Privacy Policy

Name: Hotel Al Alba Hammam & Restaurant
Address: Lot. Nakhil 35, Asilah, Tanger-Tétouan-Al Hoceïma, 90050, MA
Telephone: +212 613-429190

1. Who is responsible for your data

This website is operated by STE ASILAH AL ALBA SARL, the company that runs Hotel Al Alba Hammam & Restaurant, in Asilah, Morocco.

Company: STE ASILAH AL ALBA SARL
Address: Lot. Nakhil 35, Asilah 90050, Morocco
Tax identification: 4936528
ICE: 001546911000051
Email: info@hotelalalba.com
Phone: +212 613 429190
Website: https://hotelalalba.com

We are the data controller for the personal data described below.

We are established in Morocco and we comply with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data. Because we also offer our services to visitors located in the European Union, the EU General Data Protection Regulation (Regulation (EU) 2016/679) applies to that processing as well.

2. What this website does and does not do

This is an informational website, published in three languages: Spanish, English and French. It presents the hotel, its rooms, the hammam and the restaurant, and lets you reach our booking engine and get in touch with us. It has no user accounts, no comments, no forum, no file uploads and no newsletter.

This website has no booking form or contact form of its own: the data you provide when booking or writing to us goes directly to the providers described in section 3, not to a database of this website.

This website uses no analytics of its own: no Google Analytics, no tag manager, no visitor counter, no advertising or ad networks, no tracking pixels, and no embedded social-media plugins or buttons. It also does not use your browser's localStorage or sessionStorage.

It does have an active script from Tourism Holding Network (THN), an industry statistics service also used by other accommodations; see section 3 for details.

The typefaces you see are served from our own servers, not from Google Fonts or any other outside service. The map you see on the contact page is a link to Google Maps, not an embedded map: it takes you off our site, and nothing is loaded from Google while you browse. The links to Instagram and WhatsApp are also ordinary links.

3. What data we collect and when

When you check availability or book. The /reservas/ page embeds our PMS / booking engine, an outside provider, inside a frame that keeps our header and footer around it. The form where you enter your dates, contact details and, if applicable, payment details belongs to the booking engine: that data goes straight to it, not to our server. We have no access to it, nor to your card details. If the engine asks for your card details, it's to guarantee the booking: whether and when any charge is made is handled by the booking engine under its own terms, not by us.

When you write to us on WhatsApp. The floating WhatsApp button on this website puts you in touch with Vical, the virtual assistant that handles those conversations on our behalf. Messages you send through that channel are received and processed by Vical so it can reply to you.

When you contact us directly by email or phone. We process the data in your message solely to answer your enquiry.

Technical server logs. Our web hosting provider keeps standard server logs, which include the IP address making the request and the time of the request. They exist so the site stays secure and available.

Industry statistics (THN). The Tourism Holding Network script measures how this website performs against the rest of the tourism industry. It does not share with us any personal data you provide directly through the channels above.

4. Why we use it, and on what legal basis

Your message when you book, write or call us. We use it to manage your booking or answer your enquiry. The legal basis is the performance of a contract with you or the steps taken at your request before entering into it.
Technical server logs. The legal basis is our legitimate interest in keeping this website secure and available.
Industry statistics (THN). The legal basis is our legitimate interest in understanding how the website performs against the rest of the industry.

5. Who we share it with

There are two recipients.

Our hotel management system (PMS) and booking engine. The only thing sent when you book goes directly to our PMS / booking engine. That provider is the specialised company that runs it and is responsible for complying with all applicable regulations; we neither receive nor store that data and we are not responsible for how it is processed. You can read its privacy policy from within the booking engine itself.

Vical, the provider of the virtual assistant that handles the messages you send us through this website's WhatsApp button.

We do not sell your data, rent it, or share it for advertising. There are no other recipients.

6. International transfers

Some of the providers involved may be based outside the country from which you visit us.

The data you enter into our PMS / booking engine or in your WhatsApp conversation with Vical does not pass through our server: it is governed by the terms and privacy policy of each provider.

7. How long we keep it

We keep contact messages and the record of your bookings for as long as needed to assist you, and afterwards for the periods required by the legal, tax and accounting obligations that apply to us. Technical server logs are kept according to our hosting provider's policy.

8. Your rights

You have the right to ask for access to your personal data, and for its rectification, its erasure, the restriction of its processing, or its portability. You may also object to processing. Where processing is based on your consent, you may withdraw it at any time, without affecting processing already carried out.

To exercise any of these rights, write to info@hotelalalba.com. We may ask you for proof of identity before acting on the request.

You also have the right to lodge a complaint with a supervisory authority. In the European Union, that is the data protection authority of the country where you live. In Morocco, it is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

9. Security

The whole site is served over an encrypted connection (HTTPS). When you book through the embedded engine, your data travels directly from your browser to our PMS / booking engine, without passing through our server. It is not stored in any database of the website itself.

10. Links to other websites

Our pages link to other sites, such as Google Maps, Instagram and WhatsApp. Once you follow one of those links, this policy no longer applies. We do not control them, and we suggest you read their own privacy policies.

11. Children

Our services are contracted by adults, and this website is not directed at children; we do not knowingly collect their data. When a booking includes minors, it is made by the adult responsible for them.

12. Changes to this policy

We may update this policy if the way we work changes or if a new legal requirement makes it necessary. The version published on this page is always the current one.

Last updated: 15 September 2026