top of page

Privacy Policy

SantaCruz Surf Maroc Privacy Policy  

Privacy policy

 

At Santa Cruz Surf Maroc we respect the privacy of customers, potential customers and visitors to our website (www.santacruzsurfmaroc.com). This policy is concerned with how we collect information, what we do with it and what controls you have over your personal information.

 

Your Privacy

 

Santa Cruz Surf Maroc operates from one location in Morocco, which provide surf and yoga holidays. From making your booking to organising your airport transfer, from your surf lessons to your accommodation, we make sure you are taken care of and have a good time. 

 

We take our duty to process your personal information very seriously. This policy explains how we collect, manage, use and protect your personal information.

 

We may change this document from time to time to reflect the latest view of what we do with your information. Please check back frequently; you will be able to see if changes have been made by the date it was last updated.

Refer to the sections below for more details on how and why we use your personal information:

  1. Who are we? 

  2. Why we need your personal information

  3. What personal information we collect

  4. How we obtain your details

  5. How we use your personal data and our legal bases for using it

  6. Sharing your information

  7. Retaining your information 

  8. Cookies and how they benefit you your rights?

  9. How to contact us

 

1. Who are we?

 

1.1 In this policy references to Santa Cruz Surf Maroc, or to ‘we’ or ‘us’ are to Santa Cruz Surf Maroc.

 

2. Why we need your personal information

 

2.1 The information is either needed to fulfil your enquiry or booking to enable us to provide you with a more personalised service. You don't have to disclose any of this information to browse our site. However, if you choose to withhold requested information, we may not be able to provide you with certain services or accept your booking.

 

2.2 Santa Cruz Surf Maroc also processes your information when it is in our legitimate interests to do this and when these interests do not override your rights. Those legitimate interests include providing you with information on our products, services, newsletter requests, feedback and other activities. 

 

3. What personal information we collect

 

3.1 Santa Cruz Surf Maroc is what’s known as the ‘controller’ of the personal information you provide to us. We need to collect personal information in order to deliver the services you enquire about or book with us. Personal information may include, but is not limited to:

  • name

  • email address

  • telephone number

  • address

  • health data

 

3.2 Other categories of personal data about you that we may collect, use, store, share and transfer are:

 

i) Account and Booking Data

 

This includes personal data which relates to your account, such as enquiries, proposals and bookings made by you, your interests, preferences, feedback and survey responses.

 

This includes personal data which relates to the transactions you have conducted with us, such as details about payments to and from you, details of subscriptions to our services or publications and other details of products and services you have purchased from us.

 

ii) Marketing Data

 

This includes personal data which relates to your preferences, such as how you prefer to receive marketing materials from us and your communication preferences;

 

iii) Website Usage Data 

 

This includes information about your usage and operation of our website, such as information about how you use our website, products and services;

 

iv) Video Recordings and Still Pictures

 

We may collect from you video recordings and still pictures which feature you if you are in the field of vision of our CCTV systems. This personal information may include your activities, your face, who you are with and other visual information about you which is recorded by our CCTV system.

 

We will normally keep your personal information for no more than 30 days after the recording was made. However if we receive an enquiry about a particular recording on our CCTV we will generally then retain that part of the recording until it is no longer required. This period will vary as it is dependent upon the circumstances of the particular case, but for criminal or civil legal proceedings this could mean that the personal information is retained until after the legal case and any appeals have been concluded, which could be years. As soon as it is no longer required we will delete the personal information. 

 

4. How we obtain your details

 

4.1 We collect your personal information in a number of ways:

 

i) When you provide it to us directly;

 

ii) When you provide permission to other organisations to share it with us via social media such as Facebook or Twitter;

 

iii) When we collect it as you use our website;

 

iv) When you have given it to a third party and you have given them permission to pass your information on to us.

 

4.2 We will also hold information about you so that we can respect your preferences for being contacted by us.

 

4.3 As Santa Cruz Surf Maroc is based in Morocco, processing of your personal information takes place outside the EEA. We ensure that there are appropriate technical and organisational controls to ensure the security of your personal information. We have in place contracts which meet the requirements of GDPR and work with our contractors to ensure wherever possible that data is stored in the EEA.  

