PRIVACY POLICY
This website collects some personal information about its visitors.
Introduction
RIAD AMGHANAS, with registered office (hereinafter RIAD AMGHANAS), is constantly committed to protecting the online privacy of its users. This document has been drawn up in accordance with Article 13 of EU Regulation 2016/679 (hereinafter the “Regulation”) so that you may learn about our privacy policy, understand how your personal information is handled when you use our website (hereinafter the “Site”), and give your express consent to the processing of your personal data in an informed manner. All information and data provided by you or otherwise collected in connection with your use of information request, technical support, promotional and commercial newsletter services, or other actions — such as accessing the restricted area of the Site — will be processed in compliance with the provisions of the Regulation and the confidentiality obligations governing RIAD AMGHANAS’s activities. All activities carried out by RIAD AMGHANAS to process data relating to users of the website are guided by the principles of lawfulness, fairness, transparency, purpose limitation and storage limitation, data minimisation, accuracy, integrity and confidentiality, as required by the Regulation.
Definition of Personal Data
Under Article 4 GDPR, personal data means any information relating to an identified or identifiable natural person (the “data subject”). A natural person is identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification document number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity. All information collected while browsing the Site will be used for the purposes set out and described in this Document. While browsing the Site, RIAD AMGHANAS will process data collected as a result of the user’s browsing activities or use of the services provided by the Site. The information processed may be entered manually by the User, collected automatically or obtained through third parties. The User has the right at any time to correct their personal information or to prevent, withdraw and/or object to its processing.
Types of data processed
Contact details
Personal data that can identify the User, such as company name and VAT number, first and last name, tax code, address, email address, fax number, website and date of birth, telephone or mobile number for individuals, and information provided during registration, as well as unique IDs used by advertising services (e.g. Google Ads).
Data collected while browsing the Site
The IT systems used to ensure the proper operation of the Site collect certain Personal Data that is automatically processed when normal Internet protocols are used. Although browsing information is not collected in order to associate it with specifically identified data subjects, it could make users identifiable when combined with other data held by third parties.
List of browsing data
IP addresses or domain names of the computers used by users connecting to the Site; URI (Uniform Resource Identifier) addresses of requested resources; the time of the request; the method used to submit the request to the server; the numerical code indicating the status of the server response (successful operation, error, etc.); the size of the file received in response; and other operating-system parameters. These data are used solely to obtain anonymous statistical information about use of the Site, monitor its proper functioning and detect any anomalies and/or improper use. Data collected for these purposes are deleted immediately after processing. The data may also be used to establish liability in the event of computer crimes committed against the Site or third parties. Certain sections and features of the Site designed to collect the User’s Personal Data may require the disclosure of Personal Data falling within the categories referred to in Article 9 of the Regulation, namely “[...] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a person’s sex life or sexual orientation”. RIAD AMGHANAS asks its users not to publish such data unless strictly necessary. In any event, if the User publishes strictly personal information, even without specifically consenting to its processing, RIAD AMGHANAS shall be released from all liability and may not be subject to claims of any kind, since in that case the processing must be considered authorised as a result of the data subject’s free and informed choice to make the information manifestly public, pursuant to Article 9(1)(e) of the Regulation.
Data voluntarily provided by the user
If, when using certain Site features, the User provides RIAD AMGHANAS with Personal Data relating to third parties, the User assumes the role of Data Controller, with all the legal obligations and liabilities arising from that role. Consequently, the User shall hold RIAD AMGHANAS harmless from any liability in relation to any objections, claims, requests for compensation, etc. made by third parties whose Personal Data have been processed in breach of applicable personal data protection rules as a result of the User’s use of the features available on the Site.
