Hammam Al Alba

Privacy Policy

1. Who is responsible for your data

This website is operated by STE ASILAH AL ALBA SARL, the company that runs the Hammam Al Alba hammam and spa venues in the medinas of Asilah and Tetouan, in Morocco.

  • Company: STE ASILAH AL ALBA SARL
  • Address: Lot. Nakhil 35, Asilah 90050, Morocco
  • Tax identification: 4936528
  • ICE: 001546911000051
  • Email: info@hammamalalba.com
  • Phone: +212 613 429190
  • Website: https://hammamalalba.com

We are the data controller for the personal data described below.

We are established in Morocco and we comply with Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data. Because we also offer our services to visitors located in the European Union, the EU General Data Protection Regulation (Regulation (EU) 2016/679) applies to that processing as well.

2. What this website does and does not do

This is a static informational website, published in three languages: Spanish, English and French. It tells you about our venues and our treatments, and lets you request a booking. Nothing else happens on it.

This website sets no cookies whatsoever.

  • No analytics of any kind: no Google Analytics, no tag manager, no visitor counter.
  • No advertising and no ad networks.
  • No tracking pixels.
  • No social-media plugins, buttons or embedded feeds.
  • No session cookies and no preference cookies.
  • No use of your browser's localStorage or sessionStorage.

Because nothing is stored on your device and nothing follows you around, this site shows no consent banner: there is nothing to consent to.

The typefaces you see are served from our own servers, not from Google Fonts or any other outside service.

There are no embedded third-party elements anywhere on the site: no embedded Google Map, no embedded video, no embedded social feed. The links to Google Maps, Instagram and WhatsApp are ordinary links: they take you off our site, and nothing is loaded from those services while you browse.

The site has no user accounts, no comments, no forum, no file uploads and no newsletter.

3. What data we collect and when

When you send a booking request. The booking form is at /es/reservar/ in Spanish, /en/booking/ in English and /fr/reservation/ in French. It collects:

  • Your first name and last name
  • Your email address
  • Your phone number
  • The booking details you choose: the venue (Asilah or Tetouan), the experience, the number of people, and the date and time
  • A record that you ticked the box accepting the Terms and Conditions and this Privacy Policy, together with the date and time you did so

The form also contains a hidden anti-spam field that real visitors never see or fill in. If a request arrives with it filled in, it is discarded without being processed.

No payment is taken on this website. We never collect or store card details.

When you contact us directly. If you write to us by email or WhatsApp, or call us, we process the data in your message solely to answer your enquiry.

Technical server logs. Our hosting provider keeps standard server logs, which include the IP address making the request and the time of the request. They exist so the site stays secure and available.

4. Why we use it, and on what legal basis

  • Booking data. We use it to arrange and provide the service you have asked for. The legal basis is the performance of a contract with you and the steps taken at your request before entering into it.
  • Keeping records of bookings after the service has taken place. The legal basis is compliance with the legal, tax and accounting obligations that apply to us.
  • Technical server logs. The legal basis is our legitimate interest in keeping this website secure and available.

5. Who we share it with

There are only two recipients.

Bókun, the booking platform where your reservation is created and managed. It is operated by Tripadvisor LLC, 400 1st Avenue, Needham, MA 02494, United States. Bókun acts as a processor on our behalf. Its privacy policy:

https://www.bokun.io/privacy-policy

Vercel Inc., the hosting provider that serves this website, based in the United States. It keeps the technical server logs described above, for security and so that the service works.

We do not sell your data, rent it, or share it for advertising. There are no other recipients.

6. International transfers

Both Bókun and Vercel are based in the United States, so using them involves transferring data outside the European Economic Area.

According to Bókun's privacy policy, those transfers are covered either by an adequacy decision of the European Commission or by Standard Contractual Clauses.

7. How long we keep it

We keep booking data for as long as it is needed to provide the service, and afterwards for the periods required by the legal, tax and accounting obligations that apply to us. The record of your acceptance of the Terms and Conditions and of this policy is kept with the booking.

8. Your rights

You have the right to ask for access to your personal data, and for its rectification, its erasure, the restriction of its processing, or its portability. You may also object to processing. Where processing is based on your consent, you may withdraw it at any time, without affecting processing already carried out.

To exercise any of these rights, write to info@hammamalalba.com. We may ask you for proof of identity before acting on the request.

You also have the right to lodge a complaint with a supervisory authority. In the European Union, that is the data protection authority of the country where you live. In Morocco, it is the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

9. Security

The whole site is served over an encrypted connection (HTTPS). Your booking data travels from your browser to our server and from there to Bókun. It is not stored in any database of the website itself.

10. Links to other websites

Our pages link to other sites, such as Google Maps, Instagram and WhatsApp. Once you follow one of those links, this policy no longer applies. We do not control them, and we suggest you read their own privacy policies.

11. Children

Our services are contracted by adults, and this website is not directed at children; we do not knowingly collect their data. When a booking includes minors, it is made by the adult responsible for them.

12. Changes to this policy

We may update this policy if the way we work changes or if a new legal requirement makes it necessary. The version published on this page is always the current one.

Last updated: 11 September 2026