the legal structure changes. Material changes will be reflected by updating the public notice. Privacy and data questions can be submitted through the unified request route or the published MDM contact address.