Cookies
General background and definition
Cookies are files (metadata) stored on the devices users use to browse the Site. These files are sent by the Site and stored on the User’s computer or mobile device so that they can be sent back to the same Sites during a possible subsequent visit. Cookies therefore allow the Site to remember the user’s actions and preferences (such as login details, selected language, font size and other display settings) and eliminate the need for the User to re-enter information previously provided on each visit. Once installed on the User’s device, cookies perform the following activities: - computer authentication; - monitoring Site sessions; - storing information about the activities of users accessing the Site; - tracking the user’s browsing on the Site for statistical and/or advertising purposes. While browsing the Site, the User may receive cookies on their computer from sites other than the one being visited. These are referred to as “third-party” cookies. There are different types of cookies. Cookies can be processed to perform different functions and therefore have different characteristics depending on their purpose. For example, persistent cookies remain on the user’s device until a predetermined expiry date; session cookies are automatically deleted when the browser is closed; “profiling cookies” are used to build a User profile based on information collected while browsing, in order to send advertising messages consistent with their preferences. Temporary cookies are used only to provide safe and efficient browsing on the Site and to identify the User in order to ensure proper delivery of the service requested on this Site. For the website to function properly, the User is required to provide all requested personal information. This type of cookie requires the User’s prior consent. Current Italian law does not always require the user’s express consent for the Site owner to use cookies. “Technical cookies”, for example, do not require such consent because, as files essential to the proper operation of the Site, they are used solely to ensure delivery of a service expressly requested by the User. These are necessary cookies that must be installed on the User’s device to carry out certain operations. They are known as “technical cookies” necessary for the operation of the Site. Among the technical cookies used by this Site that do not require express consent, the Italian Data Protection Authority also includes: - browsing or session cookies needed to authenticate the User; - “analytics cookies” used directly by the site operator to collect aggregated information on the number of users and how they browse the site; - functionality cookies, which enable browsing according to predetermined criteria (e.g. language).
Types of cookies used by the Site
The Site uses the following cookies: - Technical browsing or session cookies, strictly necessary for the operation of the Site or to enable the User to access the requested content and services. Please note: if technical and/or functionality cookies are disabled, the Site may not operate properly and the User may have to change or manually enter certain information or preferences on each visit. - Functional cookies, used to enable specific Site features and selected settings (e.g. language) to improve the service provided. - Non-technical cookies, used to identify the User and track activities on the Site. Their purpose is to display relevant and interesting advertisements selected by third parties (e.g. publishers and advertisers) based on the User’s preferences. - Third-party cookies, meaning cookies from sites or web servers other than RIAD AMGHANAS, used for purposes specific to those third parties. These third parties, listed below with links to their privacy policies, are controllers of the data collected through the cookies they provide and are independently responsible for their activities. The User should therefore refer to the third parties’ personal data processing policies, notices and consent forms, as provided for by the Italian Authority’s Decision of 8 May 2014 on simplified arrangements for providing information and obtaining consent for the use of cookies and the Guidelines on the use of cookies and other tracking tools of 10 June 2021. For completeness, RIAD AMGHANAS makes every effort to track cookies on its Site.
Cookie updates
The cookie files used by RIAD AMGHANAS are regularly and continuously updated in the table below. For third parties that send cookies through our Site, we provide links to their respective privacy notices below. Third parties are responsible for providing the notice and obtaining the User’s consent, in accordance with the requirements of the Decision cited above, since RIAD AMGHANAS cannot carry out any checks on such cookies to ensure compliance with legal requirements. The links to information about third-party cookies are as follows: Google: https://policies.google.com/technologies/partner-sites Google Adwords: https://policies.google.com/technologies/cookies Facebook: https://www.facebook.com/policies/cookies/ Youtube: https://policies.google.com/technologies/cookies?hl=it Instagram: https://privacycenter.instagram.com/policies/cookies/ X: https://twitter.com/en/privacy LinkedIn: https://www.linkedin.com/legal/cookie-policy
Cookie settings
Cookies can be blocked, deleted (in whole or in part) or modified using the relevant features of the browser used by the User. This Document informs the User that refusing to allow technical cookies may cause the Site to malfunction. Restricting functionality cookies may mean that certain Site services and/or features are unavailable or do not work properly, and the User may have to change or manually enter certain information or preferences on each visit. Cookie preferences may need to be reset when accessing the Site using different devices or browsers.
