We protect your privacy and your private data. Our processing of our users’ personal data is limited to the data required to provide a functional website and our content and services.
According to Article 13 of the Swiss Federal Constitution and the data protection provisions of the Swiss Confederation as amended on 1 September 2023 (revised Data Protection Act, hereinafter referred to as “DPA”), every person is entitled to protection of their privacy and protection against misuse of their personal data.
We collect, process and use your personal data in accordance with the content of this Privacy Policy and the applicable data protection regulations. The following data protection provisions regulate which personal data we collect, process and use about you. We therefore ask you to read the following information carefully.
1. Responsible body
NjoY Morocco
Hay Tissaliouine
80750 Tamraght, Agadir
Phone: +41 6 00 104 127
Email: info@njoymorocco.com
2. Description and scope of data processing
2.1 Personal data within the meaning of these data protection provisions is all information that relates to an identified or identifiable natural person (hereinafter “data subject”). This includes in particular your name, your e-mail address, your address and your telephone number as well as your credit card and account details.
2.2 Log files: Personal data also includes information about your use of our website. In this context, we collect the following personal data from you : the anonymised IP address of the user, the date and time of access including the time zone, the type of request, customer information such as type and version, the user’s operating system (device, OS version of the device), referrer information (i.e. the source of access ). This is done through the use of log files provided by the processor Infomaniak Network SA, located at Rue Eugène-Marziano 25, 1227 Acacias in Switzerland . There is a contract with the host . We store this data for the duration of 7 days . We only store the server log files for longer in the event of attacks on our server infrastructure or other legal violations.
3. Other intended uses
We use your personal data for the following purposes:
3.1 Customer service, order processing: We use your personal data for the purposes of communication, including responding to your enquiries or bookings by e-mail, telephone or contact form in the course of (pre)contractual relationships.
3.2 Booking via our website: On our website you have the option of booking an overnight stay and additional services. We collect the following data for this purpose, whereby optional details are labelled as such on the website: First name, surname, email address, telephone number. Optional: address, postcode, city, country, company name, VAT number if you are a company.
We use the personal details to establish your identity before concluding a contract. We need your e-mail address to confirm your booking and for future communication with you that is necessary to fulfil the contract. We store your data together with the peripheral data of the booking (e.g. flat, period of stay as well as name, price and features of the services), as well as the information on the processing and fulfilment of the contract (e.g. receipt and handling of complaints) in our channel manager database (see section 3.3), so that we can ensure correct booking processing and contract fulfilment.
Insofar as this is necessary for the fulfilment of the contract, we will also pass on the required information to any third-party service providers (e.g. event organisers or transport companies). The provision of data that is not labelled as mandatory is voluntary. We process this data in order to tailor our offer to your personal needs in the best possible way, to facilitate the processing of contracts, to contact you via an alternative communication channel if necessary in order to fulfil the contract or for statistical recording and evaluation to optimise our offers.
We use the Elloha Channel Manager from Elloha SAS, 2bis rue des Fabriques d’en Nabot àPerpignan, France, to process bookings via our website. Therefore, your data may be stored in an Elloha database, which may allow Elloha to access your data if this is necessary for the provision of the software and for support in the use of the software. Information on the processing of data by third parties and any transfer abroad can be found in section 8 of this privacy policy. Elloha may wish to use some of this data for its own purposes (e.g. to send marketing emails or for statistical analyses). Elloha is responsible for this data processing and must ensure compliance with data protection laws in connection with this data processing. Information about data processing by Elloha can be found here.
3.3 Booking via a booking platform: If you make bookings via a third-party platform (i.e. via www.booking.com, www.airbnb.com, www.tripadvisor.com), we receive various personal data from the respective platform operator in connection with the booking made. This is generally the data listed in section 3.2 of this privacy policy. In addition, we may receive enquiries about your booking. We will process this data by name in order to record your booking as requested and provide the booked services.
Finally, we may exchange personal data with the platform operators in connection with disputes or complaints in connection with a booking, insofar as this is necessary to protect our legitimate interests. This may also include data relating to the booking process on the platform or data relating to the booking or processing of services and the stay with us. We process this data to safeguard our legitimate claims and interests in the processing and maintenance of our contractual relationships with the following platform operators:
- com B.V., Herengracht 597 Amsterdam, 1017 CE Netherlands (Booking.com). Further information about data processing in connection with Booking.com can be found here
- Airbnb Ireland UC, 8 Hanover Quay, Dublin 2, D02 DP23, Ireland. Further information about data processing in connection with Airbnb can be found here
- Tripadvisor LLC, 400 1st Avenue, Needham, MA 02494, USA. Further information about data processing in connection with Tripadvisor can be found here
Your data is stored in the databases of the platform operators, which enables them to access your data. Information on the processing of data by third parties and any transfer abroad can be found in section 8 of this privacy policy.
