Dar Gnawa Museum is a cultural museum that aims to promote and showcase the richness and diversity of the Gnawa culture, a musical and spiritual tradition that originates from sub-Saharan Africa and was transmitted to Morocco for centuries. The Dar Gnawa Museum respects the privacy of its visitors, members, volunteers, partners, artists and employees, and is committed to protecting their personal data in accordance with the applicable legislation, and in particular the provisions of Law No. 09-08 of February 18, 2009 on the protection of individuals with regard to the processing of personal data.
This privacy policy describes the types of personal data that we collect and process, the purposes and legal bases of these processing, the recipients and transfers of these data, the retention periods, the rights of the data subjects, and the security measures that we implement to protect these data.
This privacy policy applies to all personal data that we collect and process when you visit the website of the museum ” www.dargnawa.net “, when you apply for membership, when you subscribe to our newsletter, or when you participate in an event or activity organized by the museum.
We invite you to read this privacy policy carefully and to consult it regularly to keep yourself informed of any possible changes.
What personal data do we collect and process?
Personal data are any information that allows to identify directly or indirectly a natural person. We do not collect personal data without informing you and we only collect the personal data strictly necessary for the purposes described below.
We may collect and process the following personal data:
- When you visit the website of the museum: In general, you can browse the website of the museum without revealing any personal data. The only information that we collect during general browsing on the site are information intended for the server log (IP address/internet protocol, domain name, browser type and version, operating system and platform, the site from which you are connected, the files that you download, the pages that you visit, the dates and times of these visits, etc.) and the messages or comments that you post online.
- When you apply for membership to the museum: Name, first name, title, gender, date of birth; Member number, if applicable; Last institution where you work/have worked, function, professional address, email, phone, fax; Area(s) of interest, specialty(ies), language(s) spoken; National and international committee(s) that you wish to join; Payment method and bank details.
- When you subscribe to our newsletter: Email address, name, first name, preferred language.
- When you participate in an event or activity organized by the museum: Name, first name, email, phone, function, institution, country, payment method and bank details, specific needs (food, accessibility, etc.), photographs or videos taken during the event or activity.
Why do we collect and process your personal data?
We collect and process your personal data for the purposes and on the legal bases described below:
- To manage your membership to the museum, to provide you with the services and benefits related to your membership status, to inform you of the news and activities of the museum, and to respond to your requests or complaints. The legal basis for this processing is the execution of the membership contract that you have concluded with the museum.
- To manage your registration and participation in the events or activities organized by the museum, to provide you with the services and information related to these events or activities, and to respond to your requests or complaints. The legal basis for this processing is the execution of the registration contract that you have concluded with the museum.
- To send you our newsletter and inform you of the news, events, activities, offers or surveys of the museum. The legal basis for this processing is your consent, which you can withdraw at any time by clicking on the unsubscribe link present in each newsletter or by contacting us at the coordinates indicated below.
- To analyze and improve the functioning, use and performance of the museum’s website, and to ensure its security and reliability. The legal basis for this processing is the legitimate interest of the museum to optimize its website and to protect it against computer attacks.
- To comply with our legal or regulatory obligations, or to respond to a request from the competent authorities. The legal basis for this processing is the compliance with a legal obligation to which the museum is subject.
- To defend our rights or interests in case of litigation or dispute. The legal basis for this processing is the legitimate interest of the museum to protect itself against legal actions.
To whom do we communicate and transfer your personal data?
We do not communicate and transfer your personal data to third parties without your consent, except in the following cases:
- To the national and international committees that you join or wish to join, in order to manage your membership, to provide you with the services and benefits related to your membership status, and to inform you of the news and activities of these committees.
- To the service providers that we mandate to ensure the functioning, maintenance, hosting, security or analysis of the museum’s website, or to organize the events or activities of the museum.
- To the competent authorities, when we are required by law or by a court decision, or when it is necessary to protect our rights or interests.
- To third parties involved in a merger, acquisition, sale or restructuring of the museum, subject to the respect of appropriate guarantees for the protection of your personal data.
Some of these recipients may be located outside Morocco, in particular in the European Union or in countries offering an adequate level of protection according to the National Commission for the Control of the Protection of Personal Data (CNDP). In case your personal data are transferred to countries that do not offer an adequate level of protection, we will ensure that these transfers are framed by standard contractual clauses approved by the CNDP, or by any other mechanism compliant with the applicable legislation.
How long do we keep your personal data?
We keep your personal data for the duration necessary for the purposes for which they were collected and processed, and in compliance with the applicable legal prescription periods. As an indication, we keep your personal data according to the following criteria:
- For the management of your membership to the museum: for the duration of your membership, and for a maximum of three years after the end of your membership, unless you request to exercise your right to erasure or to be forgotten.
- For the management of your registration and participation in the events or activities of the museum: for the duration of the event or activity, and for a maximum of three years after the end of the event or activity, unless you request to exercise your right to erasure or to be forgotten.
- For sending you our newsletter and informing you of the news, events, activities, offers or surveys of the museum: for the duration of your subscription, and for a maximum of three years after the end of your subscription, unless you request to exercise your right to erasure or to be forgotten.
- For analyzing and improving the functioning, use and performance of the museum’s website, and ensuring its security and reliability: for the duration of your browsing on the site, and for a maximum of thirteen months after the end of your browsing, unless you request to exercise your right to erasure or to be forgotten.
- To comply with our legal or regulatory obligations, or to respond to a request from the competent authorities: for the duration required by the applicable law or regulation, or by the court decision or the competent authority.
- To defend our rights or interests in case of litigation or dispute: for the duration of the litigation or dispute, and for a maximum of three years after the end of the litigation or dispute, unless you request to exercise your right to erasure or to be forgotten.
What are your rights regarding your personal data?
You have the following rights regarding your personal data, subject to the conditions and limitations provided by the applicable legislation:
- The right to access your personal data, to obtain a copy of them, and to verify their accuracy and completeness.
- The right to rectify your personal data, to correct any errors or omissions.
- The right to erase your personal data, to delete them from our databases or systems, when they are no longer necessary for the purposes for which they were collected and processed, or when you withdraw your consent.
- The right to be forgotten, to request that your personal data are no longer used or disseminated, when they are no longer relevant, or when you withdraw your consent.
- The right to object to the processing of your personal data, to oppose, for legitimate reasons, that your personal data are used for purposes other than those for which they were collected and processed, or when you withdraw your consent.
- The right to limit the processing of your personal data, to request that the processing of your personal data be suspended or restricted, when you contest their accuracy, their legality or their necessity, or when you withdraw your consent.
- The right to data portability, to request that your personal data be transferred to another data controller, in a structured, commonly used and machine-readable format, when the processing is based on your consent or on a contract, and when the processing is carried out by automated means.
- The right to withdraw your consent, to revoke your consent to the processing of your personal data, at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal.
- The right to lodge a complaint, to file a complaint with the CNDP or with any other competent authority, if you consider that the processing of your personal data violates the applicable legislation.
How can you exercise your rights regarding your personal data?
You can exercise your rights regarding your personal data by contacting us at the coordinates indicated below, and by providing us with a proof of your identity. We will respond to your request within a reasonable time, in accordance with the applicable legislation.
How do we protect your personal data?
We implement appropriate technical and organizational measures to ensure the security, integrity and confidentiality of your personal data, and to prevent their loss, alteration, unauthorized access or disclosure. These measures include encryption, firewalls, access control, backups, audits, training and awareness.
We also require that our service providers and partners who process your personal data on our behalf comply with the same level of security and confidentiality.
However, we cannot guarantee that the transmission of your personal data over the internet or any other network is completely secure, and we cannot prevent any possible breach that may occur despite our efforts. In case of a breach that may affect your personal data, we will notify you and the CNDP as soon as possible, and we will take all necessary steps to limit the impact and consequences of the breach.
How can you contact us?
If you have any questions, suggestions, complaints or compliments regarding the privacy policy of the Dar Gnawa Museum, you can contact the public relations service of the museum, by phone, email or postal mail, at the following coordinates:
• Postal address: N°41, Derb Jdid, Marrakech 40000
• Email address: [email protected]
• Phone: +212660-292118