Viewing and changing cookies
The User may allow, block or delete cookies (in whole or in part) using the relevant features of the browser used to browse. For more information on setting cookie preferences in the browser, consult the relevant instructions: Microsoft Edge: https://support.google.com/accounts/answer/61416?hl=it Firefox: https://support.mozilla.org/it/kb/protezione-antitracciamento-avanzata-firefox-desktop Chrome: https://support.google.com/accounts/answer/61416?hl=it Safari: https://support.apple.com/kb/PH19214?locale=it_IT For notices and to disable analytics and profiling cookies provided by third parties, visit https://www.youronlinechoices.com
Legal references
Data are processed in accordance with the lawfulness principle under Article 6 GDPR, which is fulfilled through the User’s consent authorising the controller and processor to carry out all activities necessary to achieve the purposes set out in this Document. Processing may also be necessary to perform a contract to which the customer is a party, to take steps at the customer’s request before entering into a contract, or for legitimate interests (see Article 6(1)(a), (b) and (f) GDPR). Data retained exclusively for purposes related to achieving the purposes requested by the User may also be processed by this Site when: - the Controller needs to use them for its own purposes and interests; - the Controller must comply with requests in the public interest, including requests from authorities; - the information collected and stored is needed to fulfil obligations under national or EU law; - it is necessary to fulfil contractual agreements for the provision of one or more services, including personalised services. For more information about the legal basis for processing and to ensure that the User’s consent is fully informed, the User may contact the Data Controller and the DPO for clarification.
Data Controller and Data Processor (“data controller”)
Under Article 4 GDPR, the Data Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. Where those purposes and means are determined by EU or Member State law, the controller or the specific criteria for its nomination may be laid down by EU or Member State law. The Data Controller for this Site is RIAD AMGHANAS. The “Data Processor” is defined by the Regulation as a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller. The Data Processor for this Site is riadbijoumarrakech@gmail.com.
Definition of processing
Under Article 4 GDPR, “processing” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
How Data are managed
The way RIAD AMGHANAS collects and stores information using IT and electronic tools is closely connected to how the owner of this Site uses that information.
Profiling
Under Article 4 GDPR, “profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. The User’s personal data may be profiled to identify their preferences. The processing is intended to enable the display of relevant and interesting advertisements selected by third parties (e.g. publishers and advertisers) based on the User’s preferences.
Location of Data processing
Data processing by this Site takes place at the Data Controller’s business premises. Processing is carried out by personnel authorised to process data. No information obtained through the web services provided by RIAD AMGHANAS is communicated or disseminated. All information provided by the User when requesting informational material is used solely to provide the requested service or performance and is disclosed to third parties only where strictly necessary; it may be transferred to another country (Article 3 GDPR). The User retains all rights and may request details about the tools used by the Site owner to secure the information provided. The User may also request details about transfers of their personal information to countries outside the EU and/or to non-governmental organisations that are not subject to specific legislation. The User may request further information about the use and transfer of their information by contacting the Data Controller and the DPO directly at: riadbijoumarrakech@gmail.com
Retention and retention period for personal data
The User’s personal data, collected in the manner and for the purposes described in this Document, are retained with due regard for security requirements and the principle of proportionality. The retention period is strictly linked to the purpose of the processing in progress. Information collected by this Site will not be processed for longer than is strictly necessary to fulfil the purposes for which it was collected and processed. Information collected by the Controller for the purposes stated in this Document will be retained until those purposes have been achieved. Once those purposes have been achieved, the information will be deleted and, consequently, the Controller will no longer be able to exercise any rights of access, erasure or portability in relation to it. Information collected to perform a contractual service will be retained until that service has been performed.
Purposes of processing
User data are processed to ensure the proper provision of services offered through this website. The Site features through which the User’s personal data may be collected and processed include: - commenting; - storing and displaying statistics; - accessing services provided by third parties on the Site or available through APIs; - chat service with an operator or other users; - direct contact with an operator or other users; - payment management; - contact requests and requests for various types of information; - hosting and other features needed to fulfil the purpose requested by the Visitor; - interaction with social networks and external platforms; - heat mapping and session recording; - interaction with live chat platforms; - advertising, targeting, profiling, content testing, access to information through devices, anti-spam; - use of third-party platforms to manage requests and support, registration and login, and information transfers. For further information about all purposes, the User may contact the Data Controller directly at: riadbijoumarrakech@gmail.com
Recipients of personal data
The User’s Personal Data may be shared, for the purposes stated in this Document, with: a. entities acting as Data Processors, namely: i) individuals, companies or professional firms providing assistance and consultancy to RIAD AMGHANAS; ii) entities with which interaction is necessary to provide the Services (e.g. hosting providers, tool suppliers); iii) entities delegated to perform technical maintenance (including maintenance of network equipment and electronic communications networks); b. entities or authorities to which personal data must be disclosed under legal provisions or orders of the authorities; c. persons authorised by RIAD AMGHANAS to process Personal Data as necessary for activities strictly related to providing the Services and bound by confidentiality obligations (e.g. RIAD AMGHANAS employees or employees of other companies with which RIAD AMGHANAS has business relationships); d. distributors and resellers of commercial and marketing initiatives through automated tools (SMS, MMS, email, push notifications) and non-automated tools (postal mail, telephone with an operator). Some of your Personal Data may also be disseminated by publication on the Site for the purposes stated in this Document.
