This Policy applies to Websites, mobile applications, products, and services, which will provide links navigating to this Policy, and which will be displayed to Customers and Visitors for their acceptance.
DCT Abu Dhabi is committed to respect privacy and secure Personal Information with compliance to all applicable data protection and privacy laws and regulations in the Emirate of Abu Dhabi and the Federal Laws of the United Arab Emirates.
This Policy describes how DCT Abu Dhabi collects, discloses, and processes Personal Information, including, but not limited to, the user’s name, address, credentials and/or Biometrics Data.
A Visitor’s landing on or use of a Website, any DCT Abu Dhabi webservice, mobile application and customized solution may require accessing the Visitor’s Personal Information. Visitors will be notified by the Website of any product- and/or service-specific information collection in advance and will request the Visitor’s if the information request falls outside of the scope of this Policy the Website will provide the Visitor with a link to the applicable supplementary policies and request the Visitor’s acceptance of the same.
2 PERSONAL/BIOMETRICS DATA COLLECTION AND USE
DCT Abu Dhabi collects information (including Personal Information) on Visitors when they interact with the visited Website (including user account creation and submission of contact forms), uses a DCT Abu Dhabi mobile application, uses a DCT Abu Dhabi product, or uses a DCT Abu Dhabi service. As permitted by law, DCT Abu Dhabi may also obtain data from public and commercial third-party sources, including, without limitation, purchasing statistics from third party providers. The Personal Information DCT Abu Dhabi may collect includes, without limitation, the Visitor’s or Customer’s name, gender, job position, Emirates ID, passport (for international users only), email address(es), phone/mobile number(s), login information (account and password), and photos, depending on how the Visitor interacts with the visited Website and the products or services being purchased or viewed by a prospective Customer.
In order to use DCT Abu Dhabi services, the Customers or Visitors may be requested to provide Personal Information. Customers and Visitors have the right to opt not to disclose personal and Biometric Data to DCT Abu Dhabi. However, not providing DCT Abu Dhabi with some of the Personal Information may limit a user’s/prospective Customer’s experience or accessibility to some products and services.
Personal Information will be used for, without limitation, the following purposes:
Biometric Data will be used for, without limitation, the following purposes:
DCT Abu Dhabi may also collect and use Non-PII data to understand how Customers and Visitors use its Websites, products, and services in order to improve its services and better satisfy its Customer and Visitor needs. DCT Abu Dhabi may collect, use, process, transfer, or disclose Non-PII for other purposes at its own discretion.
DCT Abu Dhabi will process Personal Information following the requirements of applicable laws on an appropriate legal basis, including, without limitation:
3 COOKIES AND RELEVANT TECHNOLOGIES
The Visitor’s browser will return the Cookie information only to the domain where the Cookie originated and its content can be retrieved or read only by the server that created the Cookie.
3.2 WEB BEACONS AND PIXEL TAGS
In addition to Cookies, DCT Abu Dhabi may also use other similar technologies on its Websites and web-services such as web beacons and pixel tags. For example, when a Customer or Visitor receives an email from DCT Abu Dhabi webservices, it may contain a
click-through URL that links to a Website. If a Customer or Visitor clicks the link, DCT Abu Dhabi will track their visit to help learn about their preferences for products and services and improve its customer service. A web beacon is a transparent graphic image embedded in a website or in an email. DCT Abu Dhabi uses pixel tags in emails to find out whether an email has been opened. A Customer or Visitor can unsubscribe from the DCT Abu Dhabi mailing list at any time if they do not want to be tracked in this manner.
4 PERSONAL/BIOMETRICS DATA DISCLOSURE
DCT Abu Dhabi may, when services are provided by third parties authorized by DCT Abu Dhabi, share Personal Information with that third party in the manner described in this Policy. For example, when a Customer or Visitor makes an online purchase of services or products from DCT Abu Dhabi, DCT Abu Dhabi may share their Personal Information with a logistics provider to arrange shipment of the product or a third party to provide to the Customer the purchased service. In addition, as a tourism organization, DCT Abu Dhabi may share Personal Information with its affiliates, subsidiaries, stakeholders and other government entities based on need-to-know basis.
To comply with applicable laws or respond to valid legal procedures, DCT Abu Dhabi may also disclose the Biometrics Data and Personal Information to law enforcement or other government agencies. If DCT Abu Dhabi is involved in a restructuring or lawsuit in a given jurisdiction, the Personal Information may be disclosed. DCT Abu Dhabi may also disclose Customer or Visitor data when appropriate, including, without limitation, to execute the Terms and Conditions, when DCT Abu Dhabi believes disclosure is necessary or appropriate to prevent physical harm or financial loss, or when it is in connection with an investigation of suspected or actual illegal activity.
