Miral Destinations – Sole Proprietorship LLC Privacy Policy

Introduction

Please read the following Privacy Policy carefully to understand how and why we use your personal data in order for you to access and browse our website.

About this Policy

This Privacy Policy is issued for Miral Destinations – Sole Proprietorship LLC (“Miral Destinations”, “we”, “us”, “our”). Miral Destinations regularly collect and use personal data about individuals who visit our website. Personal data is any information that can be used, directly or indirectly, to identify you as an individual.

Your privacy is very important to us and we understand our responsibilities to protect your personal data in an appropriate and lawful manner and in accordance with applicable data protection regulations. This Privacy Policy should be read in conjunction with our Cookies Policy, which together provide you with details of how and why we collect and process your personal data when you are using our website.

For any privacy queries, you can contact us at any time at: privacy-md@miral.ae

Miral Destinations – Sole Proprietorship LLC

P.O. Box 128717

Abu Dhabi

UAE

License Number: 2307598

1. Who is responsible for protecting your personal data?

Miral Destinations is responsible for promoting destinations and attractions in Abu Dhabi and is a one stop booking partner, helping design holiday packages for travelers. Such destinations include Yas Island and Saadiyat Island, and attractions include but are not limited to Ferrari World Abu Dhabi, Warner Bros World™ Abu Dhabi, Yas Waterworld, CLYMB™ Abu Dhabi, SeaWorld Abu Dhabi, Qasr Al Watan, Yas Marina Circuit and various other leisure and tourism facilities.

In connection therewith, Miral Destinations operates this website and further details regarding how we process your personal data in connection with this website are set out below.

2. What personal data do we collect, and how do we collect it?

Information we collect directly from you

• Information that you personally provide to us when subscribing to our mailing lists or contacting us via our contract us form or other means available on our website.
• This information may include:
  • your full name, email address and telephone number;
• • your chosen marketing preferences and objections, general enquiry details and any other information or messages you may decide to provide to us;

Information we collect indirectly

• In some cases, information about you may be provided to us by a third party verbally or in writing. For example, this could include if a family member or friend has used the contact us feature on the website and provided information on your behalf.
• This information may include some of the same information as which you may have provided directly to us (as referenced within this section 2 above).

Information we collect automatically

• Information that we may collect automatically via cookies and other location-based tracking mechanisms when you are using the website or use our applications on third-party sites or platforms. More information on the use of cookies is at section 8 below and in our Cookies Policy.
• This information includes traffic data, location data, weblogs, communication data and the resources you access; for example, your IP address, device ID, device type, referrer URL, operating system and version, geolocation, browser type and browsing history.

3. How do we use your personal data?

We will use your personal data for the following reasons:

To respond to you

• We will use your information to process and respond to your requests, reservations or queries, when you subscribe or contact us.

To improve our products and services

• We use your information to provide content on our website in the most effective way. Your information allows us to identify you as a user, remember your preferences and deliver an enhanced digital experience. Such data is not retained beyond your visit of the respective website page, but may be kept in log files to allow us to maintain and improve our website.

To keep our services secure

• Your information may be used to detect, investigate, prevent fraud and rectify potential errors in our technology and against potential cyber-attacks or other abuse of our technology, and to prevent or mitigate any damages that may have been caused by such abuse.
• While we take steps to maintain the security of your information, you should be aware of the many information security risks that exist and take appropriate care to help safeguard your information.

Marketing

• If you have provided your consent by opting in to receive personalised updates and offers, we may send you such updates and offers by email, SMS, WhatsApp, social media and post, or occasionally contact you by telephone. You may withdraw your consent to receiving such communications at any time by using the [‘unsubscribe’] link in any communication received or by contacting us at privacy-md@miral.ae.
• Our servers automatically protocol the consent gathering process to enable us to evidence that you have consented. For this purpose we will store the following information: email address, details of how and when consent was given, details of confirmation email sent and confirmation email clicked; including the date, time and IP address relating to the consent and clicked confirmation link, the wording of the consent and the information about the right to withdraw your consent at any time.
• If you have opted in to hear from other companies in our group or our partners, you may also receive personalised updates and offers from such companies. You may withdraw your consent at any time by using the unsubscribe link in any communication received or by contacting us at privacy-md@miral.ae.

