Privacy Policy

In accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, promulgated by Dahir No. 1-09-15 of February 18, 2009, and under the supervision of the National Commission for the Protection of Personal Data (CNDP), DELLAROSA HOTEL & SUITES is committed to protecting the personal data of users of the website www.dellarosa-marrakech.com. This privacy policy outlines the methods of collection, processing, storage, and protection of your personal data.

1. Identity of the Data Controller

   The data controller responsible for processing personal data collected via the website www.dellarosa-marrakech.com is: Company Name: DELLAROSA HOTEL & SUITES Legal Form: Public Limited Company (Société Anonyme) Address: 5 Avenue Moulay El Hassan, Hivernage, 40 000 Marrakech, Morocco Email: info@dellarosa-marrakech.com Phone: +212 524 42 22 27

2. Data Collected

   We collect the following personal data, in accordance with the purposes described below: – First and last name – Email address – Phone number – Postal address (if applicable) – Booking information (dates, preferences, etc.) – Browsing data (IP address, browser type, pages visited, etc.) via cookies or similar technologies This data is collected when you: – Make a booking or request information via the website – Fill out a contact form – Browse the website (subject to your consent for cookies)

3. Purposes of Processing

   The collected data is used for the following purposes: – Management of bookings and service requests – Responding to information or support requests – Improving the user experience on the website – Statistical analysis of website traffic – Sending commercial or promotional communications (subject to your prior consent) Each processing activity is carried out in compliance with the principles of relevance, minimization, and purpose limitation, as per Law No. 09-08.

4. Legal Basis for Processing

   The processing of your personal data is based on the following legal grounds: – Your explicit consent (e.g., for the use of cookies or sending newsletters) – Performance of a contract or pre-contractual measures (e.g., to process a booking) – Compliance with a legal obligation (e.g., retention of data for accounting purposes) – Legitimate interests of Dellarosa Marrakech (e.g., analyzing website traffic to improve performance)

5. Recipients of the Data

   The collected data is intended exclusively for: – Dellarosa Marrakech, as the data controller – Technical service providers necessary for the website’s operation (e.g., the hosting provider PlanetHoster, located at 4416 Louis-B.-Mayer, Laval, Quebec, Canada H7P 0G1) – Moroccan public authorities, in case of legal obligations No transfer of personal data to third parties is carried out without your prior consent, except as provided by law.

6. Data Transfer Abroad

   As part of the website hosting by PlanetHoster (Canada), some data may be transferred outside Morocco. These transfers are governed by contractual clauses compliant with CNDP requirements, ensuring an adequate level of protection for your personal data.

7. Data Retention Period

   Personal data is retained only for the duration necessary for the purposes for which it was collected: – Booking data: 5 years for accounting purposes – Contact data: until a deletion request or 3 years after the last contact – Browsing data: 13 months maximum (for cookies) After these periods, the data is either deleted or anonymized for statistical purposes.

8. Data Security

   Dellarosa Marrakech implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include: – Encryption of sensitive data – Use of secure protocols (HTTPS) – Restriction of data access to authorized personnel only The hosting provider PlanetHoster also applies security standards compliant with international best practices.

9. Your Rights

   In accordance with Law No. 09-08, you have the following rights over your personal data: – Right of access: consult the data concerning you – Right to rectification: request correction of inaccurate data – Right to erasure: request deletion of your data, subject to legal obligations – Right to object: object to the processing of your data for legitimate reasons – Right to data portability: receive your data in a structured format (if applicable) – Right to define post-mortem instructions: organize the fate of your data after your death To exercise these rights, please send your request to: Email: info@dellarosa-marrakech.com Address: 5 Avenue Moulay El Hassan, Hivernage, 40 000 Marrakech, Morocco A response will be provided within one month, in accordance with CNDP requirements.

10. Cookies

    The website www.dellarosa-marrakech.com uses cookies to: – Ensure the proper functioning of the website (technical cookies) – Analyze traffic (analytical cookies) – Offer personalized content (advertising cookies, subject to your consent) You can accept or refuse cookies via the consent banner displayed during your first visit. You can also manage cookies through your browser settings.

11. Complaints

    In case of a dispute regarding the processing of your personal data, you can file a complaint with the CNDP: National Commission for the Protection of Personal Data Address: Avenue Al Mouqaouama, Rabat, Morocco Website: www.cndp.ma Email: contact@cndp.ma

12. Policy Updates

    This privacy policy may be updated to reflect legal developments or changes to the services offered. Any changes will be published on the website www.dellarosa-marrakech.com, and users will be informed by any appropriate means.

13. Contact

    For any questions regarding this privacy policy, please contact us: Email: info@dellarosa-marrakech.com Address: 5 Avenue Moulay El Hassan, Hivernage, 40 000 Marrakech, Morocco Phone: +212 524 42 22 27