Privacy

Last updated 29 October 2026. This notice explains which personal data we process when you use moroccan-realestate.net, why, and what rights you have. It applies under the EU General Data Protection Regulation (GDPR), the Swiss Data Protection Act (FADP) and Moroccan law 09-08.

Controller

CEGStake AG, Baarerstrasse 43, 6300 Zug, Switzerland. Email: info@moroccan-realestate.net. There is no obligation to appoint a data protection officer; questions go to the address above.

Contact and quick forms

When you send a request, we process your name, email address and, if you provide them, phone number, country, budget, purpose and message, together with the language and page you sent it from, the time and your IP address. We use this to answer you, to send you an automatic confirmation in your language and, if you proceed, to prepare the property shortlist and the purchase. Legal basis: steps prior to a contract at your request (GDPR art. 6(1)(b)) and our legitimate interest in answering enquiries (art. 6(1)(f)). Requests are delivered to our mailbox and stored in a protected log on our server.

If you subscribe to The Moroccan Property Brief, we store your email address, the language you subscribed in, the time and your IP address as proof of consent, and send you a welcome email. We send at most one issue a month. Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time via the unsubscribe link in every email or by writing to info@moroccan-realestate.net; we then delete your address from the list.

Checklist download

When you request the purchase checklist, we process the same data as for a contact request and send you the document by email. Legal basis: steps prior to a contract at your request (art. 6(1)(b)).

The WhatsApp button opens a chat with our advisor in your WhatsApp app. Only then does WhatsApp Ireland Ltd. (Meta) process your data under its own privacy policy. We do not transfer any data to WhatsApp before you tap the button.

Analytics and cookies

Only with your consent in the cookie banner do we load Google Tag Manager, Google Analytics 4 and Microsoft Clarity to understand which pages and tools are used (pages viewed, clicks, approximate location based on a shortened IP address, device type, session recordings in Clarity without form contents). Legal basis: your consent (art. 6(1)(a)), which you can withdraw at any time via the cookie settings in the footer. Without consent, no analytics cookies are set. Google Consent Mode is configured so that no data is sent before consent.

Server logs

Our hosting provider stores technically necessary access logs (requested URL, time, browser type, shortened IP address) for security and error analysis for up to 14 days. Legal basis: legitimate interest in a secure operation (art. 6(1)(f)).

Recipients and transfers

Hosting and email: Hostinger International Ltd., Cyprus, with servers in the EU. Analytics: Google Ireland Ltd. and Microsoft Ireland Operations Ltd., which may transfer data to the United States under the EU-US Data Privacy Framework and standard contractual clauses. Advisors in our network (for example a notary or tax advisor) receive your data only when you ask us to introduce you. We do not sell personal data.

Retention

Contact requests that do not lead to an engagement are deleted after 12 months. Newsletter data is kept until you unsubscribe, plus the proof of consent for 3 years. Client files are kept for the duration of the engagement and the statutory retention period thereafter (10 years for accounting records). Analytics data is retained for 14 months in Google Analytics and up to 12 months in Clarity.

Your rights

You can ask for access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interest, and withdraw consent at any time with effect for the future, by writing to info@moroccan-realestate.net or the postal address above. You can complain to the supervisory authority of your country of residence, in Switzerland the FDPIC, in Morocco the CNDP under law 09-08.

Appointment booking

After you have sent a request, we offer a booking widget from Calendly LLC (USA). It loads only on those pages. When you book, Calendly processes the name, email address and time you enter under its own privacy policy and the EU-US Data Privacy Framework, and we receive the booking details.

Maps

Property pages show a static map image generated by us. If you click "Activate map", the OpenStreetMap Foundation (UK) serves map tiles to your browser and sees your IP address; nothing is loaded before that click. Legal basis: your request (art. 6(1)(a)).

Changes

We update this notice when our processing changes. The date at the top shows the current version.