Privacy Policy
How surf-tamraght.com handles personal data and cookies.
Last updated: 11 November 2026.
This policy explains what personal data surf-tamraght.com collects, why, and what rights you have. We keep it short, because the site collects very little.
Who is responsible
The controller of your data is Hassan Boujnah, Travel Surf Nature SARL, Rue du Coucher de Soleil, Tamraght, 80023 Agadir, Morocco (ICE 003025749000020). Email: travelsurfnature@gmail.com.
When you visit the site
When you open a page, your browser sends our web server technical data such as your IP address, the date and time, the page you asked for and your browser type. The server needs this to send you the page. It does not keep a log of visits; it only records technical errors, to keep the site running and secure, which is our legitimate interest (Art. 6(1)(f) GDPR).
The site runs on a server in Germany rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data only on our behalf, under a data processing agreement (Art. 28 GDPR).
The site does not load anything from other companies unless you agree to analytics (see below):
- Fonts are served from our own server. Your browser does not contact Google Fonts.
- Maps are drawn from OpenStreetMap data stored on our server. No map service is loaded. The “Open in Google Maps” link only takes you to Google if you click it.
- Links to Google reviews, Instagram, Facebook and other websites open those sites, and their own privacy policies apply there.
Cookies and Google Analytics
We use Google Analytics 4 to see which pages help visitors, but only if you click “Accept” in the cookie banner. Until then, Google Analytics is not loaded and no analytics cookies are set. Your choice is saved in your browser’s local storage, not in a cookie.
If you accept, Google Analytics sets the cookies _ga and _ga_<ID>, which last up to 2 years. They record which pages you visit, for how long, how you reached the site, your device and browser, and your approximate location. A click on a WhatsApp button is counted as an event; the content of your message is not. Google Analytics 4 does not store IP addresses. The detailed analytics data is kept for 14 months and then deleted.
Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR).
You can change your mind at any time: click “Cookie settings” at the bottom of any page and choose again.
When you contact us
If you write to us on WhatsApp or by email, we receive what you send: usually your name, phone number or email address, travel dates, surf level, diet and, once you book, your flight details. We use this to answer you and to prepare your stay (Art. 6(1)(b) GDPR), and we keep it for as long as the booking and our legal accounting duties require.
- WhatsApp messages go to Hassan, who runs the camp and handles reservations. WhatsApp is run by WhatsApp Ireland Limited (Meta), and its privacy policy applies.
- Email to travelsurfnature@gmail.com is handled by Google’s Gmail service.
- Deposits paid by bank transfer are processed by your bank and ours.
Your rights
You have the right to access your data and to have it corrected or deleted. You can also ask us to limit how we use it, object to its use, receive it in a portable format, and withdraw your consent at any time. Write to travelsurfnature@gmail.com.
If you live in the EU, you can also complain to the data protection authority in your country. In Morocco, personal data is protected by Law 09-08, and the supervisory authority is the CNDP (Commission nationale de contrôle de la protection des données à caractère personnel).
Changes
If we change how the site handles data, we update this page and the date at the top. The rules for bookings are in our terms and conditions.