This privacy policy is destined for users of the website hosted at (hereinafter the “Website”) by Tanger City Center, S.A., holder of Company Registration No. (RC) nº 28.213 Tax ID No. (IF) 04908336 Common Company Identifier (ICE) 000066530000033) in its capacity as Data Controller (hereinafter the «Company»).

As the Data Controller, it processes personal data in order to respond to users’ needs and requests for information, whilst guaranteeing their privacy.

In all events, the Company undertakes to abide by the governing principles that ensure the confidential and secure nature of the data collected, guaranteeing complete transparency and users’ control over their personal data.

Data processing conducted by the Data Controller is subject to the provisions of Law No. 09-08 (hereinafter «the Law») on the protection of natural persons regarding the processing of personal data, the decrees for the application of the law and the decisions adopted by the regulatory bodies, as well as declaration receipt No. D-M-283/2023;

Object of processing

The data are collected by the Company for specific legitimate and lawful purposes, pursuant to the provisions of article 3 of the Law, and to this end to guarantee the following:

  • Managing users’ registration on the website;
  • Managing requests for brochures and documents relating to real estate projects;
  • Managing requests for quotes;
  • Managing requests for meetings and appointments;
  • Managing the exercise of rights stipulated in the legal provisions for users, namely:



  • Right to access: the right to obtain confirmation as to whether or not the personal data provided is subject to processing and to receive notification thereto;
  • Right to rectification: the right to rectify incorrect personal data or to complete incomplete data;
  • Right to opposition: the right to oppose at any time the processing of the personal data collected, provided that it is based on legitimate grounds;
  • Right to withdraw consent: in those cases where the grounds for data processing is based on the users’ consent, they are entitled to exercise this right at any time without the need to justify said decision.


  • Compilation of business statistics;


At all events, and in each of the aforementioned cases, the Company shall take all possible measures to ensure the security and confidentiality of the personal data entrusted to it, in compliance with the laws and regulations in force.

The Data Controller

The personal data are collected and processed by the Company, included on the Tangier Business Register under entry No. 28.213 and with registered address in Tangier, Place du Maghreb Arabe, Immeuble R4A, 5ème étage, numéro D, Morocco, acting in its capacity as the Data Controller for the aforementioned user data obtained as a result of their use of the website.

The Company shall likewise act as the Data Protection Officer (DPO).

All actions within the exercise of the rights granted to users for the purpose of managing their data, and all requests made by said users, must be reported  to the following email address or by post to DPO Tanger, Place du Maghreb Arabe, Immeuble R4A, 5ème étage, numéro D, Morocco.

Data Recipients

When accessing the website, users wishing to benefit from the services available thereon are required to provide certain personal data that are processed for the purposes described above, pursuant to the legal provisions applicable in this regard.

The data susceptible to collection can be classified as follows:

  • Identification data (surname, first name, email address, telephone number, postal address, and where required, a copy of personal ID as proof of identification for the purpose of exercising the right to access, rectification or opposition or in response to a legal requirement);
  • Data relating to your ACCOUNT management and security (usernames, passwords);
  • Data relating to the monitoring of the business relationship: requests for information, records of interactions with the services;
  • Connection and cookie data (IP addresses, logins);
  • Ensuring the correct functioning of the website and providing users with the tools necessary for use thereof;
  • Analysis, improvement and optimisation of website use;
  • Resolution of complaints, incidents or requests via the channels enabled for this purpose: contact form;
  • Sending of Christmas or birthday greetings;
  • Definition of new audiences via the Facebook Platform based on the characteristics of the Espacia customer database. For this purpose, the database will be previously anonymised, in accordance with the privacy policy. (For further information, you may consult the Facebook privacy policy at

All data collected via the website that allows the direct or indirect identification of users shall be considered personal data and shall therefore be processed in accordance with this policy.

Specifically, the Data Controller may collect personal data in the following cases:

  • During your visit to the website;
  • While you register with the website;
  • During interaction with the addressees via the website;
  • When you request contact with the Company.

Regardless of the method of collection, the Data Controller undertakes to inform users of the use to which the processed data shall be put; whether the data requested is of a compulsory or optional nature; the possible consequences for users in the event of failure to respond; the recipients of the data; and the existence and means of exercising their rights of access, rectification and opposition to the processing of their data.

These data may be accessed by persons involved in the commercialisation and marketing of real estate projects (duly authorised members of the commercial department and working in the sphere of the offers) as well as the website’s technical administrators and authorised IT service providers.

No personal data are collected without the user’s knowledge or processed for purposes other than those described above.

Conservation period

The data shall be kept for five (5) years following the users’ last connection to the website or their personal area.


Data collection is carried out solely with the users’ clear and specific consent.

The data are collected directly from users, when requests and orders are made, during connections and the various forms of interaction with the Company via requests made on line, email or other means.

During the website registration process, users are asked to fill in various forms and provide certain personal data in order to be able to take advantage of the various services the Company offers. When so required by law, the Company undertakes to obtain the users’ consent and/or allow them to object to the use of their data for certain purposes.

The Company may send commercial information to those users that have given their consent thereto. Should users subsequently no longer wish to receive this information by email, they may at any time send an email free of charge and without stipulating any other reason to the following address of the DPO:


Transfer abroad

For the purposes of consolidation, storage and processing, the Company is obliged to pass on user data to the DPO located abroad, in this case in Spain, in accordance with authorisation No. T-M-76/2023, granted by the National Commission for the Control of Personal Data Protection.