Personalised content and services

• Your personal information may be used to understand your customer journey and to provide you with personalised offers or advertisements. These offers or advertisements may be shown to you on our website or the websites of third parties (for example, your chosen social media platforms).
• Where we have permission to send marketing materials (as set out under Marketing in this section), these personalised offers and advertisements may be included within those updates and will be in accordance with your chosen marketing preferences.
• Please note we do not carry out any automated decision making based on your information.

Promotional or other activities

• If (at your discretion) you decide to take part in any promotional activities such as competitions, surveys or interactive features of our services, your personal data may be processed to administer the activity or enable participation.

Notifications

• We may notify you of any changes or updates to your current services or subscriptions. For example, security alerts or important support or administration messages about your services.

Legal obligations

• We may have to process your information to comply with legal or regulatory obligations, where required by applicable laws. Information may be used to:
  • enforce our terms and conditions and other agreements, policies, and standards, including investigation of any potential violation thereof;
  • detect, prevent or otherwise address security, fraud or technical issues;
  • protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law
    (including exchanging information with other companies and organisations for such purposes).

Business analysis

• We may use your information for our business purposes; for example, to carry out data analytics to assess consumer demands and trends.

Aggregated or anonymised data

• We may use your information to compile aggregated or anonymised data (data which does not identify you as an individual, such as statistical or demographic data), so that we can analyse and improve our products and services. However, if we combine aggregated data with your personal data so that it can identify you in any way, we treat the combined data as personal data and it will be used in accordance with this Privacy Policy.

4. What is the legal basis for processing your personal data?

In most cases, we process your data at your request in order to enter into a relationship with you for communication purposes (as stated in section 3). If the processing falls outside of this scope, we will process your information on one of the following basis:

• based on your explicit consent for us to do so (for example, when you opted in to our mailing lists or promotions);
• as required to comply with relevant legal or regulatory obligations (for example, to resolve disputes or enforce contracts);
• where processing is mandatory for the establishment, exercise or protection of a right;
• where data is publicly available;
• as required to support the legitimate interests that we have as a business (for example, to carry out market research and analytics, prevent or detect unlawful behaviour or to inform you of new services or attractions that may be of interest to you and to further improve and market our products and services), provided always that such processing is carried out in a way that does not violate your fundamental privacy rights.

5. Who do we share your personal data with?

Service providers

We may share your information with third parties who provide a service to us. We do this where it is necessary for the service provider to have access to your information and solely for the purpose of them delivering that service to us.

Our service providers include:

• IT companies (e.g. hosting providers);
• Payment solution providers;
• Marketing or communication providers;
• Developers and support providers;
• Data analytics providers;
• Survey or market research providers;
• Professional advisers or auditors;
• Regulators;
• Insurers.

Affiliates and partners

If you opt in to receiving marketing communications from our affiliates or partners when selecting your marketing preferences on our websites, we will share the information required in order for those affiliates and partners to contact you in the ways you have chosen.

Other third parties

We may also disclose your personal data:

• internally, including any of the intra-group companies, our holding company and its subsidiaries where it is necessary to perform certain responsibilities efficiently as part of the service provided to you (for example, data may be accessible to certain types of persons involved within the operation of our services from our administration, IT, marketing or legal teams);
• if required by applicable laws or regulations;
• to government or supervisory bodies or agencies in response to their legitimate requests, or where it is in our legitimate interests to do so, even if such disclosure is not mandatory under law;
• if you explicitly requested or authorised us to do so;
• in the event we sell or merge whole or part of any business or assets, we would need to transfer your information to the acquiring company.

We only share the information that is necessary for the required purpose so we do not disclose all of the information you provide to us, and we do not sell, rent or lease your personal information to third parties under any circumstances.

Aggregated or anonymised data may be shared with our service providers, affiliates or other third parties for the purpose of analytics and to improve products and services.

The categories of third parties to whom we disclose your information may change from time to time. We will update this Privacy Policy before any such changes take effect.

