Last updated: May 2026 — Wajedweb SARL
1. Data Controller
The data controller for personal data collected on the Nordvity platform is:
Wajedweb SARL
Morocco
Email: privacy@nordvity.com
2. Data Collected
Nordvity collects the following data:
- Identity data: first name, last name
- Contact information: email address, phone number, WhatsApp number
- Reservation data: date, number of people, selected activity, reservation reference
- Payment data: processed exclusively by Zazu (not stored by Nordvity)
- Browsing data: IP address, pages visited, session duration (via Google Analytics / Google Tag Manager)
- Newsletter: first name, last name, email, WhatsApp (upon voluntary subscription)
3. Purposes and Legal Basis for Processing
| Purpose | Legal basis |
|---|---|
| Processing of reservations | Performance of the contract |
| Online payments (via Zazu) | Contract fulfillment |
| Sending Confirmations and Reminders | Legitimate Interest |
| Newsletter and marketing (via Leadrogen) | Consent |
| Service improvement (analytics) | Legitimate interest / Cookie consent |
| Legal compliance | Legal obligation |
4. Third-Party Service Providers
Nordvity uses the following partners to process your data:
- Zazu — secure processing of online payments. Your banking information is managed exclusively by Zazu and does not pass through Nordvity’s servers.
- Leadrogen — management of digital marketing, advertising campaigns, and sales leads. Leadrogen may process your email address and first name if you have consented to receive our marketing communications.
- Cloudinary — media hosting (photos of activities and partners)
- MongoDB Atlas — secure hosting of platform data
- Google Analytics / GTM — analysis of website audience and traffic
- Vercel — web application hosting
All of these partners are subject to strict confidentiality obligations and may only use your data for the specified purposes.
5. Retention Period
- Reservation data: 5 years after the end of the reservation (accounting requirements)
- Newsletter data: until you unsubscribe + 3 months
- Browsing data: 26 months (Google Analytics)
- Lead data (Leadrogen): 3 years from the last contact
6. Cookies
Nordvity uses the following cookies:
- Functional cookies: language preference (
nordvity_lang), admin session — necessary for the site to function, exempt from consent - Analytics cookies: Google Analytics (via Google Tag Manager GTM-T9C74BBK) — audience measurement, subject to consent
You can configure or block cookies through your browser settings.
7. Your Rights
In accordance with applicable regulations (Law 09-08 on the protection of individuals with regard to the processing of personal data in Morocco, and the GDPR for European residents), you have the following rights:
- Right of access: to obtain a copy of your data
- Right to rectification: to correct inaccurate data
- Right to erasure: to have your data deleted in the cases provided for by law
- Right to object: to object to the processing on legitimate grounds
- Right to data portability: to receive your data in a structured format
- Right to withdraw consent: at any time for marketing purposes
To exercise your rights, contact: privacy@nordvity.com. We guarantee a response within 30 days.
8. Data Security
Nordvity implements appropriate technical and organizational measures to protect your data: SSL/TLS encryption, JWT authentication, restricted access to data, and secure hosting on MongoDB Atlas and Vercel.
9. Changes to the Policy
This policy may be amended at any time. The update date at the top of the document is authoritative. In the event of a substantial change, registered users will be notified by email.