Data Processing Agreement

1. Scope of Engagement

This Data Processing Agreement ("DPA") governs the relationship between Nardjes Laneche (operating as BeGlobal Algeria) and the Client. As a strategic consultancy firm, we act as a "Data Processor" regarding personal data processed on behalf of our clients through our technical infrastructure.

2. Technical Infrastructure & Sub-Processors

To maintain elite performance and secure mandate delivery, BeGlobal Algeria utilizes specialized third-party infrastructure. By entering into a mandate, the Client authorizes the use of the following sub-processors:

• Netlify, Inc.
  Provision of secure hosting and Client Portal Identity management. Data is processed to ensure session integrity and secure content delivery.
• Namecheap, Inc.
  Domain Name System (DNS) management and secure routing for the BeGlobal digital ecosystem.
• EdApp (SafetyCulture)
  Strategic course delivery and educational mandate hosting. EdApp processes student progress, authentication data, and intellectual property modules.

3. Processing Standards

Processing shall be limited to the following categories of data: Contact information, professional affiliations, educational progress within EdApp, and portal authentication logs. All processing is strictly limited to the duration of the Strategic Mandate.

4. Sovereign Security Measures

We implement rigorous technical and organizational measures to protect sensitive Algerian sovereign intelligence and client data, including:

• End-to-end encrypted session management via Netlify Identity.
• Strict access controls restricted to the lead consultant (Nardjes Laneche).
• Automated threat monitoring at the DNS and Application level.
• Immediate mandate-termination data purging protocols.

5. Compliance Framework

BeGlobal Algeria operates under the principle of "Global Standards, Local Sovereignty." We align our processing activities with the Algerian Data Protection Law (Law 18-07) and, where applicable to international clients, the General Data Protection Regulation (GDPR).