Privacy Policy

Privacy Policy - Riad Le Grizzly Marrakech

1. Data Collection

1.1 Data Collected

  • Identity: name, surname
  • Contact: address, email, phone
  • Travel: dates, preferences
  • Documents: passport/ID copy
  • Payment: bank details

1.2 Collection Moment

  • During reservation
  • Upon arrival at the Riad
  • During the stay
  • During communications

2. Data Usage

2.1 Purpose

  • Reservation management
  • Customer service
  • Legal obligations
  • Service improvement
  • Targeted communication
  • Contract execution
  • Moroccan legal obligations
  • Explicit consent
  • Legitimate interest

3. Data Retention

3.1 Duration

  • Reservation data: 3 years
  • Legal documents: 5 years
  • Bank data: 13 months
  • Marketing data: until unsubscribe

3.2 Security

  • Secure storage
  • Restricted access
  • Protection protocols
  • Staff training

4. Data Sharing

4.1 Recipients

  • Authorized personnel
  • Competent authorities
  • Service providers
  • Contractual partners

4.2 Transfers

  • Limited to necessity
  • Guaranteed protection
  • Prior information
  • Legal framework respected

5. Your Rights

5.1 Main Rights

  • Data access
  • Correction
  • Deletion
  • Objection
  • Portability
  • Processing limitation

5.2 Exercising Rights

  • Written request
  • Proof of identity
  • Response within 30 days
  • Free of charge

6. Cookies

6.1 Types Used

  • Essential technical
  • Functional
  • Analytics
  • Marketing (with consent)

6.2 Control

  • Customizable settings
  • Selective refusal
  • Changes anytime
  • Clear information

7. Contact

  • Email: [email]
  • Phone: [number]
  • Address: [address]
  • DPO: [DPO contact]

8. Updates

  • Regular review
  • Change notification
  • Current version online
  • History available

Last update: [Date]