Privacy Policy

Preamble

This Privacy Policy informs users of the website themarrakechcurator.com (hereafter "the Site") about how their personal data is collected and processed, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (hereafter "GDPR") and the French Data Protection Act of 6 January 1978, as amended.

1. Data Controller

The data controller is:

• AD Collection (SAS with a share capital of 2,000 euros)
• Brand: The Marrakech Curator
• Registered office: 8 bis rue Abel, 75012 Paris
• Paris Trade Register 934 173 105
• Contact: contact@themarrakechcurator.com
• Phone: +33 6 25 06 27 18

2. Data Collected

We collect the following categories of data:

2.1 Data provided directly by the user:

• Contact form: first name, last name, email, phone, message, intended dates and number of travellers;
• Booking process: postal address, billing information, ID (only if required by the owner);
• Newsletter sign-up: email address.

2.2 Data collected automatically:

• Browsing data (IP address, browser type, operating system, pages visited, duration of visit, referral source);
• Cookies and trackers (see Article 7).

3. Purposes and Legal Bases of Processing

Your data is processed for the following purposes:

• Responding to enquiries and issuing quotations — legal basis: pre-contractual measures (Art. 6-1-b GDPR);
• Managing your booking and client relationship — legal basis: performance of the contract (Art. 6-1-b GDPR);
• Complying with accounting and tax obligations — legal basis: legal obligation (Art. 6-1-c GDPR);
• Sending our newsletter and commercial offers — legal basis: consent (Art. 6-1-a GDPR), withdrawable at any time;
• Measuring site audience and improving its functioning — legal basis: consent (for non-essential tools) or legitimate interest (for strictly necessary tools);
• Preventing and combating fraud — legal basis: legitimate interest (Art. 6-1-f GDPR).

4. Recipients of Data

Your data is intended solely for authorised personnel of AD Collection. It may be shared with third parties strictly necessary for service delivery:

• Villa owners and local providers (chefs, drivers, etc.) for the execution of your stay;
• Technical providers: hosting (Webflow, Inc.), messaging tool, billing tool, email marketing tool, cookie management tool (Cookiebot);
• Administrative or judicial authorities upon legal request.

No data is sold to third parties for commercial purposes.

5. Transfers Outside the European Union

Some of our providers (Webflow, Google, Meta) are located in the United States. Transfers are governed by:

• The EU-US Data Privacy Framework (adopted in 2023) for certified companies;
• The European Commission's Standard Contractual Clauses where applicable.

As villa owners and local providers are located in Morocco, your booking data may be transferred there for the execution of your stay, with your consent and limited to what is strictly necessary.

6. Data Retention

• Prospect data (contact form without booking): 3 years from the last contact;
• Client data: duration of the contractual relationship, then 3 years for commercial purposes;
• Accounting records and invoices: 10 years (tax obligation);
• Newsletter subscription: until consent is withdrawn or after 3 years of inactivity;
• Cookies: maximum duration of 13 months, then renewed consent request.

7. Cookies

The Site uses cookies to ensure proper functioning, measure audience, and, with your consent, display personalised content.

Categories of cookies used:

• Strictly necessary cookies: essential for site operation, exempt from consent;
• Audience measurement cookies: Google Analytics (subject to consent);
• Marketing cookies: Meta Pixel, Google Ads (subject to consent).

On your first visit, a banner powered by Cookiebot allows you to accept, refuse or customise cookies by category. You can change your preferences at any time by clicking the "Manage cookies" link at the bottom of the page.

8. Data Security

AD Collection implements appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure or alteration: encrypted communications (HTTPS), restricted access to authorised persons, strong passwords, regular backups.

9. Your Rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Right of access to your data;
• Right to rectification of inaccurate data;
• Right to erasure (right to be forgotten);
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing (notably to prospecting);
• Right to withdraw consent at any time;
• Right to provide instructions regarding the fate of your data after your death.

To exercise these rights, send us an email at contact@themarrakechcurator.com specifying your request and attaching a copy of an ID if necessary. We will respond within a maximum of one month.

You also have the right to lodge a complaint with the French Data Protection Authority (CNIL): www.cnil.fr — 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.

10. Policy Amendments

This policy may be amended at any time to reflect legal developments or Site practices. The date of the last update appears at the top of this document. We encourage you to review it regularly.

11. Contact

For any questions regarding the protection of your personal data:

• Email: contact@themarrakechcurator.com
• Post: AD Collection — 8 bis rue Abel, 75012 Paris