Data Protection and Cookies Policy
Global Management Institute (GMI)
Global Management Institute (GMI) attaches particular importance to confidentiality, personal data protection, and respect for the privacy of visitors to its website, applicants, students, graduates, and partners.
This policy explains the types of personal data that may be collected, the purposes for which they are processed, how they are used and protected, and the rights available to individuals.
Last updated: October 14, 2026
1. Legal and Regulatory Framework
This policy is established in accordance with applicable Moroccan personal data protection legislation, including:
Law No. 09-08 concerning the protection of individuals with regard to the processing of personal data.
Implementing Decree No. 2-09-165.
Applicable decisions and recommendations of the National Commission for the Control of Personal Data Protection (CNDP).
Law No. 53-05 concerning the electronic exchange of legal data, where applicable.
Where personal data processing falls within the scope of the European Union’s General Data Protection Regulation (GDPR), the relevant provisions are taken into consideration.
2. Data Controller
The entity responsible for processing personal data is:
Global Management Institute (GMI)
Website: https://gmi-institute.com/
Email: contact@globalmanagementinstitute.com
Telephone: +212 6 66 33 07 33
Registered office address: [TO BE CONFIRMED]
CNDP declaration or authorization reference, if applicable: [TO BE COMPLETED]
For any questions concerning the processing or protection of personal data, individuals may contact GMI using the details provided above.
3. Commitment to Confidentiality
As part of its academic, professional, and executive education activities, GMI may receive information concerning the educational backgrounds, professional qualifications, experience, and projects of applicants and participants.
GMI recognizes that such information may be confidential and is committed to limiting its use to legitimate institutional purposes.
Particular attention is given to:
The confidentiality of application and enrollment records.
The protection of academic and professional information.
The confidentiality of communications with participants.
The protection of research papers, dissertations, and projects submitted during educational programs.
Respect for the privacy of students, graduates, faculty members, and other participants.
Personal information is disclosed or published only in accordance with applicable legal requirements and, where necessary, with the consent of the individuals concerned.
4. Personal Data Collected
GMI may collect different categories of personal data depending on how individuals interact with its website and educational services.
4.1. Website Browsing Data
When visiting the website, certain technical information may be collected, including:
IP address.
Browser type and operating system.
Pages visited.
Date and time of access.
Technical information necessary for website operation and security.
Cookies and similar identifiers, depending on the services used.
4.2. Contact and Application Forms
When individuals complete a contact form, information request, or application form, GMI may collect:
First and last name.
Email address.
Telephone number.
Country and city.
Educational program of interest.
Subject of the inquiry.
Message or additional comments.
4.3. Application and Enrollment Information
During the application review and enrollment process, GMI may request additional information, including:
Academic background.
Degrees and certificates.
Curriculum vitae.
Professional experience.
Required administrative documents.
Information relating to tuition or program financing.
4.4. Academic Information
As part of its educational activities, GMI may process information concerning:
Enrollment and administrative records.
Attendance and participation.
Academic assessments and results.
Research projects, dissertations, and assignments.
Communications with academic supervisors and faculty members.
Issuance of certificates, academic records, or diplomas, depending on the program.
The specific categories of data collected depend on the programs, procedures, and systems used by GMI.
5. Purposes of Personal Data Processing
Personal data may be processed for the following purposes:
Managing inquiries: Responding to questions submitted through online forms, email, or telephone.
Application management: Reviewing admission applications, communicating with applicants, and organizing selection procedures.
Academic and administrative management: Managing enrollment, educational programs, academic assessments, and student records.
Financial administration: Preparing invoices, managing financial records, and fulfilling applicable accounting and administrative obligations.
Institutional communication: Providing information about GMI programs, events, and institutional news, in accordance with applicable consent and marketing requirements.
Service improvement: Evaluating website performance and improving the experience of visitors and participants.
Security: Protecting the website, preventing unauthorized access, and detecting potential technical or security incidents.
Depending on the circumstances and applicable legislation, processing activities may be based on consent, contractual or pre-contractual requirements, legal obligations, or another legally recognized basis.
6. Recipients of Personal Data
Personal data is accessible only to individuals and organizations that require access to perform their authorized responsibilities.
Depending on the circumstances, recipients may include:
GMI administrative and academic departments.
Admissions and enrollment personnel.
Relevant faculty members, supervisors, and academic coordinators.
Academic partners involved in organizing or delivering educational programs.
Technical service providers responsible for website hosting, maintenance, email services, or digital platforms.
Competent authorities where disclosure is required by law.
