Data protection policy

Version

1.0

Publication Date

2-Nov -2022

Readership (Target Audience)

All Staff, website Victors, Guests

Document Title

Data Protection Policy

 

 

Document Keywords

Data; Data Protection; Data Protection Policy; GDPR; sharing information; sharing patient information; sharing confidential information; data subjects, controller

This Policy applies to Websites, mobile applications, products, and services, which will provide links navigating to this Policy, and which will be displayed to Customers and Visitors for their acceptance.

We SOUL BEACH know that you care how information about you is used and shared, and we appreciate your trust that we will do so carefully and sensibly.

The SOUL BEACH (“Soulbeachdxb,” “we,” or “us”) is committed to protecting the information that you share with us online and explaining how we collect, process, and share that information. 

This Privacy Notice describes how SOUL BEACH collects and processes your personal information through the company website, devices, products, services, online mobile app and applications that reference this Privacy Notice (together SOUL BEACH Services”).

Websites, products, and services may contain links to or may be embedded in another organizations or agency’s website which has its own privacy policies Personal Information will become subject to the privacy policy of the accessed external site and SOUL BEACH will have no liability for this information provided to the third-party.

By using SOUL BEACH Services, you are consenting to the practices described in this Privacy Notice.

No matter how it is collected, recorded, and used (e.g., on a computer or on paper) this personal information must be dealt with properly to ensure compliance with the Data Protection Law of the country and the EU General Data Protection Regulation (GDPR).

We only collect your personal information to provide and continually improve our services requested by you. SOUL BEACH acts as a Data controller and where applicable Data Processor defined in the data protection law.

We gathered the following types of personal information:

INFORMATION YOU GIVE US: We receive and store any information you provide in relation to SOUL BEACH Services. You can choose not to provide certain information, but then you might not be able to take advantage of many of our SOUL BEACH Services.

AUTOMATIC INFORMATION: We automatically collect and store certain types of information about your use of SOUL BEACH Services, like many websites, we use “cookies” and other unique identifiers, and we obtain certain types of information when your web browser or device accesses SOUL BEACH website.

INFORMATION FROM OTHER SOURCES: We might receive information about you from other sources, such as updated restaurant booking or reservations, and email addresses, which we use to correct our records.

RESERVATION & BOOKING: We also collect information if you leave comments or make contact requests when you reserve and book the table or want to plan any event at our place. To secure, amend, or cancel reservations previously made, in addition, to verifying that reservations were honoured.

PHOTOS & CCTV RECORDING: We might take pictures at the events since it improves our marketing efforts and is in the best interests of the business. The disclaimer notice is displayed first to notify all of the Data Subjects.

We use your personal information to operate, provide, develop, and improve the services that we offer our customers. These purposes include:

PURCHASE AND DELIVERY OF PRODUCTS AND SERVICES We use your personal information to take and handle orders, deliver services, process payments and communicate with you about your reservations, restaurant booking, services, and promotional offers.

PROVIDE, TROUBLESHOOT, AND IMPROVE SOUL BEACH Services. We use your personal information to provide functionality, analyse performance, fix errors, and improve the usability and effectiveness of the SOUL BEACH Services.

RECOMMENDATIONS AND PERSONALIZATION. We use your personal information to recommend features and services that might be of interest to you, identify your preferences, and personalize your experience with SOUL BEACH Services.

COMPLY WITH LEGAL OBLIGATIONS. In certain cases, we collect and use your personal information to comply with laws.

COMMUNICATE WITH YOU. We use your personal information to communicate with you in relation to SOUL BEACH Services via different channels (e.g., by phone, email, chat).

ADVERTISING. We use your personal information to display interest-based ads for features and services that might be of interest to you. We do not use information that personally identifies you to display interest-based ads.

FRAUD PREVENTION AND CREDIT RISKS. We use personal information to prevent and detect fraud and abuse to protect the security of our customers, SOUL BEACH, and others.

To enable our systems to recognize your browser or device and to provide and improve SOUL BEACH Services, we use cookies and other identifiers. For more information about cookies and how we use them, please read our Cookie Notice.

Information about our Guests is an important part of our business, and we do not sell our customers’ personal information to others. We share customers’ personal information only as described below.

TRANSACTIONS INVOLVING THIRD PARTIES: We make available your services provided by third parties for use on or through SOUL BEACH. For example, we also use the third party for financial transactions, e.g., banks and debit and credit card providers.

THIRD-PARTY SERVICE PROVIDERS: We employ other companies and individuals and bind them with strict contracts, to perform functions on our behalf, e,g. sending postal mail and email, processing payments. These third-party service providers have access to personal information needed to perform their functions but may not use it for other purposes.

PROTECTION OF SOUL BEACH AND OTHERS: We release account and other personal information when we believe release is appropriate to comply with the law, legitimate business purposes, and agreements, and protect the rights, safety and property of the SOUL BEACH, our users or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. Other than as set out above, you will receive notice when personal information about you might be shared with third parties, or We will only use your personal data for the purposes for which we collected it.

CCTV: We have CCTV cameras, at all entrances to our buildings and in public areas such as our restaurants and lounges.  We use CCTV in order to better ensure the safety and security of our guests and our staff. It is in our legitimate interest to process any personal data captured. Your personal data will not be kept longer than necessary to meet the purposes detailed above. CCTV signage is in the place where required by local laws or regulations.

Please note we may process your personal data without your knowledge or consent, where this is required or permitted by law.

We design our systems with your security and privacy in mind.

We work to protect the security of your personal information during transmission by using encryption protocols and software.

We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of customer personal information. Our security procedures mean that we may ask to verify your identity before we disclose personal information to you.

Our devices offer security features to protect them against unauthorized access and loss of data.

You have certain rights relating to your personal data as a data subject, However, these rights can differ depending upon the country in which you are located. Those countries will determine which rights apply and in what instances. Under the Data Protection Law, you have the following rights:

  • Right of Access the personal data
  • Right to prevent processing likely to cause harm or distress.
  • