CNDP notice — stay data in Morocco

This notice is published by Kyvvio Maroc SARL. It describes guest-data processing for properties located in Morocco (law 09-08). It is separate from OPCLINE LTD’s privacy policy (United Kingdom).

For a stay in Morocco, the property manager (controller) collects the police form required by law 80-14 and, if enabled, a selfie via the Morocco selfie option.

Kyvvio Maroc SARL (processor) hosts this data for the agency: name, date and place of birth, nationality, ID type and number, CIN/passport scans, optional selfie, marriage certificate for a Moroccan couple.

Legal obligation for tourist accommodation (DGSN police form, law 80-14).

Performance of the stay contract (pre-check-in, access, cleaning).

Legitimate interest / consent for the transactional WhatsApp channel already collected on the pre-check-in form.

ID scans and selfies are kept for the stay then purged on the configured delay (90 days by default, aligned with the agency retention setting).

Police forms sent to the station remain the agency’s duty toward the DGSN.

App hosting and database (Supabase / PostgreSQL), WhatsApp messages (Meta Cloud API).

Morocco-market settlement goes through PayZone, Cash Plus or RIB transfer — Moroccan providers, in dirhams.

Access, rectification, objection and deletion within the limits of the legal police-form duty.

Contact: hello@kyvvio.com. Complaint to the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel).