Legal Framework

The website is published by:

• Name: TALALOU MARRAKECH SARL

• E-mail : [email protected]

• Telephone: +212 (0)6 78 94 93 15

• ICE number: 003657304000053

1. Information on electronic contracting

1.1. Contract conclusion procedure

Steps in the booking process

To make a booking, users must follow the steps below:

• Select the dates and room type;

• Enter guest information;

• Review the booking details;

• Make the payment;

• Receive a confirmation e-mail.

1.2. Payment, delivery and performance terms

Payment terms: bookings may be paid for by credit card, debit card or bank transfer. Full payment is required at the time of booking unless otherwise stated. For certain rates, a deposit may be required, with the balance then payable upon arrival. All prices are displayed in Moroccan dirhams and include applicable taxes unless otherwise stated. Cancellation policies and refund terms are detailed in our booking confirmation and general terms and conditions.

Provision of services: check-in and check-out take place at the times specified in the general terms and conditions. Services include, in particular, housekeeping. Special requests must be communicated at the time of booking. Service hours may vary depending on the season.

Complaints handling: we are committed to dealing promptly with any concerns. Complaints may be submitted by e-mail to [email protected] or by telephone on +212 (0)6 78 94 93 15. We aim to acknowledge receipt of any complaint within 48 hours and provide a full response within 10 working days. For any urgent matter during your stay, please contact our reception immediately. If you are not satisfied with our response, you may refer your complaint to the competent consumer mediation service indicated below.

1.3. Statutory and commercial guarantees

Statutory guarantee of conformity: services will be provided in accordance with their description in the booking confirmation.

Statutory guarantee against hidden defects: guests are protected against any hidden defect affecting the accommodation that was not apparent at check-in and could not reasonably have been discovered upon inspection.

Commercial guarantee: in addition to statutory requirements, we provide an enhanced service guarantee including, in particular:

• Functionality of facilities: advertised room facilities (TV, Wi-Fi, safe, minibar, etc.) are guaranteed to be in working order and, where necessary, repaired or replaced.

• Comfort standards: room temperature, water pressure and noise levels are maintained in accordance with hospitality standards.

1.4. Contract duration and termination

• Contract duration: the duration of the stay stated in the booking confirmation.

• Cancellation terms: the cancellation policy and refund terms are set out in the terms and conditions of sale.

• Amendment terms: the conditions governing amendments are set out in the terms and conditions of sale.

1.5. Functionality of digital content

Digital services: our digital booking system provides real-time availability, instant confirmation and secure payment processing. The booking platform is optimised for desktop computers and mobile devices. An Internet connection and an up-to-date browser are required to access all of its features.

1.6. Consumer mediation

Consumer mediator contact details: in the event of a dispute that cannot be resolved directly, consumers may contact the competent mediation services free of charge. Consumers in the European Union may also access the Online Dispute Resolution platform at: http://ec.europa.eu/odr
We undertake to participate in good faith in any mediation procedure.

1.7. Management of electronic documents

• Contract archiving: booking confirmations are archived in the Amenitiz system and may be viewed there.

• Correction of errors: guests may amend or correct information relating to their booking by contacting the establishment and providing the necessary information.

• Contract language: bookings are formalised in the local language.

• Contract confirmation: acceptance of the booking is confirmed through online communication, in particular by e-mail or WhatsApp.

2. Additional website terms

2.1. Intellectual property

Website content: ownership of the website content and images belongs to Amenitiz Solutions.

Trademark information: the name “TALALOU MARRAKECH”, the associated logos and distinctive signs are trademarks or registered trademarks of TALALOU MARRAKECH SARL. These marks may not be used without prior written authorisation, except where their use is necessary for legitimate review or commentary purposes.

Rights of use: users may view and print website content for personal, non-commercial use in connection with a potential or actual booking.

2.2. External links and third-party content

Third-party websites: our website may contain links to external websites operated by third parties, including:

• Tourist information: websites relating to local attractions and destinations;

• Transport services: websites of airlines, car rental companies and public transport providers;

• Partner services: booking of restaurants, activities and local services;

• Social media: links to our social media profiles and sharing features.

Disclaimer: the presence of links to third-party websites does not constitute an endorsement of their content, services or business practices.

2.3. Liability and guarantees

• Website availability: we make every effort to maintain the continuous operation of the website and provide reliable access to our booking services.

• Accuracy of information: we take all reasonable measures to ensure the accuracy of the information presented on our website.

• Technical issues: our liability in the event of technical issues is limited.

