1. Data Controller Identification
This platform and the Next Morocco: The Chabbab Maghribi Gathering event are operated by Ask For Success (AFS), an organization dedicated to empowering Moroccan youth through leadership, educational opportunity, and economic mobility.
Organization: Ask For Success (AFS)
Event: Next Morocco: The Chabbab Maghribi Gathering
Event Date: October 31, 2026
Event Venue: Abdelah Guenoun Cultural Complex, Ain Chock, Casablanca, Kingdom of Morocco
Official Inquiries: support@askforsuccess.org
2. Information We Collect on This Platform
When you interact with the Next Morocco Pass platform, we collect only the personal information strictly necessary to fulfill your ticket request, verify your eligibility, and facilitate your admission to the event.
| Category | Fields Collected | Requirement | Operational Purpose |
|---|---|---|---|
| Identity & Contact | Full Name (First & Last), Email Address, Phone Number | Mandatory | Pass generation, unique identification, transactional ticket delivery by email, SMS/WhatsApp emergency notifications. |
| Eligibility & Demographics | Age (15–25), Region / City (12 administrative regions of Morocco or Outside Morocco) | Mandatory | Enforcing the youth age criteria (15–25 years), ensuring regional representation, and managing venue crowd safety. |
| Academic & Career Profile | Status (e.g. High School/Baccalaureate, University Student, Recent Graduate, Young Professional, Entrepreneur), Field of Study / Profession | Status: Mandatory Field: Optional |
Tailoring Opportunity Village workshops, matching attendees with relevant mentors, and aggregate demographic reporting. |
| Acquisition Channel | Referral Source (Instagram, TikTok, Facebook, Friends/Word of Mouth, School/University) | Optional | Analyzing youth outreach campaigns to maximize accessibility for future editions. |
| Digital Pass & Attendance | Cryptographic UUIDv4 Token, QR code verification string, Registration Timestamp, Check-in Status, Venue Entry Timestamp | System Generated | Single-use admission check-in, preventing counterfeit ticket duplication, and monitoring real-time hall occupancy. |
| Technical & Security Data | IP Address, Request Rate Timestamp, User-Agent Header | Automated Security | Defending against DDoS attacks, automated bot registrations, and brute-force scanner passcode attempts. |
3. How We Use Your Information (Purposes of Processing)
We explicitly restrict the processing of your data to legitimate purposes directly connected with organizing, administering, and securing the Next Morocco event:
- Generating Your Official Entrance Pass: Creating your personalized entrance credential with an encrypted QR code uniquely bound to your registration record.
- Ticket Delivery & Service Communications: Transmitting your digital pass via email within 24 hours of registration, followed by essential venue arrival instructions, badge printing options, and logistical advisories.
- On-Site Venue Check-In & Identity Verification: Scanning your QR pass at the entrance doors of Abdelah Guenoun in Ain Chock, Casablanca on October 31, 2026, to ensure that only authorized ticket holders enter and that each ticket is redeemed only once.
- Venue Capacity & Safety Oversight: Enforcing the strict venue safety threshold of 600 approved participants to comply with local fire safety and civil defense standards.
- Program Personalization & Opportunity Village Allocation: Aligning workshop room capacities and mentorship sessions with the academic and career interests reported by attendees.
- Platform Security & Abuse Prevention: Applying rate-limiting windows (e.g., maximum 20 requests per minute per IP address) and timing-safe cryptographic comparisons to guard against malicious automated submissions.
4. Legal Basis Under Moroccan Law No. 09-08 (CNDP)
We process your personal information in strict accordance with the Kingdom of Morocco's Law No. 09-08 relating to the protection of individuals with regard to the processing of personal data, overseen by the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP):
- Explicit Consent (Article 4): Registration is entirely voluntary. You provide unambiguous consent by checking the consent checkbox before submitting your ticket request.
- Purpose Specificity (Article 3): Your data is collected for specified, explicit, and legitimate purposes linked directly to Next Morocco 2026 and will not be processed subsequently in a manner incompatible with those purposes.
- Data Proportionality (Article 3): We only request information that is adequate, relevant, and not excessive in relation to event registration and security.
- Accuracy & Upkeep (Article 3): Every reasonable step is taken to ensure that inaccurate or incomplete personal data is corrected or deleted upon attendee request.
5. Digital QR Ticketing & On-Site Access Scanner System
To ensure a smooth, paperless, and secure arrival experience, Next Morocco employs a specialized cryptographic ticketing system:
Cryptographic Pass Token
Upon registration, a random 128-bit UUIDv4 token is assigned to your record. This token contains no raw personally identifiable data in its plaintext string and acts as a secure cryptographic lookup pointer.
Staff-Only Scanner Terminal
Event staff at Abdelah Guenoun operate dedicated scanner terminals protected by multi-character access passcodes, HMAC-SHA256 signed session cookies, and brute-force lockouts.
Single-Use Entry Validation
Once scanned, the ticket state transitions from PENDING or TICKET_ISSUED to CHECKED_IN with an immutable entry timestamp. Duplicate scans are instantly flagged to prevent unauthorized badge reuse.
7. Data Storage, Security Architecture & Retention
We apply defense-in-depth technical and organizational measures to safeguard your personal records against accidental loss, alteration, disclosure, or unauthorized access:
Content-Security-Policy, HSTS, X-Content-Type-Options: nosniff, X-Frame-Options: DENY, and Referrer-Policy enforcement.
All database queries utilize parameterized prepared statements, preventing SQL injection vulnerabilities.
IP-level velocity controls block automated registration bots and scanner credential guessing.
All secret evaluations and signatures leverage cryptographic constant-time comparison buffers.
Data Retention Schedule
Attendee personal records are retained only for the duration necessary to deliver the Next Morocco 2026 event lifecycle, resolve ticketing inquiries, issue post-event participation certificates, and fulfill legal auditing requirements. Following this period, personal identifiable information is securely purged or anonymized for long-term aggregate youth impact statistics.
8. Your Rights as a Participant
Pursuant to Moroccan Law No. 09-08, you hold enforceable rights concerning your personal data held by Ask For Success:
Right of Access
You may request confirmation of whether we hold personal data relating to you and obtain a copy of your registration record.
Right to Rectification
If your name was misspelled or your email/phone number has changed, you may request prompt corrections.
Right to Erasure
You can request the cancellation of your ticket and total deletion of your registration profile from our active database.
Right to Withdraw Consent
You may revoke your processing consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights: Send an email from your registered email address to support@askforsuccess.org with the subject line "Data Subject Request - Next Morocco". Our team will verify your identity and process your request within 7 business days.
10. Contact Us & Support
If you have questions, feedback, or concerns regarding this Privacy Policy or how your personal information is handled for Next Morocco, please do not hesitate to contact our data protection team: