Privacy Policy

1. Who is responsible for your data

This website is operated by STE ASILAH AL ALBA SARL, the company that runs Hotel Al Alba Hammam & Restaurant, in Asilah, Morocco.

• Company: STE ASILAH AL ALBA SARL
• Address: Lot. Nakhil 35, Asilah 90050, Morocco
• Tax identification: 4936528
• ICE: 001546911000051
• Email: info@hotelalalba.com
• Phone: +212 613 429190
• Website: https://hotelalalba.com

We are the data controller for the personal data described below.

We are established in Morocco and we comply with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data. Because we also offer our services to visitors located in the European Union, the EU General Data Protection Regulation (Regulation (EU) 2016/679) applies to that processing as well.

2. What this website does and does not do

This is an informational website, published in three languages: Spanish, English and French. It presents the hotel, its rooms, the hammam and the restaurant, and lets you reach our booking engine and get in touch with us. It has no user accounts, no comments, no forum, no file uploads and no newsletter.

This website has no booking form or contact form of its own: the data you provide when booking or writing to us goes directly to the providers described in section 3, not to a database of this website.

This website uses no Google Analytics, no tag manager, no Google tag, no advertising or ad networks, no tracking pixels, and no embedded social-media plugins or buttons. It also does not use your browser's localStorage or sessionStorage.

Anonymous statistics. We record visit statistics solely to analyse how the website is used and to improve our products and services. They are all strictly anonymous: they hold no personal information, we use no cookies and they do not identify any visitor. Recorded visits are kept for three years and then deleted.

Server logs. Our server keeps technical logs of visits (such as the network address) for fourteen days, solely for security and to keep the website running properly.

It does have an active script from The Hotels Network (THN), the company we have hired for the hotel's online positioning: it measures this website and receives information about visits. See sections 3 and 5 for details.

The typefaces you see are served from our own servers, not from Google Fonts or any other outside service. The map you see on the contact page is a link to Google Maps, not an embedded map: it takes you off our site, and nothing is loaded from Google while you browse. The links to Instagram and WhatsApp are also ordinary links.

3. What data we collect and when

When you check availability or book. The /reservas/ page embeds our PMS / booking engine, an outside provider, inside a frame that keeps our header and footer around it. The form where you enter your dates, contact details and, if applicable, payment details belongs to the booking engine: that data goes straight to it, not to our server. We have no access to it, nor to your card details. If the engine asks for your card details, it's to guarantee the booking: whether and when any charge is made is handled by the booking engine under its own terms, not by us.

Google ads. If you arrive from one of our ads, we use the Google Ads identifier to improve our campaigns.

When you write to us on WhatsApp. The floating WhatsApp button on this website puts you in touch with Vical, the virtual assistant that handles those conversations on our behalf. Messages you send through that channel are received and processed by Vical so it can reply to you.

When you contact us directly by email or phone. We process the data in your message solely to answer your enquiry.

Technical server logs. Those described in section 2: they include the IP address making the request and the time of the request, and our server keeps them for fourteen days so the site stays secure and available.

The Hotels Network (THN). The script from The Hotels Network, the company we have hired for the hotel's online positioning, measures this website and receives information about the visits made to it. It does not receive any of the personal data you provide to us directly through the channels above.

Anonymous statistics. Those described in section 2. They do not include your name, your email address or your phone number.

4. Why we use it, and on what legal basis

• Your message when you book, write or call us. We use it to manage your booking or answer your enquiry. The legal basis is the performance of a contract with you or the steps taken at your request before entering into it.
• Technical server logs. The legal basis is our legitimate interest in keeping this website secure and available.
• The Hotels Network (THN). The legal basis is our legitimate interest in measuring how the website performs and improving the hotel's online positioning.
• Anonymous statistics. We use them to understand which pages are visited and which ads bring us visitors, so that we can decide where to spend on advertising. The legal basis is our legitimate interest in knowing what our advertising spend achieves.

5. Who we share it with

There are four recipients.

Our hotel management system (PMS) and booking engine. The only thing sent when you book goes directly to our PMS / booking engine, which is run by a specialised company; we neither receive nor store that data. You can read its privacy policy from within the booking engine itself.

The Hotels Network (THN), the company we have hired for the hotel's online positioning. Its script, active on this website, receives information about the visits made to it.

Vical, the provider of the virtual assistant that handles the messages you send us through this website's WhatsApp button.

OVH SAS, based in Roubaix (France), the provider of the server this website runs on, located in the European Union. That server holds the visitor statistics and the technical logs described above. The visitor statistics run on that same server: they are not a third-party service.

The information that reaches the booking engine, to manage your booking, and The Hotels Network, for the hotel's online positioning, is processed by each of those providers under its own responsibility and in accordance with its own privacy policy, not ours. For any question about that processing, you can contact them directly.

We do not sell your data, rent it, or share it for advertising. There are no other recipients.

6. International transfers

Some of the providers involved may be based outside the country from which you visit us.

The data you enter into our PMS / booking engine or in your WhatsApp conversation with Vical does not pass through our server: it is governed by the terms and privacy policy of each provider.

Our server, with OVH, is in the European Union: what is stored on it does not leave the EU.

7. How long we keep it

We keep contact messages and the record of your bookings for as long as needed to assist you, and afterwards for the periods required by the legal, tax and accounting obligations that apply to us. Technical server logs are kept for fourteen days.

8. Your rights

You have the right to ask for access to your personal data, and for its rectification, its erasure, the restriction of its processing, or its portability. You may also object to processing. Where processing is based on your consent, you may withdraw it at any time, without affecting processing already carried out.

To exercise any of these rights, write to info@hotelalalba.com. We may ask you for proof of identity before acting on the request.

You also have the right to lodge a complaint with a supervisory authority. In the European Union, that is the data protection authority of the country where you live. In Morocco, it is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

9. Security

The whole site is served over an encrypted connection (HTTPS). When you book through the embedded engine, your data travels directly from your browser to our PMS / booking engine, without passing through our server. It is not stored in any database of the website itself.

10. Links to other websites

Our pages link to other sites, such as Google Maps, Instagram and WhatsApp. Once you follow one of those links, this policy no longer applies. We do not control them, and we suggest you read their own privacy policies.

11. Children

Our services are contracted by adults, and this website is not directed at children; we do not knowingly collect their data. When a booking includes minors, it is made by the adult responsible for them.

12. Changes to this policy

We may update this policy if the way we work changes or if a new legal requirement makes it necessary. The version published on this page is always the current one.

Last updated: 2 November 2026