3. Data protection and privacy

3.1. Privacy policy

The purpose of this privacy policy (the “Policy”) is to explain the rules governing the various processing operations that may be carried out when you use our website available at the following address: https://www.riad-dabachi-talalou.ma (the “Site”).

The processing of personal data carried out through the Site is the responsibility of the data controller.

3.2. Data controller and data protection officer

3.2.1. Scope of this Policy

As the controller of your personal data, we make every effort to protect your privacy when you visit the Site.

This Policy provides you with further information about the origin and use of your personal data as well as the browsing information processed when you visit our Site.

For the purposes of this Policy, the term “personal data” means any data relating to you that enables you to be identified directly or indirectly, regardless of the device you use.

The term “device” means the physical equipment (computer, tablet, smartphone, telephone, etc.) you use to access and browse the Site.
The term “Regulations” means the applicable regulations governing personal data.

By using our Site, you declare that you accept the terms of this Policy in full.

If you do not agree with any of these terms, you are free to stop using our Site.

This Privacy Policy is updated regularly. We will notify you in advance of any material changes through notifications on the relevant services or by e-mail, where applicable.

The Site will always display the most recent version of this Privacy Policy.

3.3. Protection of your personal data

In accordance with the Regulations, we record all processing operations carried out in a processing register that we make available to the competent authorities.

All information you provide during your visits to the Site is confidential. This information is necessary for the purposes for which it is processed.

3.3.1. What personal data is collected and processed?

The information that may be collected and processed includes:

• Identification and contact details: first name, surname, gender, postal address, telephone number, e-mail address, language and country from which you interact with us.

• Booking data: arrival and departure dates, membership number, hotel and booking number.

• Data required to comply with legal obligations: traveller registration information, including full name, date of birth, nationality, type and number of identity document, country of residence, arrival and departure dates and signature. Local legislation may require additional information.

• Health data: allergies.

• Financial and payment data: bank details (all payment transactions are encrypted by the receiving bank or accredited storage centre; we do not store bank card numbers), booking information.

• Connection, geolocation data (only with your consent) and browsing data.

• Personal preferences: including your cookie preferences.

When we ask you to enter personal data in order to access a feature, some information is mandatory because it is required to allow you to access that feature. For example, in order to register your booking, we need your first name and surname.

It is important that the personal information provided about you is accurate and up to date.

We do not process any personal data that may be classified as “sensitive” (information concerning racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sex life) within the meaning of the personal data Regulations.

We undertake not to transfer your personal data to third parties except under the conditions set out below in Section 3.3.4.

3.3.2. For what purposes is your personal data collected and processed?

The personal data listed above may be collected and processed for the following purposes:

• Booking management: the processing of your data is necessary to keep you informed of the status of your booking, provide booking summaries, accept payments, etc.

• Access to customer service: we process your personal data as part of our customer service in order to respond to your requests, including requests submitted through contact forms.

• Fraud detection and prevention: we process your personal data to detect, prevent and investigate fraudulent activity and to protect you and our business against financial crime, unauthorised transactions and security threats.

• Improvement of our services: with your consent, we process your browsing and booking data for analytical and statistical purposes. This data enables us to analyse how you use our Site and improve its usability and quality.

• Marketing: when you subscribe to our newsletter, we process your data to manage your subscription and send you targeted information by e-mail or SMS, according to your preferences. We may also contact you via push notifications if you subscribe to this service.

Processing for marketing purposes requires your consent. You may unsubscribe from our communications at any time.

If you have given us your consent to receive our communications, we may use your information to:

• Share information about our events, products, services and offers;

• Send you recommendations concerning products or services that may be of interest to you;

• Carry out customer research to better understand your expectations regarding our products and services.

3.3.3. Legal basis for processing your personal data

We rely on different legal bases for processing your data depending on how you interact with our Site.

Contract: for booking management and access to customer service. When you purchase services on our Site, we collect and process your personal data in order to perform the contract entered into between us. For example, we need your contact details to confirm your booking and your payment information to process the payment.

Legitimate interest:

• We process your personal data to ensure the security of our network and information systems. It is in our legitimate interest to protect ourselves against cyber threats and ensure the availability of our services.

• We detect and prevent fraud in order to protect you and our business.

• We process bank card data for payment purposes, including user consumption and incidental charges.

Consent: for the improvement of our services and marketing. Where we process personal data for service improvement or marketing purposes, the legal basis for such processing is your consent.

