.png)
PRIVACY POLICY
Introduction
The explanations and information provided on this page are only general and high-level explanations and information on how to write your own document of a Privacy Policy. You should not rely on this article as legal advice or as recommendations regarding what you should actually do, because we cannot know in advance what are the specific privacy policies you wish to establish between your business and your customers and visitors. We recommend that you seek legal advice to help you understand and to assist you in the creation of your own Privacy Policy.
Data We Collect
-
Identity & Contact Data
-
Name, surname, email address, phone number, postal address (when you create an account or make a booking).
-
Billing information (billing address, payment method), only if you complete a reservation.
-
-
Technical & Usage Data
-
IP address, browser type and version, operating system, pages viewed, time spent on pages.
-
Cookies and similar tracking technologies (see Section 1.6).
-
-
Booking & Stay Data
-
Check-in and check-out dates, room type, number of guests, special requests (allergies, dietary preferences).
-
Recipients of Your Data
Internal Recipients
Our staff in the Reservations, Front Desk, Accounting, and Marketing departments.
Third-Party Recipients (only as needed)
Technical Service Providers (e.g., Wix as our hosting provider, payment gateway services, email-marketing platform).
Legal & Regulatory Authorities (e.g., tax authorities, CNDP) if required by law.
We do not sell or rent your personal data to any unaffiliated third parties for marketing purposes.
Cookies & Similar Technologies
Strictly Necessary Cookies
Enable the core functionality of the site (e.g., session management, booking form).
Analytical / Performance Cookies
Allow us to measure and analyze site usage (e.g., Google Analytics). Data is anonymized periodically.
Functional Cookies
Remember preferences (language choice, currency).
Advertising / Targeting Cookies
Used for remarketing campaigns and personalized ads, but only if you have given consent via our cookie banner.
You can manage or withdraw your cookie preferences at any time via the “Cookie Settings” link at the bottom of our site, or by adjusting your browser settings.
Data Retention Periods
Category of Data Retention Period
Booking & Billing Records 10 years (mandatory for accounting/compliance purposes)
Website Logs (IP, device info, pages viewed) 13 months (anonymized or deleted thereafter)
Marketing & Newsletter Data Until you withdraw consent
Analytical Cookies 13 months
After the retention period, personal data will be securely deleted or anonymized, unless we are legally required to keep it longer.
Your Data Subject Rights
Under Moroccan Law 09-08 and the GDPR (for EU data subjects), you have the right to:
Access – Obtain confirmation whether your personal data is being processed, and request a copy.
Rectification – Request correction of inaccurate or incomplete data.
Erasure (“Right to be Forgotten”) – Ask us to delete your data if it is no longer necessary for the purposes collected.
Restriction of Processing – Temporarily limit the processing of your data in certain circumstances.
Data Portability – Receive a copy of your data in a structured, commonly used, machine-readable format (when applicable).
Objection – Object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, contact our Data Protection Officer (DPO) at:
Email: privacy@kasbahdif.com
You may also lodge a complaint with the Moroccan data protection authority (CNDP) or, if applicable, the supervisory authority in your country of residence.
Data Security
We have implemented appropriate technical and organizational measures to safeguard your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:
TLS/HTTPS encryption for data in transit;
Regular backups and secure storage;
Access control policies: only authorized personnel can access personal data;
Staff training on data protection and confidentiality.
Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. We will post the revised version on kasbahdif.com, indicating the “Effective Date” at the top. We encourage you to review this page periodically.
Contact
Follow
Address
Road of Amizmiz Km 27 Tamesloht
Agafay Desert, Marrakesh - Morocco