 

5. How we use your personal data and our legal bases for using it

 

5.1 Where we are relying on a basis other than consent

 

We may rely on one or more of the following legal bases when processing your personal data, which is what the law allows us to do: 

 

5.1.1 For managing your booking we will use information provided by you to deliver our products and services. This personal data is processed as it is necessary for the performance of a contract to which you are party or to provide you with information prior to entering into a contract; 

 

5.1.2 To suggest or recommend our products or services which might be of interest to you, to determine and measure the effectiveness of our promotional campaigns and advertising and making sure our marketing is relevant to you. Your personal data is processed as it is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data; 

 

5.1.3 To deal with your enquiries, to send you information you have requested or to provide you with important-real time information about our products and service you have ordered from us (e.g. a change of time or location due to unforeseen circumstances). Your personal data is processed as it is necessary for the purposes of the legitimate interests pursued by us or necessary for the performance of a contract to which you are party; 

 

5.1.4 For the development, delivery and improvement of our products and services, marketing, customer relationships and experiences in the provision of products and services to our customers. Your personal data is processed as it is necessary for the purposes of the legitimate interests pursued by us; 

 

5.1.5 To help us keep our website updated and relevant and to develop our marketing strategy your personal data is processed as it is necessary for the purposes of the legitimate interests pursued by us; 

 

5.1.6 To protect our rights or property (including our website), administer and improve our IT services and network security, prevent fraud and facilitate any business reorganisation or group restructuring exercise. Your personal data is processed as it is necessary for the purposes of the legitimate interests pursued by us;

 

5.1.7 In order to comply with our own legal obligations, e.g. health and safety legislation, or to assist in an investigation (e.g. from the Police). Your personal data is processed as it is necessary for compliance with a legal obligation to which we are subject; 

 

5.1.8 In order to use your personal data in life or death situations where there is no time to gain your consent (e.g. in the event of an accident and we have to give personal details to medical personnel). Your personal data is processed as it is necessary in order to protect the vital interests of the data subject or of another natural person; 

 

6. Sharing your information

 

6.1 We do not share your information with any other organisations or individuals unless we are obliged to by law, for purposes of national security, taxation and criminal investigations and in the following instances:

 

  • If you have agreed that we may do so;

  • When we use other companies to provide services on our behalf, e.g. online booking services, sending mail and emails, when using auditors/advisors or processing credit/debit card payments;

  • CCTV images may be provided to people who have been injured, attacked or had property damaged or stolen and their insurance providers. The privacy of anyone not directly involved will be protected by obscuring their faces etc;

  • If we merge with another organisation to form a new entity, information may be transferred to the new entity.  

 

6.2 We will never sell or rent your personal information to other organisations.

 

7. Retaining your information

 

7.1 We hold your information only as long as necessary for each reason that we use it. After this period, we will securely erase your personal data. Please contact us if you would like more information. 

 

7.2 If you request that we have no further contact with you, we will keep some basic information in order to avoid sending you unwanted materials in the future and to ensure that we don’t accidentally duplicate information.

 

7.3 If you make a purchase from us, we will keep the purchase information for a period of seven years for accounting purposes. 

 

8. Cookies and how they benefit you

 

8.1 Our website uses cookies, as almost all websites do, to help provide you with the best experience we can. Cookies are small text files that are placed on your computer or mobile phone when you browse websites.

 

8.2 Cookies help us:

 

 

8.3 If the settings on your browser that you are using to view this website our adjusted to accept cookies we take this, and your continued use of our website, to mean that you are fine with this. Should you wish to remove or not use cookies from our site you can learn how to do this below, however doing so will likely mean that our site will not work as you would expect.

 

8.4 When a web server sends a cookie, it asks your browser to keep that particular cookie until a certain date and time. These dates can be:

 

  • Some date in the future – which might be a few minutes or a few hours from now (to track something like your shopping cart in an online store). The cookie might expire many years in the future, to keep track of your browser for a long time.

  • When you close your browser – this is called a session cookie, the next time you start your browser these will have vanished.

  • Some date in the past – this is how the server asks a browser to remove a previously-stored cookie.

 

8.5 You can usually switch cookies off by adjusting your browser settings to stop it from accepting cookies. Doing so, however, will likely limit the functionality of ours and a large proportion of the world's websites as cookies are a standard part of most modern websites.

 

9. How to contact us

 

9.1 If you wish to talk through anything in our privacy policy, find out more about your rights or obtain a copy of the information we hold about you, please contact us at info@santacruzsurfmaroc.com, we will be happy to help. 

 

9.2 If you wish to correct your personal data held by us or to opt out at any time from receiving marketing correspondence from us please email us at info@santacruzsurfmaroc.com

​

bottom of page