Legal obligation: to comply with applicable legal obligations, including where we are required to provide certain guests’ personal data to the competent authorities or satisfy tax obligations.

3.3.4. Who are the recipients of your personal data?

When you use our Site, your information may be transmitted to third parties with whom we work in order to provide certain services:

• Financial institutions and accredited storage centres;

• Competent public authorities;

• Fraud detection and prevention entities;

• Marketing, communication and advertising service providers.

Personal data collected on the Site is primarily processed by the internal departments of the data controller.

We may share your information with the above-mentioned third parties, in particular for:

• Payment processing by financial institutions and accredited storage centres;

• Credit and identity verification by fraud detection and prevention entities;

• Compliance with applicable legal obligations;

• Optimisation of the Site experience and improvement of services by marketing, communication and advertising service providers.

We require third parties receiving your personal data to comply with the applicable personal data Regulations. These third parties may use your personal information only in accordance with our instructions and not for their own purposes.

Your connection and browsing data may be transferred to Google Analytics.

We may also disclose your personal data in response to orders from the competent authorities.

3.3.5. How long is your personal data retained?

We will retain your data for the period applicable in the relevant jurisdiction following your last booking, in order to respond to any questions or complaints and to retain the data required to comply with our legal, accounting or analytical obligations.

We may also retain your data for research or statistical analysis purposes, in which case it will be anonymised.

For newsletter subscriptions, we will no longer contact you if you have not opened our newsletters for more than twelve (12) months.

The data controller may also retain your data for research or statistical analysis purposes. Once anonymised, no retention period is imposed by the Regulations because it is no longer possible to re-identify you.

3.3.6. Hosting of your personal data

Your personal data is hosted by Heroku Inc., The Landmark @ 1 Market St., Suite 300, San Francisco, CA 94105, United States.

The servers on which your personal data is stored are located in Frankfurt, Germany.

The data controller has implemented appropriate technical measures to ensure the security of your personal data.

3.3.7. What are your rights?

3.3.7.1. Consent

Your consent must be given clearly and unambiguously. When you agree to complete the Site’s contact form:

• You are informed of how your personal data will be used;

• You must tick a box to confirm your consent;

• Children under the age of 16 cannot give their consent.

3.3.7.2. Other rights

In accordance with the Regulations, you have the following rights regarding your personal data:

• Right of access: request confirmation as to whether your personal data is being processed and receive a copy of the personal data we hold about you.

• Right to rectification: request the correction of inaccurate or incomplete personal data concerning you.

• Right to erasure: request the deletion of your personal data where one of the legal grounds permitting such deletion applies.

• Right to restriction of processing.

• Right to data portability: contact us so that your personal data may be provided to you or transmitted directly to another data controller in a structured, commonly used and machine-readable format.

• Right to object: contact us where processing is carried out in the public interest, for the purposes of our legitimate interests or for direct marketing purposes.

You may exercise these rights at any time and free of charge by sending us an e-mail at: [email protected]

You may also write to us at:

98 Derb Jdid, Dabachi

40000 Marrakech

Morocco

Please note that, for legal reasons, we may not always be able to grant your request. In such cases, we will inform you after receiving and reviewing your request.

You also have the right to lodge a complaint with the competent administrative authority.

3.4. Internet browsing security

3.4.1. Integrity of your data on the Internet

The Site has appropriate security measures in place to prevent the loss, unauthorised use, unauthorised access, alteration or disclosure of your personal data.

All personal data collected is stored on secure servers. The data controller has implemented procedures to manage any personal data breach.

3.4.2. Malicious use

We recommend connecting only to secure networks, preferably private ones. Please be aware of the risks associated with using public Wi-Fi networks.

Regardless of the data controller to whom you have voluntarily provided your personal data, and given the nature of the Internet, other operators with no connection to the data controller may collect such data without your consent, in particular while you browse the Internet.

We recommend installing antivirus and anti-spyware software on your computer and keeping it regularly updated.

3.4.3. Protection against phishing

The data controller will never contact you by e-mail to request personal information.

If you receive an e-mail purporting to come from the data controller and asking you to provide sensitive personal information (bank details, information relating to your private life, etc.), please do not reply and forward the e-mail to us so that we can take the necessary action.

You should provide your account information only after logging directly into the Site through your browser.

4. Applicable law and jurisdiction

• Applicable law: these terms are governed by Moroccan law.

• Dispute resolution: legal disputes will be subject to the jurisdiction of the courts of Morocco. Consumers in the European Union may access the ODR platform at: http://ec.europa.eu/odr