To enable us to update and manage room availability and prices on the booking platforms efficiently and effectively, we use a software application (a so-called “Channel Manager”) from Elloha SAS, 2bis rue des Fabriques d’en Nabot àPerpignan, France (Elloha). Your data may be stored in an Elloha database, which may allow Elloha to access your data. Information on the processing of data by third parties and any transfer abroad can be found in section 8 of this privacy policy.
4. Principles of data processing
When processing data, we take into account the processing principles of lawfulness, proportionality, purpose limitation, transparency – in particular the fulfilment of information obligations – and data security.
5. Information about cookies
5.1 We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via the browser when you visit a website. This serves to recognise the website visitor. Cookies can also provide us with information about how you use our website so that we can continuously improve the design of the website.
Cookies themselves do not contain any personal data about users, they merely serve to uniquely identify what our customers find interesting and useful on our website.
Specifically, the following cookies are set with your consent:
| Cookie | Purpose | Storage duration | Provider |
| _ga | Cookie from Google for website analyses. Generates statistical data on how the visitor uses the website. | 1 year 1 month | Google Ireland Limited |
| _ga_* | Cookie from Google for website analyses. Generates statistical data on how the visitor uses the website. | 1 year 1 month | Google Ireland Limited |
| cookieyes-consent | CookieYes sets this cookie to remember users’ consent preferences so that their preferences are honoured on subsequent visits to this website. No personal information about visitors to the website is collected or stored. | 1 year | CookieYes |
| Elementor | The WordPress theme of the website uses this cookie. It enables the owner of the website to implement or change the content of the website in real time. | Never | Elementor |
| wpEmojiSettings Supports |
WordPress sets this cookie when a user interacts with emojis on a WordPress website. It helps to determine whether the user’s browser can display emojis correctly. | Session | WordPress |
| pll_language | Polylang sets this cookie to remember the language selected by the user when they return to the website and to retain the language information if it is not otherwise available. | 1 year | Polylong |
| ASP.NET_SessionId | This cookie is issued by Microsoft’s ASP.NET application and stores session data during a user’s visit to the website. | Session | Microsoft |
| BEResponsive | No description available. | 1 year | |
| SameSite | No description available. | Session |
5.2 Google Analytics
This website uses Google Analytics with your consent. This is a service provided by Google Ireland Limited (“Google”), a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC (USA) (“Google”).
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable the use of the website by the user to be analysed. The information obtained by the cookies about your usage behaviour of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision exists for the USA within the scope of the General Data Protection Regulation (GDPR), so that the data transfer can take place without further measures. You can view Google’s certification here. Within the scope of the Data Protection Act, data transfers to the USA are carried out on the basis of standard contractual clauses.
We have made the setting that your IP address will be anonymised. IP address anonymisation is carried out by Google, but within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.
The anonymised IP address transmitted by your browser as part of Google Analytics is linked to other data about you, such as your search history, personal accounts, usage data from other devices and all other data that Google has about you.
You can see the cookies that are set in connection with Google Analytics in the list above.
You can revoke your consent at any time by making the appropriate settings directly via the cookie consent banner . The user and event data will be deleted after 2 months. The “Reset user data on new activity” function is deactivated. This means that if you visit again before the retention period expires, your data will not be deleted.
5.3 Use of Google reCAPTCHA
This website uses the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland “Google”). The query serves the purpose of distinguishing whether the input is made by a human or by automated, machine processing. The query includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of this service. The IP address transmitted by your browser as part of reCAPTCHA will not be merged with other Google data. Your data may also be transmitted to the USA. An adequacy decision by the European Commission, the “Privacy Shield”, is in place for data transfers to the USA. Google participates in the “Privacy Shield” and has submitted to the requirements. By confirming the enquiry, you consent to the processing of your data. The processing is carried out on the basis of Art. 6 (1) lit. A GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can find more information about Google reCAPTCHA and the associated privacy policy at: https://policies.google.com/privacy?hl=en
5.4 Google Maps
We use Google Maps API (Application Programming Interface, Google Maps) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google), on our website to visually display geographical information (maps). This may also result in data being transferred to servers abroad, e.g. in the USA. The legal basis for processing the data for this purpose is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. It is possible to deactivate the Google Maps service and prevent the transfer of data to Google by deactivating Java Script in your browser. However, we would like to point out that you will not be able to use the map display in this case. You can find more information about the collection, processing and use of your data by Google and your rights in this regard in Google’s privacy policy at https://policies.google.com/privacy?hl=en, as well as in the additional terms of use for Google Maps and Google Earth at https://www.google.com/intl/en_en/help/terms_maps/.