6. Links to third party websites

You may have accessed one of our websites by clicking a link on a third party website; for example, you may have clicked a link on one of our partners’ websites and were then redirected to our website. Similarly, our websites contain links to our partners’ websites.

We also integrate our website with third party products (for example, Google Analytics, Facebook, Twitter) to enable us to measure the performance of our websites and website content, present personalised offers and enable you to share, like and recommend pages to others via social media.

We are responsible for protecting your personal data when you visit our websites but are not responsible for the websites of any third parties, and this Privacy Policy does not govern any third party websites. You are responsible for understanding how your personal data is used by third party websites and we recommend that you review the privacy policy on the relevant website.

7. Transfers outside of the EEA

As a business located outside of the European Economic Area (“EEA”), we process your information outside of the EEA and in some cases (as described in section 5), your information may be transferred to and processed by third parties who are also located outside of the EEA.

We will only transfer your information to such third parties where we have made arrangements to ensure that your data is treated securely in accordance with this Privacy Policy and applicable law.

8. Cookies

Our websites use cookies which help us provide you with a better website and browsing experience, by enabling us to monitor which pages you find useful and which you do not. You can choose to accept or decline cookies; most web browsers will automatically accept them but you can usually modify your browser settings to decline cookies if you wish to; however, this may prevent you from taking full advantage of the website.

More detailed information on our use of cookies is contained within our Cookies Policy.

9. Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate technical and organisational security measures to safeguard and secure the information we collect. Whilst we have implemented such measures, we cannot completely guarantee the security of your information; any transmission by you is at your own risk.

Your personal data is stored in a centralised database hosted in the cloud.

Where you chose to click a link to any of the websites of our partners, advertisers and affiliates, please note that those websites have their own privacy policies and we do not accept any responsibility or liability for their policies or their security of your personal data. Please check their policies before you submit any personal data to those websites.

10. Retention

Unless otherwise required by applicable law, we will retain your information for as long as is necessary for the relevant purpose outlined in this Privacy Policy. If you register for an account with us, your information will be retained for as long as your account is active and after closure for an additional period to administer any requests concerning your account, or in accordance with our legal obligations including where it is necessary for the establishment, exercise or defence of legal claims. If you wish to delete your account or any data related to it, please contact us at privacy-md@miral.ae and we will execute your request.

11. How you can control your personal data

You have certain rights in relation to your personal data as determined by applicable data protection laws.

You have the right at any time to:

• be informed of the use of your personal data;
• access, rectification or erasure of your personal data;
• restrict and/or object to the processing of your personal data;
• data portability;
• not be subject to any decision based solely on automated processing of your personal data.

You can exercise some of these rights when contacting us, by reviewing and selecting or deselecting the boxes on the forms you are required to complete.

If at any time you wish to unsubscribe or opt-out from any communications we have sent you based upon your selected preferences, you may do so by using the one click unsubscribe link on those communications.

You can also contact us at privacy-md@miral.ae.

If you wish to discuss how we have handled your personal data, you can contact us at any time and we will investigate this. If you are not satisfied with the response or believe we are not processing your data in accordance with the applicable law you can refer the matter to any competent data protection authority.

12. Contacting us

For any privacy related queries, you may contact us at any time on any of our contact us facilities or at privacy-md@miral.ae.

Please note, for your safety and to allow us to make sure that we do not disclose any of your personal data to any unauthorised third parties, we may need to verify your identity and guarantee the adequate exercise of your rights. In doing so, we may request specific information and/or documents from you before we can properly respond to any request received concerning your data. All data and documents received from you in the process of responding to your requests will be used strictly for the purposes of analysing your request, authenticating your identity, and responding to your request in full.

13. Updates to this Privacy Policy

We may change this Privacy Policy in whole or part at any time by updating this page and without prior notification to the extent permitted by applicable law. Please ensure you review this page from time to time to take notice of any such changes. Most changes are likely to be minor but for substantive changes, we may provide additional notice to you by either providing a pop-up notice or similar statement on our website, or by sending you an email. Your further use of our services after a change to our Privacy Policy will be subject to the updated policy. We indicate at the bottom of the Privacy Policy when it was last updated.