GMI seeks to limit access to personal data according to the specific purposes for which the information is processed.
Personal data is not intended to be sold to third parties.
7. International Data Transfers
Given the international nature of its activities and academic partnerships, certain operations may involve transferring personal data to organizations located outside Morocco.
Where such transfers occur, they must comply with the requirements of Moroccan Law No. 09-08 and any applicable CNDP authorization procedures.
GMI seeks to ensure that international transfers are appropriately managed to protect the confidentiality and security of the information concerned.
[TO BE CONFIRMED: Destination countries, receiving academic partners, and applicable safeguards.]
8. Data Retention Periods
Personal data is retained only for periods appropriate to the purposes for which it was collected.
Retention periods may depend on:
The nature of the information.
The duration of the relationship with the applicant or participant.
Administrative and academic requirements.
Applicable legal and accounting obligations.
Relevant statutory limitation periods.
Academic record-keeping obligations, where applicable.
Once the applicable retention period has expired, information is deleted, lawfully archived, or anonymized according to the procedures implemented.
[TO BE COMPLETED: Specific retention periods for applications, student records, accounting information, contact messages, and technical logs.]
9. Data Security and Confidentiality
GMI is committed to implementing technical and organizational measures appropriate to the risks associated with processing personal data.
Such measures may include:
Secure HTTPS connections.
Restricted access to personal information.
Protection of administrative accounts and interfaces.
Maintenance and updates of digital systems.
Backups of essential information.
Access authorization and permission management.
Confidentiality awareness among authorized personnel.
Despite the implementation of protective measures, no information system can guarantee absolute security.
In the event of an incident affecting personal data, GMI assesses the situation and applies the corrective measures and notification obligations required by applicable legislation.
10. Rights of Data Subjects
In accordance with applicable data protection legislation, individuals have rights concerning the processing of their personal data.
These include:
Right to information: The right to receive information about the collection and use of personal data.
Right of access: The right to request access to personal data held about them, subject to applicable legal conditions.
Right to rectification: The right to request correction or updating of inaccurate, incomplete, or outdated information.
Right to object: The right to object, under legally established conditions, to certain processing activities, including direct marketing.
Other applicable rights: Where provided by applicable legislation, individuals may request erasure, restriction of processing, or portability of their personal data.
To exercise these rights, individuals may submit a request to:
contact@globalmanagementinstitute.com
GMI may request information necessary to verify the identity of the person submitting the request.
Requests are handled in accordance with the procedures and deadlines established by applicable law.
11. Cookies Policy
11.1. What Is a Cookie?
A cookie is a small file that may be stored in a user’s browser when visiting a website.
Cookies can be used to remember browsing information, support website functionality, and measure how visitors interact with online services.
11.2. Categories of Cookies
Depending on the features and services actually enabled, the GMI website may use the following categories of cookies:
Strictly Necessary Cookies
These cookies support essential website functions, including navigation, security, and technical operation.
Functional Cookies
These cookies may remember certain preferences, such as language or display settings.
Analytics Cookies
These cookies may help measure website traffic and understand how visitors use different pages.
Marketing and Personalization Cookies
Where such services are enabled, these cookies may help measure campaign performance and personalize certain communications.
Third-Party Cookies
Certain embedded content, such as videos, maps, or external services, may involve cookies managed by third-party providers.
11.3. Cookie Consent and Management
Where the use of certain cookies requires consent, users must be able to express their preferences before those cookies are placed.
Users may also manage cookies through their browser settings and, where a consent management tool is available, modify their preferences at any time.
[TO BE CONFIRMED: Cookie consent management tool and categories of cookies actually used on the website.]
11.4. Cookie Retention
Cookie lifespans vary depending on their category, purpose, and configuration.
Cookies and associated information are retained in accordance with applicable legal requirements.
[TO BE COMPLETED: Actual cookie inventory, providers, and retention periods.]
12. Changes to This Privacy Policy
GMI may update this Privacy Policy to reflect legal, regulatory, technical, or organizational developments.
Any updated version will be published on this page with its revision date.
Visitors are encouraged to review this policy periodically to remain informed about potential changes.
13. Contact Information and Complaints
For any questions concerning privacy or the processing of personal data, please contact:
Global Management Institute (GMI)
Website: https://gmi-institute.com/
Email: contact@globalmanagementinstitute.com
Telephone: +212 6 66 33 07 33
Individuals may also contact the Moroccan National Commission for the Control of Personal Data Protection (CNDP), in accordance with applicable legal procedures.
CNDP — National Commission for the Control of Personal Data Protection
Official website: https://www.cndp.ma/