Privacy Policy

Welcome to Mohaajir, a free community platform that enables Moroccans in particular, as well as people interested in Morocco, to communicate with one another, exchange information and get in touch across different countries around the world.

The protection of your personal data is important to us.

1. Controller

The controller responsible for the processing of personal data is:

Mahmoud Sabile
Spandauer Str 148
14612, Falkensee
Germany

Email: admin@mohaajir.com

Mohaajir is currently operated free of charge and does not charge users any fees.

2. Data collected

Depending on the features used, Mohaajir may process the following information:

• first name and surname;
• username;
• email address;
• password, exclusively in hashed form (irreversible and unreadable, even for us);
• profile picture;
• country;
• city;
• country or city of origin;
• occupation;
• languages spoken;
• profile description;
• posts;
• comments;
• messages sent via the platform;
• friend requests;
• transport listings;
• professional listings;
• job listings;
• company details;
• reports;
• technical information necessary for operating the website;
• IP address and security data, where necessary.

3. Use of data

The data may be used to:

• create and manage an account;
• enable communication between users;
• enable searching for people;
• enable friend requests;
• enable use of the forum;
• enable the chat;
• publish listings;
• enable searching for professionals;
• enable the publication of job listings;
• enable the publication of transport offers;
• ensure the security of the platform;
• detect and prevent abuse;
• handle reports;
• remove unlawful or prohibited content;
• improve how Mohaajir works;
• comply with applicable legal obligations.

4. Legal basis

Where the GDPR applies, processing may be based in particular on:

• the provision of the service requested by the user;
• compliance with a legal obligation;
• the legitimate interest of the controller;
• the user's consent, where required.

Special categories of personal data (Art. 9 GDPR)

Certain details (e.g. city or country of origin, languages, participation in cultural or religious events) may allow conclusions to be drawn about ethnic origin or religious beliefs. We process such data only with your explicit consent, which you give when registering. You can withdraw your consent at any time by deleting your account or contacting us; this does not affect the lawfulness of processing carried out before the withdrawal.

Minimum age

Registration is only possible for persons aged 16 or over.

5. Public information

Information that a user makes public may be visible to other visitors. In their profile, each user can decide who sees their details (everyone, only logged-in members or only friends) and hide individual details (email, year of birth, city, online status).

You should therefore be careful about what information you publish. We strongly advise against making the following public:

• passport number;
• identity card number;
• bank details;
• passwords;
• confidential documents;
• medical information;
• personal data of other people without their permission.

6. Private messages

Private messages are intended for communication between users. They are visible only to the participants in the respective conversation.

No access by administrators: Administrators and moderators cannot view the content of private messages or their file attachments via the platform. The admin area shows statistics only (e.g. number of messages). If you report someone, moderators see only what you yourself write in the report.

Technical implementation: Messages are transmitted in encrypted form (HTTPS) but are not end-to-end encrypted; they are stored in the database on the server. The operator accesses the database directly only where provided for by law or where strictly necessary in order to:

• comply with a lawful request from a competent authority;
• investigate a serious rule violation or fraud that has been reported to us;
• protect users or the security of the service (e.g. in the event of an attack).

You can delete your own messages at any time; file attachments are then removed from the server immediately.

7. User content

Users can publish content themselves. They remain responsible for the information they publish and must comply with applicable laws and the community rules.

8. Retention period

We store personal data only for as long as necessary for the respective purpose:

• Account and profile data, posts, comments, listings, private messages and images: until you delete them yourself or delete your account. When an account is deleted, all associated files (profile picture, attachments, CVs, logos, supporting documents) are also removed from the server immediately;
• Applications and CVs: automatic deletion after 180 days;
• Supporting documents for verification (professionals/companies): deletion immediately after the review decision;
• Processed reports: deletion after 365 days;
• Reasons for moderation decisions: deletion after 730 days;
• Read notifications: deletion after 180 days;
• IP addresses in the admin log (administrators only): removal after 90 days. The application itself does not store members' IP addresses;
• Records of consent (time, version of the terms): for as long as the account exists, as we must be able to demonstrate consent (Art. 7(1) GDPR);
• Login session: automatic logout after 120 minutes of inactivity, and after 24 hours at the latest;
• Hosting provider's server log files: see section 11.

Once these periods have expired, the data is deleted unless there is a statutory retention obligation or the data is needed to establish, exercise or defend legal claims.

9. Downloading and deleting your data

You can download a copy of your data at any time under Profile & privacy → My data (JSON format).

You can delete your account yourself under Profile & privacy → Delete account or request deletion at: admin@mohaajir.com

Deleting the account may result in the deletion or anonymisation of data, subject to statutory retention obligations.

10. Security

We use appropriate technical and organisational measures to protect data against unauthorised access, loss, alteration or unauthorised disclosure, in particular:

• encrypted transmission (HTTPS/TLS) with automatic redirection;
• storage of passwords exclusively as a hash (irreversible);
• protection against forged requests (CSRF) and temporary lockout after several failed login attempts;
• protected session cookies and automatic logout;
• checking of uploaded files (file type and content) and re-rendering of images, removing metadata such as GPS location;
• file attachments of private messages can be accessed only by the participants in the conversation;
• role-based access rights in the admin area.

However, no system connected to the internet can guarantee absolute security.

11. Hosting

The website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7, 10249 Berlin Deutschland

When the website is accessed, the hosting provider processes technically necessary access data (server log files). This includes in particular: IP address of the requesting device, date and time of access, page or file accessed, amount of data transferred, HTTP status code, browser type and version, operating system and the previously visited page (referrer), where transmitted by the browser.

The purpose is to deliver the website, ensure stability and security, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and functional operation). All platform data (database and uploaded files) is stored on the hosting provider's servers.

Retention period of the server log files: maximal 7 Tage

[Conclude the data processing agreement with the host and tick it in the checklist]

12. Cookies

Mohaajir uses only technically necessary cookies. See also our Cookies page.

13. Disclosure of data

Mohaajir does not sell personal data.

Translate function: Below posts and listings there is a “Translate” link. Only when you click it yourself does Google Translate (Google Ireland Limited) open in a new tab, and the text in question is passed to it. Simply viewing the page does not transmit any data to Google. Google's privacy notice applies to the processing on Google's side.

Data may be disclosed to technical service providers or authorities where this is necessary and legally justified.

14. International transfers

Where data is transferred to a country outside the European Economic Area, the safeguards required under applicable law are implemented where necessary.

15. Your rights

Under applicable law, you have in particular the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent where processing is based on it.

To exercise your rights: admin@mohaajir.com – you can also exercise your rights of access and data portability directly via Profile & privacy → My data.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) if you believe that your rights have not been respected. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Tel. 033203 356-0, E-Mail: poststelle@lda.brandenburg.de, Web: https://www.lda.brandenburg.de

16. Changes

This policy may be updated if Mohaajir's features or legal obligations change. The date of the last update is shown at the top of this page.