6. Data processing for video surveillance
To protect our guests and employees as well as our property and to prevent and punish unlawful behaviour (in particular theft and damage to property), our forecourt/car park, the main entrance, the stairwell and the roof terrace of NjoY Morocco are monitored by cameras. The video surveillance is transmitted live to the screen of our caretaker in flat 1. The image data is only viewed retrospectively if there is suspicion of unlawful behaviour. Otherwise, the images are automatically deleted after 30 days.
7. Data security
All information that you transmit to us is generally stored on servers within Switzerland/European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we take technical and organisational measures to protect our website and other systems against loss, destruction, access, modification or dissemination of your data by unauthorised persons. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) [or TLS (Transport Layer Security)] coding system.
8. Social media accounts
We operate the following social media presences:
LinkedIn: https://www.linkedin.com/company/njoymorocco
Instagram: https://www.instagram.com/njoymorocco
Facebook: https://www.facebook.com/NjoYMorocco
Data processing by us:
a. Operation of the above-mentioned social media pages
The personal data entered on social media pages such as comments, videos, images, likes, public messages etc. are published by the respective social media platform. We reserve the right to delete content if necessary. We may share content on our site and contact you via the social media platform, e.g. via the messengers offered. The legal basis is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR or Art. 32 para. 1 revDSG, which is in the interest of public relations and communication.
b. Page Insights
The social media platforms provide anonymised statistics and insights that allow us to gain knowledge about the types of actions people take on our site (so-called “page insights”). These Page Insights are created on the basis of certain information about people who have visited our site.
The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR or Art. 32 para. 1 revDSG, which is based on obtaining information about the actions and visitors to the pages.
This processing of personal data is carried out by the social media platform and us as joint controllers. In the case of joint controllership, a separate agreement must be concluded.
LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
Instagram & Facebook: https://www.facebook.com/legal/controller_addendum
If you wish to object to certain data processing over which we have an influence, please use the contact details above.
Note: The provision of data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide personal data. The consequence of not providing this data is that you will not be able to communicate with us via our social media pages, interact with us or take part in the competition. To contact us, please use our e-mail address.
Data processing by the operator of the social media platform:
There is also the operator of the social media platforms themselves. From a data protection perspective, this is also regarded as another controller that carries out its own data processing. This means that the operator is also a separate controller. However, we only have limited influence on data processing by the operator. Where we can exert influence (e.g. through parameterisation), we work within the scope of our possibilities to ensure that the operator of the social media platform handles data in accordance with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data they process. The operator will inform you about the processing of personal data in its own data protection information:
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Instagram: https://help.instagram.com/155833707900388
Facebook: https://www.facebook.com/help/568137493302217
Note: The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately have little influence on the web tracking methods of the social media platform. For example, we cannot switch this off. Please be aware: It cannot be ruled out that the provider of the social media platform may use your profile and behavioural data, for example to evaluate habits, personal relationships, preferences, etc. We have no influence on the processing of your data by the provider of the social media platform.
Data transfer to third countries and recipients:
When using the platform, personal data is also processed on servers in third countries, such as the USA. There is no adequate level of data protection in the USA. Data is transferred on the basis of standard contractual clauses. In some countries (such as the USA), there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal.
9. No disclosure of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are authorised or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
10. Changes to this privacy policy
We reserve the right to amend this privacy policy at any time with effect for the future. A current version is always available on the website. Please visit the website regularly and inform yourself about the applicable data protection provisions.
11. Your rights
You have the right to request information about your personal data processed by us. In particular, you can request information about the personal data as such, the purpose of processing, the storage period or, if this is not possible, the criteria for determining this period, the origin of your data if it was not collected from you, the existence of an automated individual decision and, if applicable, the recipients or categories of recipients to whom personal data is disclosed.
You also have the right to withdraw your consent to the use of your personal data at any time.
You can assert your rights at any time by contacting us at the address provided.
If you are of the opinion that the processing of your personal data by us is contrary to the applicable data protection provisions, you have the option of lodging a complaint with the Federal Data Protection and Information Commissioner.
This data protection information is subject to the copyright of SCALELINE data protection.
Status 21/03/2024