5 ACCESS CONTROL AND PERSONAL / BIOMETRICS DATA PROTECTION
It is the responsibility of the each Customer and Visitor to ensure that all Personal Information submitted to DCT Abu Dhabi is correct. DCT Abu Dhabi is dedicated to maintaining the accuracy and completeness of Personal Information, keeping the data up- to-date and secure.
To the extent required by applicable law, Customer or Visitor may:
If allowed by applicable laws, Customers and Visitors have the right to withdraw their consents given under this Policy at any time. Notwithstanding a withdrawal of consent, DCT Abu Dhabi will have no liability for any processing of Personal Information up to the time the withdrawal of consent is processed by DCT Abu Dhabi and DCT Abu Dhabi will be permitted to continue processing Customer and Visitor data and Personal Information if there is sufficient justification under applicable law and will have no liability for acting in accordance with that justification.
6 PROTECTION AND RETENTION OF PERSONAL/BIOMETRICS DATA
DCT Abu Dhabi is committed to protecting Biometric Data and/or Personal Information providing the maximum possible level of security measure to mitigate the risks of data leakage. DCT Abu Dhabi uses appropriate physical, management, and technical measures to protect Biometric Data and/or Personal Information from unauthorized access, disclosure, usage, modification, damage, or loss. For example, DCT Abu Dhabi uses cryptographic, masking and tokening technologies for data confidentiality, protection mechanisms to prevent attacks, and access control mechanisms to permit only authorized access to Biometric Data and/or Personal Information. DCT Abu Dhabi also provides security, privacy and protection trainings and campaigns for employees to raise their awareness level of Biometric Data and/or Personal Information protection.
DCT Abu Dhabi will retain Biometric Data and/or Personal Information for no longer than is necessary for the purposes stated in this Policy, unless otherwise extending the retention period is required or permitted by applicable laws. The data storage period may vary with scenario, product, and service. The standards DCT Abu Dhabi uses to determine the retention period are, but not limited to:
DCT Abu Dhabi will maintain user registration information as long as the account details are necessary for service provision. A Customer of Visitor may choose to deregister their account. After an account deregistration, DCT Abu Dhabi will stop providing the Customer of Visitor with products and services and delete their Biometric Data and/or Personal Information, provided that deletion is not restricted or prohibited by applicable law or regulation.
7 PERSONAL INFORMATION OF MINORS
Some of the Websites, products and services are intended for adults and minors must not create a DCT Abu Dhabi account without the consent of a parent or guardian. If the Personal Information of a minor is collected with prior parental consent, DCT Abu Dhabi will only use or disclose the data as permitted by law, with the explicit consent of the minor's
parent or guardian, or when necessary for the protection of the minor. If DCT Abu Dhabi accidentally collects a minor's Biometric Data and/or Personal Information without verified prior consent from the minor's parent or guardian, DCT Abu Dhabi will attempt to delete the data as soon as possible and will not be responsible for the negligence of providing the minor’s data for registration.
8 THIRD PARTY PROVIDERS SERVICES
To ensure a positive user experience, a user may receive from Websites content or web links to Third Parties’ websites. DCT Abu Dhabi does not control Third Parties and a Customer’s or Visitor’s decision to use the links, view the content and/or access the products or services provided by Third Parties will be his or her personal responsibility.
DCT Abu Dhabi does not control the privacy practices and data protection policies of Third Parties. Customers and Visitors who visit Third Parties’ websites are encouraged to read their privacy and data protection policies. Any Personal Information provided to a Third Party by DCT Abu Dhabi’s under the terms of this Policy will be further subject to the Third Party’s privacy and data protection policy which DCT Abu Dhabi accepts no liability for.
9 INTERNATIONAL TRANSFER OF PERSONAL INFORMATION
Personal Information collected by DCT Abu Dhabi may be processed or accessed in the country/region where the user uses DCT Abu Dhabi products and services or in other countries/regions where DCT Abu Dhabi or its affiliates, subsidiaries, service providers or business partners have a presence. These jurisdictions may have different data protection laws. In such circumstances, DCT Abu Dhabi will take measures to ensure that data is processed as required by this Policy and applicable laws and regulations.
10 POLICY UPDATE
DCT Abu Dhabi reserves the right to update or change this Policy at any time. DCT Abu Dhabi will notify Customers and Visitors of material changes to this Policy by posting a notice on its Websites and/or sending a direct notification through email.
11 CONTACT US
A user with any privacy complaint or issue may contact the Information Governance and Security Team at:
Department of Culture and Tourism – Abu Dhabi, PO Box 94000, Abu Dhabi, United Arab Emirates, Telephone +971 (2) 599 5911
Attention: Hessa Al Nahdi;
Corporate Security Section Head; email: firstname.lastname@example.org