Transfers of personal data
Some of the User’s Personal Data will be shared/transferred to Recipients who may be located outside the European Economic Area. RIAD AMGHANAS guarantees that these Recipients process your Personal Data in compliance with the Regulation.
Data subjects’ rights
Under Articles 15 et seq. of the Regulation, the User has the right at any time to ask RIAD AMGHANAS for access to their Personal Data, and to request their amendment or erasure, or to object to their processing. The User also has the right to request restriction of processing in the cases provided for in Article 18 of the Regulation and to obtain their data in the cases provided for in Article 20. Requests must be made in writing to RIAD AMGHANAS at the following address: Note: the User has the right to lodge a complaint with the competent Supervisory Authority. Under Articles 15 et seq. of the Regulation, the User has the right at any time to ask RIAD AMGHANAS for access to their Personal Data, and to request their amendment or erasure, or to object to their processing. The User also has the right to request restriction of processing in the cases provided for in Article 18 and to obtain their data in the cases provided for in Article 20. Requests must be made in writing to RIAD AMGHANAS at: riadbijoumarrakech@gmail.com. Note: the User has the right to lodge a complaint with the competent Supervisory Authority (Italian Data Protection Authority).
Changes
This Privacy Policy has been in force since 23 April 2024. RIAD AMGHANAS reserves the right to amend or simply update its content, in part or in full, including as a result of changes to applicable law. RIAD AMGHANAS will inform you of such changes as soon as they are introduced, and they will be binding as soon as they are published on the Site. RIAD AMGHANAS therefore invites you to visit this section regularly to read the latest and most up-to-date version of the Privacy Policy and stay informed about the data collected and how RIAD AMGHANAS uses it.
Access to third-party services
Third-party services may require information from your accounts to interact with them.
This website accesses directly or through APIs information that the visitor may have entered into services owned by Facebook, Inc.
Information collected: visitor ID, visitor name, profile picture, gender, language, the visitor’s friends and/or followers list, and generally all information the visitor may have entered in their profile and that may be covered by the privacy policy of Facebook, Inc. services.
Place of processing: United States of America – Privacy Policy.
This website accesses directly or through APIs information that the visitor may have entered into services owned by Twitter, Inc.
Comments
Users may post comments on the website using specific commenting services.
Users may also post comments on the website anonymously. Visitors are responsible for the content they publish in their comments.
Third-party commenting services may require the collection of information, including for statistical purposes.
Facebook Comments
This website allows visitors to post Facebook comments about a web page, a URL, a Facebook page or any content available through Facebook, Inc. services.
Information collected: visitor ID, visitor name, profile picture, gender, language, the visitor’s friends and/or followers list, and generally all information the visitor may have entered in their profile and that may be covered by the privacy policy of Facebook, Inc. services.
Place of processing: United States of America – Privacy Policy.
Contacting the visitor
Newsletter/Mailing list
By entering their email address when purchasing a product, registering on the site or subscribing to the site’s newsletter/mailing list, the website visitor authorises the website owner to send them informational and/or advertising messages.
Information collected: email address of the visitor who registers on the site or subscribes to the newsletter.
Telephone number
If users provide their telephone number, they may be contacted for the various purposes stated when the number is entered.
Contact form
The information provided by the visitor when completing the form and the information entered in the message body are used solely to respond to the visitor’s request.
Personal details such as first and last name, physical and email addresses, and other types of information needed to learn more about the request submitted.
Message delivery
Third-party services that manage contact information databases and are used to communicate with the visitor.
These services may collect contact information relating to deliveries, opens and other types of interaction.
