1) Privacy Policy
The way we collect, use and protect your personal data, in compliance with Moroccan law 09-08 and the GDPR.
Last updated: 29/06/2026
The Keys Conciergerie places essential importance on the protection of your personal data and respect for your privacy. This policy informs you of how we collect, use, share and protect your data when you visit our site or contact our services. It is established in accordance with Moroccan law No. 09-08 relating to the protection of personal data, the recommendations of the CNDP, and the General Data Protection Regulation (GDPR, EU 2016/679) applicable to individuals located in the European Union.
Data Controller
The data controller of your information is:
- The Keys Conciergerie
- Legal form: S.A.R.L.AU (private limited company under private deed)
- Registered office: 55 bld Mohamed V Immeuble Jakar, 40 000 MARRAKECH
- RC: 183735 — ICE: 003983349000073 — IF: 195034
- Representative: Mathieu Verdol, in the capacity of manager
For any questions regarding the protection of your data, you can write to us at contact@thekeys-conciergerie.com
Personal data collected
2.1 Data you provide to us
When you fill out a contact form or a request for a quote:
- Title, first name and surname
- Email address and phone number
- Subject of your request and any information you choose to provide us
As a property owner :
- Full contact details
- Address and characteristics of the property
- Information necessary for the support and enhancement of the property
As a traveller :
- Contact details
- Dates and information related to the stay
- Requests for services and experiences (activities, excursions, services)
- Newsletter: email address, first name, communication preferences.
2.2 Data collected automatically
- IP address, browser type and version, operating system
- Pages viewed and duration of visit, source of origin
- Language and screen resolution
- Cookies and similar technologies (see the dedicated section)
2.3 Data from third-party sources
- Social networks, if you interact with our pages
- Booking platforms, in the context of organising a stay
- Audience measurement and digital communication tools
03 Purposes of processing and legal basis
Your data is only processed for specific, explicit and legitimate purposes:
| Purpose | Legal basis | Data concerned |
|---|---|---|
| Responding to your contact and quote requests | Pre-contractual measures | Contact details, content of the request |
| Ensure the support and enhancement of entrusted assets | Execution of a contract | Contact details, data related to the asset |
| Orchestrate the experience and services of travellers | Execution of a contract / pre-contractual measures | Contact details, service requests |
| Sending communications and the newsletter | Consent (with the option to unsubscribe) | Email address, first name, preferences |
| Improve the site and personalise your experience | Legitimate interest | Browsing data |
| Ensure the security of the site and prevent fraud | Legitimate interest / legal obligation | IP address, connection logs |
| Comply with our accounting and tax obligations | Legal obligation | Billing data |
| Comply with our other legal obligations | Legal obligation | According to the relevant obligation |
When processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before this withdrawal.
04 Recipients of the data
Your data is only shared to the extent strictly necessary:
Within The Keys Conciergerie
To authorised members of our team, as well as to administrative and accounting functions.
Service providers and subcontractors
- Hosting and technical infrastructure: Odoo Online: Odoo S.A., Belgium.
- Email and customer relationship tools (Hubspot)
- Audience measurement tools: Google Analytics
- Social media platforms: Meta, Instagram, LinkedIn
Booking platforms
To matchmaking platforms, when necessary for the organisation of a stay, in accordance with their own terms.
Authorities
Your data may be disclosed if required by law or in response to a legitimate request from a public authority. All our service providers are carefully selected and contractually obliged to maintain the confidentiality and security of your data. We do not sell or rent your data to third parties.
05 International transfers
Some of our service providers are based outside Morocco, particularly in the European Union, your data may be subject to an international transfer. These transfers are governed in accordance with law 09-08 and, where applicable, the GDPR: we ensure that appropriate safeguards (adequacy decision or standard contractual clauses) are in place before any transfer.
06 Retention period
Your data is only retained for the time necessary for the purposes pursued:
| Type of data | Retention period |
|---|---|
| Contact requests and prospects | 3 years from the last contact |
| Newsletter | Until unsubscribed, then 1 year for proof of consent |
| Owner data (active relationship) | Duration of the relationship, then applicable limitation periods |
| Traveller data | Duration necessary for the service, then limitation periods |
| Accounting and billing documents | 10 years (legal obligation) |
| Browsing data (cookies) | Maximum 13 months |
| Connection and security logs | 12 months |
At the end of these periods, your data is securely deleted or irreversibly anonymised.
07 Your rights
In accordance with law 09-08/GDPR, you have the following rights:
- Access : to obtain confirmation that your data is being processed and to access it.
- Rectification : to correct inaccurate or incomplete data.
- Erasure : to request the deletion of your data, subject to our legal retention obligations.
- Objection : to object to processing, particularly for marketing purposes.
- Restriction : to request the temporary suspension of processing in certain cases.
- Data portability : to receive your data in a structured, machine-readable format.
- Withdrawal of consent : at any time, for processing that relies on it.
- Post-mortem directives : to determine the fate of your data after your death.
How to exercise your rights
By email at contact@thekeys-conciergerie.com or by post to 55 bld Mohamed V Immeuble Jakar, 40 000 MARRAKECH. To verify your identity, a copy of an identity document may be requested. We commit to responding within a maximum period of 30 days.
08 Right to complain
If you believe that the processing of your data constitutes a violation of the regulations, you can file a complaint with the competent authority.
In Morocco — CNDP
National Commission for the Control of Personal Data Protection
Avenue Al Arz, Hay Riad, Rabat — Morocco - www.cndp.ma
In the European Union
You can contact the data protection authority in your country of residence.
09 Data security
We implement appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access.
Technical measures
- Encryption of exchanges via the HTTPS protocol (SSL/TLS)
- Hosting that meets high security standards
- Access control and authentication
- Regular and secure backups
- Pseudonymisation or anonymisation where possible
Organisational measures
- Raising awareness among team members about data protection
- Access limited to authorised personnel only
- Confidentiality commitments of our subcontractors
- Internal incident management procedures
In the event of a data breach
In the event of a breach likely to result in a high risk to your rights and freedoms, we undertake to notify the competent supervisory authority without delay and, where appropriate, to inform you directly, while taking the necessary measures to limit the consequences.
10 Cookies and similar technologies
The site uses cookies necessary for its operation and, subject to your consent, audience measurement and functionality cookies. On your first visit, a banner allows you to accept, refuse or customise your preferences, which can be changed at any time. For details of the cookies used and their duration, please see our link Cookie policy.
11 Changes
We reserve the right to modify this policy to reflect changes in our practices or to comply with regulatory changes. In the event of a substantial change, we will inform you by a notice visible on the site or, where appropriate, by email. The date of the last update is at the top of the page.
12 Contact
For any questions regarding this policy or the processing of your data, you can contact us by email at: contact@thekeys-conciergerie.com