Who processes your data
The controller is Partners Hotels SARL AU, 24 Boulevard Rachidi, 20070 Casablanca. For any question about your data, or to exercise your rights: legal@staytle.com.
Notification to the CNDP is under way. The receipt number will be published here once issued.
What we collect, and what is optional
When you send a booking request, we collect:
- Required: your name, email address, phone number, your country and city of residence, the purpose of your stay chosen from a list, the number of occupants, the apartment requested and your dates, and your company’s name if it pays for the stay. If you already live in the Casablanca area and the stay is longer than thirty (30) days, we also ask why you are looking for a temporary home. Without these the request cannot be handled.
- Optional: your message.
- Once your dates are confirmed, to draw up the lease: your date and place of birth, nationality, occupation, identity document (its number and a copy), the address of your main residence and details of the purpose of your stay; for a stay taken by a company, the full identity of the company, of the occupant and of the people accompanying them; and, if you wish, documents supporting the purpose of your stay.
- For some stays: proof of your current address and the guarantee you choose - for a guarantor, their identity, contact details, monthly income and identity document; for a guarantor company, its name and a contact person.
- Generated by us: your booking reference and its status, the date and time you accepted the conditions, the messages exchanged on Staytle with the manager of the apartment, and, when you sign your lease, your IP address and browser identifier, which serve as proof of signature.
Your place of residence and, for some stays, proof of address are used to draw up your lease and to determine the guarantees requested.
The purpose field is a closed list. We never ask about your health, your religious or political beliefs, your union membership or your origin. Please do not mention them in the message field either: those are sensitive categories and we do not process them.
We ask for no banking details on this site. Payment is made by transfer, from your bank to ours, without passing through this site.
When you tell us what you need ("Can't find what you're looking for?"), we first collect the city, neighbourhoods, arrival date, length of stay, size of home, your budget, your name, your WhatsApp number and your email address, together with the homes you viewed during your visit and, if you came from a search with no results, that search and what was missing. You may then, if you wish, add whether your dates are flexible, the number of occupants, the purpose of your stay, who pays for it and, where relevant, your employer, your must-haves, a free-text note and how you heard about Staytle. This data is used to find you a home: we may describe what you need (city, neighbourhood, size, dates, budget) to the property managers we work with, never with your name or contact details. Once anonymised, it helps us measure the demand we cannot yet serve. Nothing is stored unless you tick the consent box.
When a search on the site returns no home, we record the place typed and the dates, with nothing that identifies you, to learn which homes are missing.
Why we process them
- To answer your request and prepare the contract: steps taken at your request before contracting.
- To run the stay, issue invoices and handle the deposit: performance of the contract.
- To keep our accounting records and answer the tax authorities: a legal obligation.
- To prove, in the event of a dispute, that the conditions were shown to you and that you accepted them: our legitimate interest, and also an obligation, since article 34 of Law 31-08 places that burden of proof on us.
We do not use your data for advertising and we sell it to no one. We will only send you marketing email if you have expressly agreed, through a separate box you tick yourself.
Who has access
- The staff handling bookings and accounts.
- The owner or manager of the apartment chosen, to the extent needed to welcome you: they see neither your proof of address nor your guarantor’s documents, and your nationality is shared with them only with the signed lease.
- Our host, Railway Corp., which operates the servers the site runs on.
- Our bank, to receive the transfer.
- Public authorities, where a legal provision requires us to disclose.
Where they are held
The site and its database are hosted in the Netherlands, within the European Union. Your data therefore leaves Morocco.
By deliberation no. 236-2015 the CNDP established the list of countries offering an adequate level of protection; European Union member states are on it. This transfer will be mentioned in our declaration to the CNDP, which is being filed, together with the identity of the host and the security measures applied.
How long we keep them
- Request that goes no further: 24 months from the last exchange, then deletion.
- Description of what you need: 24 months from the last exchange, then anonymisation - your name, contact details and free text are erased; the city, neighbourhood, size, budget and outcome are kept, with no link to you, for statistics.
- Stay that took place: the duration of the stay, then 10 years, matching accounting retention and the applicable limitation period.
- Proof that the conditions were accepted: kept as long as a dispute remains possible.
- Copy of your identity document: deleted two days after your arrival; only the record of its upload and of each viewing is kept.
- Proof of address and your guarantor’s documents: kept with the lease, for the same period, then deleted.
Your rights
Under Moroccan Law 09-08 you may at any time:
- access the data we hold about you and obtain a copy, free of charge (article 7);
- have it corrected, updated, blocked or erased where it is inaccurate, incomplete, ambiguous or out of date; we must answer within ten days (article 8);
- object to the processing on legitimate grounds, and object without giving reasons where marketing is concerned (article 9).
Write to legal@staytle.com. We may ask for proof of identity, solely to be sure we are not handing your data to someone else. If our answer does not satisfy you, you may refer the matter to the CNDP, avenue Al Arz, Hay Riad, Rabat.
If you were in the European Union when you sent us your data, you also have the rights granted by the General Data Protection Regulation: erasure, restriction, portability, objection, and a complaint to your national supervisory authority. We honour them without arguing about whether they apply.
Cookies
The public site sets no cookies. No analytics, no advertising trackers, no social buttons. That is why no banner greeted you: there is nothing to accept.
Your browser keeps, on your device only, the date you closed the invitation to describe what you need and, for the length of your visit, the homes you viewed, your last search and where the visit came from: the campaign parameters of the landing address, the name of the site you came from and the first page viewed. None of it is sent to us, except the homes viewed and where the visit came from, with your request, if you send one: this tells us, without any tracker, how people find us.
One cookie exists, on the admin area, and it concerns only our own staff: it keeps the session of whoever has signed in.
Security
Traffic to the site is encrypted. The admin area is password-protected and limited to the people who need it. Database backups are kept away from the host.
Every sign-in to the admin area - our team’s and the apartment managers’ - is recorded in a connection log: date and time, account, IP address and type of browser, as well as refused attempts. The log is used only for account security; it is kept for twelve months, then deleted.
No arrangement is infallible. Should an incident affect your data, we would tell you and notify the CNDP.
Changes
This policy may change. The version that binds us is the one displayed on the day you send us your data; we keep every version.