Mailgun
Mailgun, Inc. is a third-party service that enables the management of mailing lists, sending and statistics for email newsletters and automated messages.
Information collected: first name, last name, email address and other information required to personalise communications.
Place of processing: United States of America – Privacy Policy.
Hosting
Hosting services collect information needed for the proper operation of the website and its features in order to provide the services requested by the visitor.
Hosting services use servers located in different places; therefore, the exact location where information is stored cannot be determined.
Google Cloud Storage
Google Cloud Storage is a cloud hosting platform managed by Google Ireland Ltd.
Information collected: the information collected is specified in Google’s privacy policy.
Place of processing: Ireland – Privacy Policy.
Live Chat
Third-party live chat services allow the visitor to contact a website operator with a request for information while they are on the website.
These services may collect contact information relating to messages sent.
Social networks
This feature allows Visitors to interact with major social networks on the website through the Visitor’s social profiles.
Information collected: user ID, username, profile picture, user gender, user language, the user’s friends and/or followers list, and generally all information the user may have entered in their profile.
Facebook “Like” button
The “Like” button is provided by Facebook, Inc. and allows users to like the Facebook page associated with this website.
Information collected: cookies and usage data.
Place of processing: United States of America – Privacy Policy.
The LinkedIn button is provided by LinkedIn Corporation.
Information collected: cookies and usage data.
Place of processing: United States of America – Privacy Policy.
YouTube
The YouTube button is provided by Google Ireland Limited.
Information collected: usage data.
Place of processing: Ireland – Privacy Policy.
Telegram
Telegram is a messaging app.
The information collected is specified in Telegram’s privacy policy.
Place of processing: See Telegram’s privacy policy – Privacy Policy.
Geolocation and location
Non-continuous geolocation
The website and certain third-party tracking services may share visitor location information to provide personalised services.
The website may access location information if the visitor has not disabled location tracking through their browser or devices.
Information collected: geographic location.
Anti-spam
These third-party services are intended to protect the website from spam activity.
Google reCAPTCHA
Google reCAPTCHA is an anti-spam protection service provided by Google Ireland Limited.
The reCAPTCHA system is subject to Google’s privacy policy and terms of use.
Information collected: cookies and usage data.
Place of processing: Ireland – Privacy Policy.
Registration and login
Registration and authentication services allow the visitor to have their own profile on the website.
Facebook Login (Facebook, Inc.)
Facebook Login is an authentication feature based on Facebook, Inc. login credentials.
Information used by this feature can be found in Facebook’s privacy policy.
Place of processing: United States of America – Privacy Policy.
Statistics
Statistics services allow the owner to monitor website performance and visitor behaviour.
Flazio Stats
Flazio provides a statistics service that analyses and displays personal information about visitors to websites.
Information collected: cookies and usage data.
Place of processing: Ireland – Privacy Policy / Opt Out.
Transfer of information from the EU and/or Switzerland to the United States under the Privacy Shield
Where this is the legal basis, the transfer of Personal Information from the EU or Switzerland to the United States takes place under the EU–US or Swiss–US Privacy Shield agreement.
In particular, Personal Information is transferred to entities that have self-certified under the Privacy Shield and therefore guarantee an adequate level of protection for the transferred information. Services involved in the transfer are listed in the relevant sections of this document. Among them, services participating in the Privacy Shield can be identified by consulting their privacy policy or checking their registration status on the official Privacy Shield list.
Visitors’ rights under the Privacy Shield are described in their most up-to-date form on the website of the United States Department of Commerce.
Content and graphic elements
These services allow certain third-party graphic or content elements to be displayed directly on the website.
The information collected is specified in the privacy policy of the third-party service responsible for the application hosted on this site.
Google Fonts
Google Fonts is a text font service managed by Google Ireland Limited.
Information collected: as specified in the privacy policy of the social network responsible for the application hosted on this site.
Place of processing: United States of America – Privacy Policy.
Google Maps component
Google Maps is a mapping service managed by Google Ireland Limited.
Information collected: cookies and usage data.
Place of processing: Ireland – Privacy Policy
TripAdvisor component
The TripAdvisor component is a service providing reviews and directions to places, managed by TripAdvisor LLC.
Information collected: cookies and usage data.
