Privacy policy
Last updated: [date of publication]
Visit Marhaba (visitmarhaba.com) is a free, independent guide for football fans visiting Morocco. This page explains what personal data we collect, why, and the rights you have. It is written to meet Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data and the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is TMC Solutions, [postal address], Morocco. Contact for anything about your data: [privacy contact email].
This processing has been declared to the Moroccan data protection authority (CNDP) under number [CNDP declaration number].
Representative in the European Union (Article 27 GDPR): [EU representative name and address, or remove after legal advice].
What we collect and why
Newsletter. Your email address, the language you choose and the cities you're interested in, so we can email you each city guide when it's published. We also record the date and time you gave your consent and the IP address it came from, to be able to prove that consent. Legal basis: your consent (Article 6(1)(a) GDPR). You confirm your subscription by clicking the link in our first email; if you don't, your address is deleted after 30 days.
"List your business" requests. The business name, type and city, the contact person's name, phone (WhatsApp) number and email, the website or Instagram account, the description and the photos you send, plus the date, time and IP address of your consent. We use them to review the request, contact you about it and, once approved, publish the listing on the city page (name, type, description, photos, website, Instagram and a WhatsApp contact link). Legal basis: steps taken at your request before an agreement (Article 6(1)(b)) and your consent for publication.
Technical data. Our server logs record IP addresses and requested pages to keep the site secure and working. They are kept for [14] days. Legal basis: our legitimate interest in running a secure site (Article 6(1)(f)).
Cookies
We only use cookies that are strictly necessary: a security token that protects our forms, and a session cookie for site administrators. We don't use advertising or analytics cookies, so we don't ask for cookie consent.
To protect our forms from spam we use Cloudflare Turnstile, which checks signals from your browser to tell people from bots. See Cloudflare's privacy policy for details.
Who receives your data
We don't sell or rent your data. It is processed only by the providers we need to run the site:
- Brevo (Sendinblue SAS, France) sends our emails.
- Cloudflare, Inc. provides DNS and the Turnstile spam check.
- [Hosting provider and server location] hosts the website and its database.
How long we keep it
- Newsletter: until you unsubscribe. Unconfirmed signups are deleted after 30 days.
- Listing requests: as long as the listing is published, then [12 months]. Rejected requests: [12 months].
- Backups are overwritten on a rolling basis within [5 weeks].
Your rights
You can ask to access, correct or delete your data, to object to its use, to receive it in a portable format, and to withdraw your consent at any time (every email has an unsubscribe link). Write to [privacy contact email]; we answer within one month.
You can also complain to the CNDP in Morocco (www.cndp.ma) or, if you live in the European Union, to the data protection authority of your country.
Changes
If we change this policy we'll update the date at the top. If a change affects how we use the data you've already given us, we'll tell subscribers by email.