Skip to content

Legal

Privacy & Cookies

Version 1.0 — October 2026 (draft awaiting validation)

Version française

This page explains which personal data KALTENERE processes, why, for how long, who receives it and how you can exercise your rights — on this website, in the booking engine and during your stay.

1. Data controller

Your personal data is processed by KALTENERE, Bled Zouizi, Douar Loudi, Agafay, Ouadaya 40000, Morocco — To be confirmed: operating company and registration numbers.

For any question about your data: contact@kaltenere.com · +212 672 834 428.

2. Data we process

The booking engine collects your name, contact details, stay details (dates, guests, requests) and the payment information needed to guarantee or pay for the booking.

The contact and “Join our family” forms do not store anything on this website: they prepare a message in your own WhatsApp or e-mail application, which you choose to send. We then receive the details you write in it (name, e-mail, phone, dates, number of guests, message).

The “Book an activity” and “Book a Day Pass” forms send your request (activity or Day Pass formula, name, e-mail, phone or WhatsApp number, preferred date and, depending on the form, time and number of participants or number of adults and children, message) from our server to our inbox through our e-mail delivery provider, so that our team can confirm availability with you. It is a request, not a reservation, and nothing is stored on this website.

Identity information from your identity document or passport, recorded in accordance with Moroccan regulations on tourist accommodation, and the details of services consumed.

Our hosting provider records technical information (IP address, browser, pages requested, date and time) in server logs, for security and the proper functioning of the site.

Your language choice is remembered by a single functional cookie (see “Cookies”). No audience-measurement or advertising tool is used.

3. Purposes and legal bases

  • Managing bookings, stays and requested services — performance of the contract or of pre-contractual steps.
  • Recording guests’ identity, invoicing and accounting — compliance with our legal obligations.
  • Answering your questions and requests, ensuring the security of the website — our legitimate interest.
  • Sending news and offers — your consent, which you can withdraw at any time.

4. Bookings through Cloudbeds

Accommodation bookings are made in KALTENERE’s official booking engine (online booking (opens in a new tab)), provided by Cloudbeds, which processes the booking data on our behalf and opens in a separate window. Card payments are handled by the booking engine’s payment provider under the card-industry security standards (PCI DSS); KALTENERE does not receive or store your full card number.

The booking engine’s pages are governed by Cloudbeds’ own privacy and cookie notices, available on its website.

5. Recipients and transfers

Your data is only accessible to the KALTENERE team members who need it, and to the following service providers, within the limits of their task:

  • Cloudbeds — booking engine and reservation management.
  • Vercel Inc. — hosting of this website.
  • Resend, Inc. — delivery of the “Book an activity” and “Book a Day Pass” requests to our inbox.
  • Meta (WhatsApp) or your e-mail provider — only when you choose to contact us through them.
  • Public authorities — when the law requires it.

Some of these providers are located outside Morocco, notably in the United States. Such transfers are carried out with the safeguards required by Law No. 09-08 and, where applicable, the GDPR. To be confirmed: CNDP declaration / transfer authorisation references

6. Retention periods

  • Booking and stay data: for the duration of the relationship, then archived for the periods required by Moroccan accounting and tax law — To be confirmed: retention period.
  • Contact requests not followed by a booking: To be confirmed: retention period.
  • News and offers: until you unsubscribe.
  • Server logs: To be confirmed: retention period set by the hosting provider.

7. Security

KALTENERE and its providers take appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access or disclosure. This website is served exclusively over an encrypted connection (HTTPS).

8. Your rights

Under Moroccan Law No. 09-08, you have the right to access, rectify and object to the processing of your personal data on legitimate grounds, and to object to its use for marketing at any time.

If you are in the European Union, the GDPR also gives you the rights to erasure, restriction, portability and to withdraw your consent at any time.

To exercise your rights, write to contact@kaltenere.com with proof of identity. If you are not satisfied with our answer, you may lodge a complaint with the Commission Nationale de contrôle de la protection des Données à caractère Personnel (www.cndp.ma (opens in a new tab)) or, in the European Union, with your national supervisory authority.

9. Cookies

Cookies are small files stored by your browser to remember information about your visit. The list below reflects what this website actually uses.

Needed for the site to work as you asked; they do not require consent.

  • NEXT_LOCALE — remembers the language you chose (English or French) so the site opens in it on your next visit. Placed by this website (first-party), kept for 12 months, contains no personal data.

None. This website does not use Google Analytics or any other audience-measurement tool.

None. This website shows no advertising and embeds no social-network plugin, video or map: Instagram, Facebook, Tripadvisor and Google Maps are simple links. Its fonts and images are served from its own domain, without any request to Google.

When you open the booking engine (Cloudbeds), Google Maps, Instagram, Facebook, WhatsApp or Tripadvisor from this website, you leave it: those services may place their own cookies, governed by their own policies.

You can delete or block cookies at any time in your browser settings; if you block the language cookie, the site will simply open in English. Should audience-measurement or marketing cookies be added in the future, they will only be placed after your consent, through a consent banner, and this page will be updated.

10. Applicable legislation

  • Moroccan Law No. 09-08 of 18 February 2009 on the protection of individuals with regard to the processing of personal data, and its implementing decree.
  • Regulation (EU) 2016/679 (GDPR), for guests located in the European Union, where applicable.

11. Updates

This page may be updated to reflect changes in our services or in the law. The date of the current version is shown at the top of the page.

Any question? Write to us at contact@kaltenere.com.