1. Purpose and applicable framework
This policy describes personal data processing for rentimo.ma, the Rentimo web and mobile applications and support communications. It is established in particular under Moroccan Law No. 09-08 on the protection of individuals with regard to personal data processing and its implementing rules.
BI-CENTER SARL completes applicable formalities with the Moroccan Data Protection Authority (CNDP). Receipt or authorization references are published when available and required.
2. Who controls the data?
BI-CENTER SARL controls processing required for the website, Rentimo accounts, customer relations, security, billing for its own services and support.
For guest, owner, employee, provider, reservation and operational data entered by a customer organization, that organization generally determines the purposes and acts as controller. BI-CENTER SARL then processes the data on its instructions as a service provider.
3. Data collected
- Account data: name, email, phone, language, role and verification status.
- Company data: identity, contact details, settings, billing identity and logo.
- Operational data: properties, units, reservations, calendars, tasks, tickets, comments, expenses, payments and invoices.
- Guest data: identity, contact details, stay and, when lawfully selected by the customer, documents required for operations or regulation.
- Technical data: IP address, session identifiers, access logs, device, browser, errors and security events.
- Communications and data from integrations enabled by the customer, including iCal calendars and communication services.
4. Purposes
- Create, verify and secure accounts.
- Provide subscribed modules and requested synchronization.
- Manage roles, permissions, notifications and mobile operations.
- Prevent unauthorized access, abuse, fraud, conflicts and incidents.
- Provide support, maintenance, backups and service continuity.
- Issue business documents and comply with legal obligations.
- Improve performance and fix errors using proportionate technical measurements.
- Send marketing only where law and user preferences permit.
5. Grounds for processing
Depending on context, processing is based on performance of a contract or pre-contractual steps, legal obligations, consent where required, and legitimate security, abuse prevention and service improvement interests, subject to individual rights.
Customers remain responsible for a valid basis and proper notice for data they import or enter into Rentimo.
6. Recipients and providers
Data is available to authorized customer users according to role and to authorized BI-CENTER SARL personnel where required for support, security or operation.
Technical providers may support hosting, transactional email, mobile notification, monitoring, backup or customer-enabled integrations. They receive only necessary data and are contractually governed where required. Key providers currently include Webdock for hosting infrastructure and Brevo for transactional email.
7. Hosting and international transfers
Rentimo may use providers outside Morocco. International transfers are subject to the procedures and safeguards required by Law 09-08, including the applicable CNDP authorization or transfer request.
Customers must notify BI-CENTER SARL before using Rentimo for data categories or purposes requiring specific authorization.
8. Retention
Account and operational data is retained during the contract and for a limited period needed for portability, disputes, security and legal compliance. Accounting and contractual records are retained for the period required by applicable law.
Technical logs have proportionate security and diagnostic retention. Backups use a separate rolling cycle. Deleted information may remain in protected backups until that cycle expires.
9. Security
- HTTPS encryption in transit.
- Passwords stored using one-way derivation rather than plain text.
- Company, user, role and permission controls.
- Logical separation between customer data.
- Security event logging and abuse rate limits.
- Backups and restore exercises.
- File type, size and access controls.
- Operational monitoring and dependency updates.
10. Your rights
Subject to Law 09-08, you may request access, correction and object on legitimate grounds to certain processing. Where consent applies, it can be withdrawn for the future.
Email contact@bi-center.com and state the request. Proportionate identity checks may apply. For customer-controlled data, contact the customer first. You may also contact the CNDP through its official procedures.
11. Identity documents and sensitive data
Customers must collect only what is necessary, restrict authorized users, complete applicable CNDP procedures and delete documents when no longer needed. Processing a Moroccan national identity number may require specific authorization.
13. Children
Rentimo is a professional service and does not offer accounts to children. If information about a minor is necessary for a booking, the customer must ensure lawfulness, proportionality and required authorization.
14. Changes and contact
This policy may change with features, providers or legal requirements. Material changes are communicated appropriately.
Controller: BI-CENTER SARL, Avenue Moulay Ismail, Tangier 90000, Morocco. Privacy contact: contact@bi-center.com.
Official legal sources
Reference materials used to structure these pages. Only the competent authorities can provide an official interpretation.
A question about this document?
Email BI-CENTER SARL and identify the page and your request.