1. Data Controller (Art. 13 GDPR)

Data Controller under the GDPR:

Menara Bike
Faissal Algouti
NO 139 C M Belbbekar 2
40070 Marrakech, Kingdom of Morocco

E-mail: info@menarabike.com
Website: www.menarabike.com

2. Principles of Data Processing

We process personal data only:

• to the extent necessary for the performance of a contract (Art. 6(1)(b) GDPR)
• based on your consent (Art. 6(1)(a) GDPR)
• to comply with legal obligations (Art. 6(1)(c) GDPR)
• based on legitimate interests (Art. 6(1)(f) GDPR)

3. Data We Collect

3.1 Booking Form (Website)

• First and last name
• Email address
• Phone / WhatsApp number
• Hotel or riad name
• Date, time, route, number of participants
• Language (for guide selection)

Purpose: contract execution and communication
Legal basis: Art. 6(1)(b) GDPR
Retention period: 5 years (tax/legal obligation)

3.2 WhatsApp Communication

For bookings or inquiries via WhatsApp, we store name, phone number, and message content to process your request.

Note: WhatsApp is operated by Meta Platforms Ireland Ltd. Their privacy policy also applies.

3.3 Booking Platforms

For bookings via GetYourGuide, Viator, Airbnb Experiences, Civitatis, Headout, or Klook, we receive only the data required for tour execution (name, date, number of participants).

3.4 Website / Server Logs

When visiting our website, the following technical data is automatically stored:

• IP address (anonymized)
• Browser and operating system
• Date and time of access
• Visited pages

Retention period: 30 days. No linking with other data.

4. Data Sharing

Your data is not shared with third parties except:

• as required for processing via booking platforms
• if legally required by authorities
• with your explicit consent

Data is not transferred outside the EU, except when using WhatsApp (Meta, USA – Standard Contractual Clauses apply).

5. Your Rights (Art. 15–22 GDPR)

You have the right to:

• access your stored data (Art. 15)
• rectification of incorrect data (Art. 16)
• deletion of your data (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing (Art. 21)
• withdrawal of consent (Art. 7(3))

Requests: info@menarabike.com

Complaint right: You may file a complaint with your local data protection authority.

6. Cookies

6.1 Necessary Cookies

Technically required cookies for website functionality. No personal data stored, deleted after session. No consent required.

6.2 Optional Cookies

Analytics or marketing cookies are only activated with your explicit consent via the cookie banner. You may withdraw consent at any time.

7. Data Security

We use SSL/TLS encryption for data transmission. Personal data is stored on secure servers and protected against unauthorized access.

8. Changes to This Policy

We may update this privacy policy when necessary. The current version is always available at www.menarabike.com/datenschutz.

Date: May 2026