Customer personal data protection policy

Groupe Semari’s commitment and the scope of application of this chapter

Because we consider you a (future) brand customer, our priority is to ensure your complete satisfaction and your trust, which are essential to us.

That’s why, as part of our commitment to meeting your expectations, we have set up a policy to protect your personal data which meets the most demanding legal standards in this area.

This charter formalizes our commitments towards you and describes the modalities in which GROUPE SEMARIS LIMITED (the Group) and notably DOMAINE PALM MARRAKECH S.A (DPM) are using your personal data when using this website: www.royalpalmmarrakech.com

In this charter, the Groupe Semaris means the company Semaris Limited, the parent company of the Group, having its registered office at Beachcomber House, Botanical Garden Street- Curepipe in Ile Maurice.

What principles govern our collection of data?

In accordance with applicable regulations, in particular the Law n°09-08 adopted in Morocco and General Data Protection Regulation adopted in Europe, we have instituted the following principles for the treatment of your data within the Group:

1. Lawfulness: We use personal data only if:
   • we obtain the consent of the person, OR
   • it is necessary to do so for the performance of a contract to which the person is a party, OR
   • it is necessary for compliance with a legal obligation, OR
   • it is necessary to protect the vital interests of the person, OR
   • we have a legitimate interest in using personal data and our usage does not infringe on the freedoms and interests of the individual.
2. Reliability: we explain to you by publishing this charter how we use the personal data we collect.
3. Purpose limitation: We only use personal data that we really need.
4. Transparency: We inform the people involved about the way we use their personal data.
5. We facilitate the exercise of the people’s rights: information, access to their data and rectification of data processing.
6. Storage limitation: We only retain personal data for a limited period in compliance with every applicable regulation (for example, retention of accounting data).
7. We ensure the security of personal data, i.e., its integrity and confidentiality.
8. If a third party must use personal data, we ensure that the third party is able to protect the personal data.
9. If personal data is to be transferred outside of the countries where it is collected, we ensure that such transfer is subject to appropriate legal safeguards.

For any question on this subject, please contact DPO whose contact information can be found in the section below entitled WHAT ARE YOUR RIGHTS?

When we collect it and what data we collect about you?

Personal data can be collected on different occasions, especially when you fill in a contact or when you directly send us an e-mail. We also collect information when you voluntarily contribute to our blog, provide comments, and participate in contests, surveys, quizzes, or promotional campaigns.

The information we collect about you may include:

• Contact details (for example, last name, first name, telephone number, email);
• Personal information (for example, gender, date of birth, nationality);
• Information about your spouses and children (for example, first name, date of birth, age);
• Your bank account details (for transaction and reservation purposes)
• Information contained on a form of identification (such as ID card, passport);
• Your center of interests ;
• Technical and location data you generate as a result of using our websites (IP address, cookies, according to our Tracking Policy);

The information collected in relation to persons under 18 years of age is limited to their name, nationality, and date of birth, which can only be supplied to us by their legal guardian.

Why is your personal data used?

We collect information about you in order to best respond to your requests, in particular in order to:

• Fulfill our obligations to our customers., for example, if you fill a « callback request » form, we use the information provided to contact you directly;
• Personalize your visit and improve the quality of service and customer experience (we can directly communicate with you to follow up on the services we provide);
• Process your personal data in our customer marketing program, in order to carry out marketing occasions, brand promotions and have better understanding of your need and wishes (therefore to send you e-mails about other products, services and information that we think you may be interested in and if you agree);
• Adapt our products and services in order to best respond to your requests;
• Personalize commercial offers and relational messages to you (we use the information that you provide us to personalize your repeated visits to our website for example)
• Inform you about the special offers and any new service created by the Group or one of its subsidiaries or partners (we can use your contact information to advertise our services on third party-websites like Facebook and LinkedIn).

We take precautionary measures to make sure that we don’t collect any personal data about you that we do not need to provide and monitor the above services.

How long do we keep your data?

We keep you personal data as long as necessary to carry out the purpose for which they are collected. We can keep your personal data :

• As long as necessary to comply with any legal requirements (accounting, commercial, tax…) ;
• In our backup and disaster recovery system, in accordance with our backup and disaster recovery policies and procedures.
• As long as necessary to protect our legal interests or to exercise our legal rights and remedies; and
• For the data that has been aggregated or anonymized in such way that you are no longer identifiable, indefinitely for statistical study purposes.