Place of processing: United States of America – Privacy Policy.
Instagram component
Instagram allows images and videos posted on Instagram, Inc. to be displayed.
Information collected: cookies and usage data.
Place of processing: United States of America – Privacy Policy.
YouTube component
YouTube is a video upload and display service managed by Google Ireland Limited.
Information collected: cookies and usage data.
Place of processing: Ireland – Privacy Policy.
Visitor profiling
Information provided by the visitor may be used by the Data Controller to create a visitor profile and monitor the visitor’s preferences and behaviour.
These operations may be carried out using automated tools that monitor the visitor’s activities in order to build a visitor profile.
To refuse profiling, the visitor may contact the Data Controller directly to exercise their rights.
Online sales
In online sales, including the purchase, shipping and delivery processes, the website owner may use the visitor’s personal information. The information provided by the visitor is used to personalise the purchasing process, electronic payments and shipping.
Visitor rights
Visitors have certain rights that they may exercise regarding the use of their information.
Visitors’ rights are as follows:
- Request to lodge a complaint about the use of information.
- Request the transfer of their information;
- Request restriction of the processing of their information;
- Withdraw consent;
- Request that the information provided be amended.
- Object to the processing of information;
- Request the erasure of information;
- Request access to their information;
Right to object
Visitors may object to processing relating to the use of information in the public interest or in the exercise of official authority vested in the owner.
Visitors may also object where information is processed for marketing purposes.
Exercising visitor rights
To exercise their rights, visitors may contact the Data Controller directly regarding the information managed on this website.
Sales information
E-commerce activities
In online sales, including the purchase, shipping and delivery processes, the website owner may use the visitor’s personal information.
To complete a purchase, website visitors must make a payment, which may be handled by third-party payment gateways. Examples of information needed for payment include, but are not limited to: credit card details, account number, expiry date, CVC and other information.
Further information about processing
Use of information in legal proceedings
If the Data Controller is sued, the visitor authorises it to use the visitor’s information and information about the visitor’s use of the services.
If the Data Controller receives a request from public institutions or authorities (Police, Carabinieri), it is authorised to forward all information requested by them.
Log files
To improve the services offered, troubleshoot problems and analyse how those services are used, this website may keep a sequential, chronological record of operations performed by a visitor or administrator, manually or automatically, as they occur. These records may be stored and accessed during information analysis, also known as event logging.
Rights of website visitors
Visitors have the right to erase, transfer, restrict and correct their Personal Information, and to obtain an understandable and intelligible copy of it. The website owner must have appropriate tools to fulfil these requests. All requests must be sent to the Data Controller and/or the DPO.
For any request concerning the processing of information, contact riadbijoumarrakech@gmail.com
Do Not Track
This website does not support “Do Not Track” requests. To find out whether any third-party services used support them, consult their privacy policies.
For any request concerning the processing of information, contact riadbijoumarrakech@gmail.com. riadbijoux.com write to us at riadbijoumarrakech@gmail.com riadbijoumarrakech@gmail.com.
Future updates to the Privacy Policy
The Data Controller may update this Privacy Policy at any time. Visitors can stay informed about changes by consulting this page, which has the same name and will remain publicly available for convenient access. At any time and/or following a change to this Privacy Policy, visitors may request the destruction and erasure of any personal information relating to them; this may result in some or all features offered to the visitor by this website no longer being available.
Definitions
Under Article 4(1)(8) GDPR, a Data Processor is “a natural or legal person, public authority, agency or other body which processes personal information on behalf of the Data Controller”.
Data Controller (website owner)
The Data Controller is “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data” (Article 4(1)(7) GDPR). In essence, the Controller processes information without receiving instructions from others and decides “why” and “how” the information is to be processed.
Website
A set of related web pages, or a hypertext structure of documents that may collect personal information about their visitors.
Cookie
A particular type of information (metadata) that may help identify the visitor and is used by server-side web applications to store and retrieve information over the long term on the client side.
Legal references
This Privacy Policy has been prepared in accordance with European Union Regulation 2016/679, Italian law and the general legal principles of the EU legal order and internationally prevailing commercial practices.
Contact
If you have any questions about this Privacy Policy, please contact us at riadbijoumarrakech@gmail.com.
Last revised: 19/02/2026