Who processes your data
The controller is Partners Hotels SARL AU, 24 Boulevard Rachidi, 20070 Casablanca. For any question about your data, or to exercise your rights: legal@staytle.com.
Notification to the CNDP is under way. The receipt number will be published here once issued.
What we collect, and what is optional
When you send a booking request, we collect:
- Required: your name, email address, phone number, the apartment requested and your dates. Without these the request cannot be handled.
- Optional: your nationality, the purpose of your stay chosen from a list, your employer, the number of occupants and your message. These help us prepare your arrival; leaving them blank changes nothing about your request.
- Generated by us: your booking reference and its status, the date and time you accepted the conditions, and the correspondence about your stay.
The purpose field is a closed list. We never ask about your health, your religious or political beliefs, your union membership or your origin. Please do not mention them in the message field either: those are sensitive categories and we do not process them.
We ask for no banking details on this site. Payment is made by transfer, from your bank to ours, without passing through this site.
Why we process them
- To answer your request and prepare the contract: steps taken at your request before contracting.
- To run the stay, issue invoices and handle the deposit: performance of the contract.
- To keep our accounting records and answer the tax authorities: a legal obligation.
- To prove, in the event of a dispute, that the conditions were shown to you and that you accepted them: our legitimate interest, and also an obligation, since article 34 of Law 31-08 places that burden of proof on us.
We do not use your data for advertising and we sell it to no one. We will only send you marketing email if you have expressly agreed, through a separate box you tick yourself.
Who has access
- The staff handling bookings and accounts.
- The owner or manager of the apartment chosen, to the extent needed to welcome you.
- Our host, Railway Corp., which operates the servers the site runs on.
- Our bank, to receive the transfer.
- Public authorities, where a legal provision requires us to disclose.
Where they are held
The site and its database are hosted in the Netherlands, within the European Union. Your data therefore leaves Morocco.
By deliberation no. 236-2015 the CNDP established the list of countries offering an adequate level of protection; European Union member states are on it. The transfer is declared, together with the identity of the host and the security measures applied.
How long we keep them
- Request that goes no further: 24 months from the last exchange, then deletion.
- Stay that took place: the duration of the stay, then 10 years, matching accounting retention and the applicable limitation period.
- Proof that the conditions were accepted: kept as long as a dispute remains possible.
Your rights
Under Moroccan Law 09-08 you may at any time:
- access the data we hold about you and obtain a copy, free of charge (article 7);
- have it corrected, updated, blocked or erased where it is inaccurate, incomplete, ambiguous or out of date; we must answer within ten days (article 8);
- object to the processing on legitimate grounds, and object without giving reasons where marketing is concerned (article 9).
Write to legal@staytle.com. We may ask for proof of identity, solely to be sure we are not handing your data to someone else. If our answer does not satisfy you, you may refer the matter to the CNDP, avenue Al Arz, Hay Riad, Rabat.
If you were in the European Union when you sent us your data, you also have the rights granted by the General Data Protection Regulation: erasure, restriction, portability, objection, and a complaint to your national supervisory authority. We honour them without arguing about whether they apply.
Cookies
The public site sets no cookies. No analytics, no advertising trackers, no social buttons. That is why no banner greeted you: there is nothing to accept.
One cookie exists, on the admin area, and it concerns only our own staff: it keeps the session of whoever has signed in.
Security
Traffic to the site is encrypted. The admin area is password-protected and limited to the people who need it. Database backups are kept away from the host.
No arrangement is infallible. Should an incident affect your data, we would tell you and notify the CNDP.
Changes
This policy may change. The version that binds us is the one displayed on the day you send us your data; we keep every version.