Marketing and canvassing

We would like to send you updates and information about our products and services that may be of interest to you. If you have consented to receive promotional offers, you may withdraw your consent at anytime later.

You have the right at anytime to prevent us from contacting you by email, phone, or by SMS for marketing purposes. If you no longer wish to be contacted for marketing purposes, you may object at any time by contacting us at the contact details mentioned in the section WHAT ARE YOUR RIGHTS?.

Under what conditions do third parties have access to your data?

In the first place, we share your data with a limited number of authorized persons and services within the Group, in order to give you the best possible quality of service.

The following teams can access to your data:

• Commercial service ;
• IT Services ;
• Business partners and marketing services.
• More generally, any appropriate person in the Group for specific categories of personal data.

Secondly, we can share your personal information with service providers and partners; your personal information may be transferred to a third party for the purpose of providing you with tailored services, including:

• External service providers : IT subcontractors, notaries, banks, external lawyers, routers, printers.
• Business partners: the Group may, unless you object under the conditions described in the section WHAT ARE YOUR RIGHTS? enrich your profile by sharing certain information about you with its privileged commercial partners. This processing will allow the Group and its privileged contractual partners to determine your centers of interest, your customer profile and allow us to send you personalized offers.

To pursue this legitimate interest while preserving your rights and freedoms, the obligations and responsibilities of the Group and these third parties have been detailed in a specific subcontracting agreement.

Finally, we may also transmit your information to local authorities, if required by law or in the context of an investigation and in accordance with local regulations.

Protection of your personal data during international transfers

For the purposes described in this Policy, we may transfer your personal data to internal or external recipients who may be located in countries with different levels of personal data protection.

Therefore, in addition to the implementation of this Policy, the Group and DPM implement appropriate measures to secure the transfer of your personal data to a Group entity or an external recipient located in a country offering a different level of protection than that offered in the country in which the personal data is collected.

What are your rights?

You have the right to obtain information and access to your personal data collected by the Group subject to applicable legal provisions.

We want to ensure that your personal information is accurate and up-to-date. You have the right to have your data rectified and to object to the processing of your data.

If you wish to exercise these rights, contact the department in charge of personal data directly to DPM by e-mail to the following address dpo@royalpalmmarrakech.com or by writing to the following address:
Domaine Palm Marrakech S.A.,
BP2470, KM12 Amizmiz Road
MARRAKECH, MOROCCO

All requests will be processed in a timely manner and in accordance with applicable law.

Cookies – Tracers

Cookies are text files placed on your computer to collect standard information about website usage and visitor behavior. This information is used to track visitors’ use of the website and to compile statistical reports on website activity. You can set your browser not to accept cookies. However, in some cases, certain features of our website may not work. For more information please see our Cookies Policy.

Data security

The Group takes appropriate technical and organizational measures, in accordance with applicable legal provisions, to protect your personal data against destruction, loss or alteration, misuse, disclosure and unauthorized access, modification or disclosure, whether such actions are unlawful or accidental.

To this end, we have implemented technical measures (such as firewalls) and organizational measures (such as a login/password system, physical safeguards, etc.) to ensure the continued confidentiality, integrity, availability and resilience of the processing systems and services.

The security and safety of your information also depends on you. We recommend that you do not share your password with anyone and encourage you to be careful not to give out unnecessary personal information in public areas of websites, such as blogs.

Other websites

Our website contains links to other websites. This privacy policy applies only to this website, so when you link to other websites, you should read their own privacy policies.

Update of our data protection charter

Our policy is reviewed on a regular basis and we post any updates on this web page. The date of the last revision of this policy is indicated at the top of the page.

We may make changes to this charter at any time, and we encourage you to review it regularly to ensure that you are aware of them. If we make any material changes in the way we treat our users’ personal information, we will notify you by email to the email address listed in your account. Please make sure that we have an active and up-to-date email address for you.

How to contact us?

You can contact us if you have any questions about our policy or about the information, we hold about you at the following addresses:

Email: dpo@royalpalmmarrakech.com

Adress:
Domaine Palm Marrakech S.A.,
BP2470, KM12 Amizmiz Road
MARRAKECH, MOROCCO