How we collect, use, and protect your personal data
The data controller responsible for your personal data is:
Nawrass is committed to protecting the privacy and security of the personal data entrusted to us by our clients, parents, guardians, and camp participants. This Privacy Policy explains how we collect, use, share, and safeguard your information in alignment with the General Data Protection Regulation (GDPR) and applicable Moroccan data protection law (Law 09-08).
We collect the following categories of personal data, depending on your relationship with Nawrass:
| Category | Data Types |
|---|---|
| Identity Data | Full name, date of birth, nationality, gender, passport or national ID number |
| Contact Data | Email address, phone number, postal address |
| Company Data | Company name, job title, corporate email, company address (for B2B clients) |
| Child Data | Participant's full name, date of birth, age, school, language preferences |
| Health Data | Allergies, medical conditions, dietary restrictions, current medications, disability information, medical certificates |
| Financial Data | Payment method details, billing address, transaction records |
| Communication Data | Correspondence via email, contact forms, and phone calls |
| Technical Data | Language preference (stored via cookie), browser type, pages visited (aggregated, non-identifying) |
Health data is classified as special category data under the GDPR and is processed only with explicit consent and strictly for the purpose of ensuring the safety and well-being of camp participants.
We process your personal data for the following purposes:
Under the GDPR, we rely on the following legal bases for processing your personal data:
Nawrass does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data only in the following limited circumstances:
We do not share your data with any third-party marketing, advertising, or analytics companies.
The Nawrass website uses essential cookies only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
nawrass_lang |
Stores your preferred language (EN, FR, or AR) so that the website displays in your chosen language on return visits. | 1 year | Essential |
Because we use only essential cookies that are strictly necessary for the website to function, no cookie consent banner is required. However, you may delete or block cookies through your browser settings at any time. Please note that disabling the language preference cookie will cause the website to default to English on each visit.
The Nawrass website loads icon libraries and font files from external content delivery networks (CDNs). These services may set their own cookies or collect aggregated technical data. Nawrass does not control these third-party cookies and recommends reviewing the privacy policies of these providers if you have concerns.
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with our legal obligations:
After the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request earlier deletion of your data by exercising your right to erasure (see section 8 below).
Under the GDPR and applicable Moroccan data protection law, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest its accuracy.
Please note that certain rights may be limited where we have a legal obligation to retain data or where data is necessary for the performance of a contract.
To exercise any of the rights described above, or to ask questions about how your data is processed, please contact us:
We will respond to your request within 30 calendar days of receipt. In order to verify your identity, we may ask you to provide a copy of a valid identification document. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.
If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority. For residents of the European Union, this is the data protection authority in your member state. In Morocco, complaints may be directed to the Commission Nationale de controle de la protection des Donnees a caractere Personnel (CNDP).
Nawrass reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes:
We encourage you to review this page periodically to stay informed about how we protect your data. Continued use of our services after changes are posted constitutes your acceptance of the updated policy.
