Privacy policy

This page describes what information may be collected when you visit Mahi Binebine’s site, why it is collected, how long it is kept, and which rights you can use.

The site presents the work: paintings, sculptures, books and exhibitions. It does not sell works, take payment, or keep a file of clients.

Mahi Binebine is responsible for the processing described here. The site is published from Marrakech. Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data applies. If you are in the European Union or the United Kingdom, the rights of your country may also be open to you.

Controller: Mahi Binebine, painter, sculptor and writer, Marrakech.

A question about your information is sent from the Contact page of this site. The form belongs to the site: the message is stored here and read by the artist and his team.

Public presences, separate from this site: Instagram, X and Facebook, linked at the bottom of the page. Each of those services applies its own rules.

What is collected depends on what you do. Simply reading the pages does not require an account.

People who write

• the name and the details you choose to give
• the content of your message: an exhibition, a meeting, the press, a question about a work or about your information
• the date it was sent

Visitors

• technical connection data, useful for running and securing the site: an approximate address, the browser, the pages requested, the date
• a strictly necessary tracer, only if you open the administration area

Administration

• the email address, the name and the encrypted password of the people authorised to publish
• the session that keeps that connection open

What this site does not collect

• no payment, no invoice, no purchase history
• no copy of an identity document
• no video surveillance, no guestbook
• no job applications, no family file, no birthdays
• no newsletter sent from this site

Most of the information comes from you, when you write. The rest is produced by the visit itself.

• the form on the Contact page: name, email address, subject and message
• the host’s technical logs
• the session tracer, if you sign in to the administration

The site does not fetch profiles from professional networks, and it does not tie your visit to a purchase.

A piece of information is used only for a precise reason:

• to answer a request, or to prepare an exhibition, a meeting or a working relationship you have asked for
• to run the site and protect it
• to meet an obligation when the law requires it
• with your agreement, only if a future use asks for it clearly — that is not the case today

Legitimate interest is a real reason to present the work, to reply and to keep the site safe, without overriding your rights. No advertising profile is built.

Replying to a message

To read your request, answer it, and keep a useful trace. Basis: legitimate interest, or steps related to an exhibition you proposed yourself.

Showing the pages

To deliver the works, the books, the exhibitions and the news. Basis: legitimate interest.

Protecting the administration

To limit access to authorised people, to prevent an intrusion, and to keep the session for the length of the connection. Basis: a legitimate interest in security.

Showing the home film

The video loop is served directly by the site, with no third-party player and no account. Basis: a legitimate interest in presenting the work.

Legal obligation

To keep or disclose information only when a text requires it. Basis: legal obligation.

This site sends no newsletter, no offer and no promotional message. Your details are not sold, and they are not handed to an agency to advertise a third party.

Instagram, X and Facebook are public accounts. Following them is a choice you make on those services, with their own notification settings.

If a non-essential communication were ever offered from this site, a separate agreement would be asked for, with a simple way to withdraw it.

Access is limited to the people who edit the site and to the providers who are indispensable:

• the site’s technical host, in order to run it
• Instagram, X or Facebook, only if you open those links

Those providers act only for the service concerned. No marketing agency, no payment service, no bank and no insurer receives a file from this site.

Information may be given to an authority if the law requires it. If the hosting changes, the information needed to run the site may follow, under the same duty of confidentiality.

The pages and the technical logs are with the site’s host. That provider may be established outside Morocco. The host’s precise details are given on written request, through the Contact page.

The home film is served by the site itself. The message you send is kept in the site’s database, with that same host. Social accounts remain on their own platforms.

Nothing is kept longer than the use that justifies it.

• a message: long enough to answer it and keep a useful trace, then it is deleted or archived
• technical logs: a limited time, tied to security
• an administration account: for as long as access is needed, then it is removed
• the administration session: for the length of the connection

This site has no indefinite archive of owners of works: the site does not sell. When there is no longer a reason to keep something, it is erased or made anonymous.

The site is published from Marrakech. Hosting may nevertheless process data outside Morocco, and outside the European Economic Area.

The host is chosen to run the site. The provider and the country of hosting are given on request, through the Contact page. No transfer is organised in order to build a commercial file abroad.

You can exercise them free of charge, from the Contact page, stating that the subject is personal data.

Access

To obtain a copy of the information that concerns you.

Correction

To have inaccurate information corrected.

Erasure

To ask for deletion when there is no longer a reason to keep it, or when the law allows it.

Restriction

To ask that processing be paused, for example while contested information is checked.

Objection

To object to processing based on legitimate interest, for a reason tied to your situation.

Portability

When European law applies and you provided the information in a setting that opens this right, to receive a structured copy.

Automated decision

No decision with a legal effect is taken here by automatic processing. There is no profiling.

To reply, you may be asked to say who you are: your name and, if there is a doubt, proof of identity. A request that is clearly abusive may be refused or charged at a reasonable cost. Other requests are free.

Access to the administration is restricted, the password is not stored in clear text, and the session serves only to keep the connection. The people who edit the site open messages only in order to answer them.

If a breach that presents a risk had to be notified, it would be, under the conditions set by law, to you and, when the law requires it, to the competent authority.

A question or a disagreement is first handled through the Contact page.

In Morocco, the authority is the Commission nationale de contrôle de la protection des données à caractère personnel (CNDP), www.cndp.ma.

If you live in the European Union, the European Economic Area or the United Kingdom, you may also contact the data protection authority of your country.

This page may be updated. The date under the title is that of the latest version. A substantial change is carried on this page. Using the site after that date means you have read the version on screen.

For a question about this page or about information that concerns you: the Contact page of this site. The message is received and kept on this site.

No postal address, telephone number or separate email is published here. Asking through this channel makes it possible to give them when your request needs them.