Privacy Policy

1. Introduction

Hotel Kasbah Azalay respects the privacy of its website visitors, guests, customers, and people who contact the hotel.

This Privacy Policy explains how personal information may be collected, used, stored, and protected when visitors use the website, contact the hotel, or request a reservation.

Personal-data processing in Morocco is governed by Law No. 09-08. The CNDP is responsible for supervising compliance, receiving declarations and authorisation requests, and handling matters involving international data transfers.

2. Data controller

The organisation responsible for personal-data processing through this website is:

Hotel Kasbah Azalay
M’Hamid El Ghezlane
45400 Zagora
Marruecos

Teléfono: +212 5248-48096
Correo electrónico: info@azalay.com

3. Information that may be collected

Depending on how the website is used, Hotel Kasbah Azalay may collect the following information.

Contact information

First name
Last name
Email address
Telephone number
Country
Preferred language

Booking information

Arrival date
Departure date
Número de invitados
Number of children
Requested room category
Requested meal plan
Requested activities
Special requests
Referencia de reserva

Communication information

Contact-form messages
Emails
Enquiries
Complaints
Feedback
Requests for assistance

Technical information

When visitors use the website, technical data may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Pages visited
Access date and time
Referring page
Cookie identifiers

Special requests

Guests may voluntarily provide information about:

Accessibility requirements
Dietary preferences
Allergies
Mobility requirements
Other accommodation needs

Such information should only be provided when necessary for the requested service.

4. Purposes of processing

Personal information may be used to:

Respond to questions
Consultar disponibilidad
Process booking requests
Confirm reservations
Prepare guest stays
Organise rooms and meal plans
Arrange activities and excursions
Provide spa, restaurant, transfer, or hotel services
Communicate booking information
Process payments through authorised providers
Issue invoices
Handle cancellations or modifications
Respond to complaints
Improve website security
Prevent fraud or misuse
Meet accounting, administrative, and legal obligations
Send offers or news where the recipient has consented

5. Legal grounds for processing

Personal data may be processed because:

It is necessary to respond to a visitor’s request
It is necessary to manage a reservation or service
It is required by law
Hotel Kasbah Azalay has a legitimate interest in security, administration, or customer service
The visitor has provided consent

6. Required information

Some information is necessary to process a booking, respond to an enquiry, or provide a requested service.

When necessary information is not provided, Hotel Kasbah Azalay may be unable to:

Respond to the request
Confirm availability
Process the reservation
Deliver the requested service

7. Recipients of personal data

Personal data may be accessed by authorised Hotel Kasbah Azalay personnel who require it to perform their duties.

Where necessary, limited information may also be shared with service providers involved in:

Website hosting
Technical maintenance
Reservation management
Payment processing
Email delivery
Accounting
Airport transfers
Activities and excursions
Alquiler de vehículos
Guide services
Legal compliance

Only information necessary for the relevant service should be shared.

8. Third-party booking and payment platforms

When a visitor completes a booking or payment through an external platform, that platform may process personal information under its own terms and privacy policy.

Hotel Kasbah Azalay is not responsible for the privacy practices of independent third-party platforms.

Visitors should review the applicable policy before submitting information.

9. International data transfers

Some technical, booking, email, payment, analytics, or hosting providers may process information outside Morocco.

Where personal data is transferred abroad, the transfer must be handled in accordance with the requirements of Moroccan Law No. 09-08 and applicable CNDP procedures. The CNDP provides specific procedures for notifying requests involving international transfers.

10. Data retention

Personal information is kept only for as long as reasonably necessary to:

Respond to requests
Manage reservations
Provide hotel services
Handle complaints
Maintain accounting records
Meet tax and legal obligations
Protect the hotel’s legitimate interests

Information that is no longer required should be deleted, anonymised, or securely archived.

11. Data security

Hotel Kasbah Azalay applies reasonable organisational and technical measures intended to protect personal data against:

Unauthorised access
Loss
Alteration
Disclosure
Destruction
Fraudulent use

Access to guest information is limited to authorised persons.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Cookies

The website may use cookies and similar technologies.

Cookies may be used for:

Essential website functions
Seguridad
Language preferences
Booking functionality
Audience measurement
Embedded maps
Vídeos
Social-media features
Remembering visitor preferences

Visitors can control or delete cookies through their browser settings.

Rejecting some cookies may affect website functionality.

Where consent is legally required, non-essential cookies should not be activated until the visitor has made a choice.

13. Marketing communications

Hotel Kasbah Azalay may send news or promotional communications where the recipient has agreed to receive them.

Recipients may withdraw their consent at any time by:

Using the unsubscribe option included in the message
Contacting info@azalay.com

Withdrawal from marketing communications does not prevent the hotel from sending messages necessary to manage an existing reservation.

14. Rights relating to personal data

Subject to applicable Moroccan law, individuals may request:

Access to their personal data
Correction of inaccurate information
Objection to certain processing
Withdrawal of consent where processing is based on consent
Information about how their data is used

Requests may be sent to:

Correo electrónico: info@azalay.com

The hotel may request proof of identity before processing a request.

Individuals may also contact the CNDP if they believe their personal-data rights have not been respected. The CNDP publishes procedures for citizens, organisations, declarations, authorisations, and international transfers.

15. Children

The website is not intended to collect personal information directly from children without the involvement of a parent or legal guardian.

Reservations involving children must be submitted by an adult responsible for the booking.

16. External websites

This Privacy Policy applies only to the Hotel Kasbah Azalay website.

External services, including booking platforms, payment systems, maps, social networks, and review websites, apply their own privacy policies.

17. Changes to this policy

Hotel Kasbah Azalay may update this Privacy Policy to reflect changes in:

Legal requirements
Website functions
Booking systems
Service providers
Internal practices

The version published on the website is the current version.

18. Contact

For questions about privacy or personal data: