Law 18-07 Personal Data Protection Compliance

Way2In is fully committed to safeguarding the fundamental rights, privacy, and personal data of every attendee, organizer, speaker, and partner using our digital event infrastructure in Algeria and internationally.

In accordance with Algerian Law No. 18-07 of June 10, 2018 (Loi n° 18-07 du 25 Ramadhan 1439 correspondant au 10 juin 2018 relative à la protection des personnes physiques dans le traitement des données à caractère personnel), Way2In applies stringent organizational, technical, and cryptographic standards across all data collection, storage, and processing workflows.

1. Regulatory Framework & Governance

Our data processing architecture is strictly aligned with the principles set forth by the National Authority for the Protection of Personal Data (ANPDP):

• Legitimate & Transparent Processing: Data is processed fairly, lawfully, and strictly within the scope of event organization, ticketing, credentialing, and matchmaking.
• Purpose Limitation: Personal information collected during registration is utilized solely for stated event purposes and never repurposed without explicit prior authorization.
• Data Minimization: We collect only strictly necessary parameters required for authentication, badge generation, access validation, and transaction settlement.

2. Consent & Data Subject Safeguards

Every attendee and participant maintains complete sovereignty over their data:

• Explicit Prior Consent: Clear, unambiguous consent is gathered during attendee registration, ticketing acquisition, and profile setup.
• Granular Matchmaking Control: Participants choose whether their profile, contact details, or business cards are visible to exhibitors, sponsors, or other delegates.

3. Data Sovereignty, Storage & Cryptographic Security

All sensitive personal data, identification records, and transaction metadata are protected with industry-standard AES-256 encryption at rest and TLS 1.3 in transit. Way2In isolates personally identifiable information (PII) within dedicated secure zones with role-based access control and immutable audit logs.

4. Data Subject Rights Under Law 18-07

Under Articles 32 through 36 of Law No. 18-07, all individuals whose data is processed by Way2In hold the following enforceable rights:

• Right of Access: You may request confirmation and a full copy of the personal data held about you at any time.
• Right to Rectification: You may update, correct, or complete any inaccurate or obsolete personal details directly in your profile or via support.
• Right to Erasure (Right to Be Forgotten): You may request the irreversible deletion of your account and personal records, subject to statutory retention requirements.
• Right to Object: You may object at any time to the processing of your data for promotional communications or directory listings.

5. Cross-Border Transfers & Third-Party Disclosure

In strict compliance with Law 18-07, Way2In does not transfer personal data outside Algerian territory without prior formal authorization from the ANPDP or applicable legal exemptions ensuring adequate levels of protection.