Privacy Policy

Last updated: 27 October 2026

Twenty Campus places fundamental importance on the protection of your personal data. This Privacy Policy informs you, in accordance with Moroccan Law No. 09-08 on the protection of individuals with regard to the processing of personal data, of how we collect, use, and protect your personal information.

1. Data Controller

Controller: Twenty Campus

Telephone: +212(0) 5 22 799 790

DPO Email: contact@yamed-group.com

 

2. Data Collected

When you use the Twenty Campus website and our services, we may collect the following data:

  • Identification data: first name, last name, email address, telephone number
  • Professional data: List the data actually requested (institution, student or parent status, etc.).
  • Browsing data: IP address, browser type, pages visited, visit duration
  • Contract data: information required to manage your residence agreement
  • Communication data: the content of your exchanges with our teams via forms or email

 

3. Purposes and Legal Bases for Processing

3.1 Managing Contact and Appointment Requests

Legal basis: legitimate interest and performance of a contract. Your contact details are used exclusively to respond to your request and support you in your booking process.

3.2 Managing the Contractual Relationship

Legal basis: performance of the contract. Data required for the administrative, tax and social management of your residence agreement is processed strictly in accordance with our legal and contractual obligations.

3.3 Marketing Communications and Newsletters

Legal basis: consent . You will only receive marketing communications if you have expressly consented to them. You may withdraw your consent at any time.

3.4 Website Improvement and Audience Measurement

Legal basis: consent (analytics cookies). Anonymised browsing data helps us improve the user experience on the Twenty Campus website. 

 

4. Data Retention Periods

  • Prospect data: 3 years from the last contact
  • Contract data: 5 years after the end of the contract (statutory accounting obligations)
  • Browsing data: maximum 13 months (CNDP recommendation)
  • Marketing communications: until you withdraw your consent

 

5. Data Recipients

Your personal data is processed by authorised Twenty Campus internal teams. It may also be shared with our technical service providers (hosting provider, CRM tool, email platform) in strict compliance with the GDPR, under data processing agreements compliant with Article 28 of the Regulation.

Twenty Campus never sells, rents or transfers your personal data to third parties for commercial purposes.

 

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – obtain a copy of your personal data
  • Right to rectification – correct inaccurate or incomplete data
  • Right to erasure – request deletion of your data (“right to be forgotten”)
  • Right to restriction – restrict the use of your data
  • Right to data portability – receive your data in a structured, readable format
  • Right to object – object to processing based on legitimate interest
  • Right to withdraw consent – at any time, without retroactive effect

To exercise your rights, send your request to : [contact@yamed-group.com] or by post to Twenty Campus. We will respond within one month.

If you believe your rights have not been respected, you may lodge a complaint with the CNDP (French Data Protection Authority).

 

7. Cookies

The Twenty Campus website uses cookies to improve your browsing experience. On your first visit, a banner informs you about their use and allows you to set your preferences. You can change your choices at any time through your browser settings or the website’s cookie manager.

  • Strictly necessary cookies: required for website operation, no consent needed
  • Analytics cookies: anonymised audience measurement – consent required
  • Marketing cookies: personalisation and retargeting – consent required

 

8. Data Security

Twenty Campus implements appropriate technical and organisational measures to ensure the security, confidentiality and integrity of your personal data, including encryption of sensitive data, strict access controls and regular backups.

 

9. Changes to This Policy

Twenty Campus reserves the right to amend this Privacy Policy at any time, particularly to comply with legislative or regulatory changes. The update date shown at the top of this document will be amended accordingly. We encourage you to review this page regularly.