Skip to main content

Privacy Policy

How we process and protect your personal data.

Last updated: July 27, 2026

The West Mediterranean Society of Cardiology (“WMSC”, “we”) is committed to protecting your privacy. This policy explains what personal data we collect through wmsc.ma, why, on what legal basis, with whom it is shared, how long it is kept and what rights you have.

1. Data controller

The data controller is the West Mediterranean Society of Cardiology, 103 rue de la Liberté, Tangier, Morocco. For any question about your data: contact@wmsc.ma — +212 5 39 93 23 97.

2. Data we collect

We only collect the data you voluntarily provide through the site's forms, together with audience-measurement data (only with your consent):

  • Congress registration: first and last name, email, institution, country, selected package and participation details.
  • Abstract/poster submission: author name(s), email, institution, abstract title and content, PDF file.
  • Contact form: name, email, subject and message.
  • Newsletter: email address.
  • Members area: email and account (authentication) data.
  • Analytics: anonymized browsing data via Google Analytics, only if you have consented.

3. Purposes and legal bases

  • Manage your registration, submissions and congress participation (pre-contractual / contractual measures).
  • Respond to your enquiries via the contact form (legitimate interest).
  • Send confirmation emails and, where relevant, event information (performance / consent).
  • Measure and improve the site's audience (consent).

4. Cookies and analytics

No measurement cookie is set before your consent. We use Google Analytics 4 with Consent Mode v2: until you accept, no analytics cookie is written. You can accept or decline via the banner and change your choice at any time using the “Manage cookies” link at the bottom of every page.

We also use strictly necessary local storage for the site to work (remembering your consent choice and your language). These are not used for advertising tracking.

5. Recipients and processors

Your data is never sold. It is processed by technical providers acting on our behalf:

  • Supabase — database, authentication and file hosting.
  • Resend — sending transactional emails (confirmations, notifications).
  • Google Analytics (Google) — audience measurement, only after consent.
  • Vercel — website hosting.

6. Data retention

We keep your data for as long as necessary for the purposes described (organising and following up the congress), then delete or anonymize it. Contact messages are kept for the time needed to handle your request. You may ask us to delete your data at any time.

7. Transfers outside the EU / Morocco

Some of our providers may host or process data outside Morocco and the European Union. Where this is the case, such transfers are governed by appropriate safeguards (standard contractual clauses or equivalent mechanisms).

8. Security

We implement reasonable technical and organizational measures (encryption in transit, access control) to protect your data against loss, unauthorized access or disclosure.

9. Your rights

Under applicable law (GDPR in the EU, Law 09-08 in Morocco), you have the following rights:

  • Access to your data and information about its processing.
  • Rectification of inaccurate data.
  • Erasure (“right to be forgotten”).
  • Restriction of and objection to processing.
  • Portability of your data.
  • Withdrawal of your consent at any time.

To exercise these rights, write to us at contact@wmsc.ma. You may also lodge a complaint with the competent authority (the CNDP in Morocco, or your country's data protection authority in the EU).

10. Contact

For any question about this policy or your personal data: contact@wmsc.ma.