The West Mediterranean Society of Cardiology (“WMSC”, “we”) is committed to protecting your privacy. This policy explains what personal data we collect through wmsc.ma, why, on what legal basis, with whom it is shared, how long it is kept and what rights you have.
1. Data controller
The data controller is the West Mediterranean Society of Cardiology, 103 rue de la Liberté, Tangier, Morocco. For any question about your data: contact@wmsc.ma — +212 5 39 93 23 97.
2. Data we collect
We only collect the data you voluntarily provide through the site's forms, together with audience-measurement data (only with your consent):
- Congress registration: first and last name, email, institution, country, selected package and participation details.
- Abstract/poster submission: author name(s), email, institution, abstract title and content, PDF file.
- Contact form: name, email, subject and message.
- Newsletter: email address.
- Members area: email and account (authentication) data.
- Analytics: anonymized browsing data via Google Analytics, only if you have consented.
3. Purposes and legal bases
- Manage your registration, submissions and congress participation (pre-contractual / contractual measures).
- Respond to your enquiries via the contact form (legitimate interest).
- Send confirmation emails and, where relevant, event information (performance / consent).
- Measure and improve the site's audience (consent).
4. Cookies and analytics
No measurement cookie is set before your consent. We use Google Analytics 4 with Consent Mode v2: until you accept, no analytics cookie is written. You can accept or decline via the banner and change your choice at any time using the “Manage cookies” link at the bottom of every page.
We also use strictly necessary local storage for the site to work (remembering your consent choice and your language). These are not used for advertising tracking.
5. Recipients and processors
Your data is never sold. It is processed by technical providers acting on our behalf:
- Supabase — database, authentication and file hosting.
- Resend — sending transactional emails (confirmations, notifications).
- Google Analytics (Google) — audience measurement, only after consent.
- Vercel — website hosting.
6. Data retention
We keep your data for as long as necessary for the purposes described (organising and following up the congress), then delete or anonymize it. Contact messages are kept for the time needed to handle your request. You may ask us to delete your data at any time.
7. Transfers outside the EU / Morocco
Some of our providers may host or process data outside Morocco and the European Union. Where this is the case, such transfers are governed by appropriate safeguards (standard contractual clauses or equivalent mechanisms).
8. Security
We implement reasonable technical and organizational measures (encryption in transit, access control) to protect your data against loss, unauthorized access or disclosure.
9. Your rights
Under applicable law (GDPR in the EU, Law 09-08 in Morocco), you have the following rights:
- Access to your data and information about its processing.
- Rectification of inaccurate data.
- Erasure (“right to be forgotten”).
- Restriction of and objection to processing.
- Portability of your data.
- Withdrawal of your consent at any time.
To exercise these rights, write to us at contact@wmsc.ma. You may also lodge a complaint with the competent authority (the CNDP in Morocco, or your country's data protection authority in the EU).
10. Contact
For any question about this policy or your personal data: contact@wmsc.ma.
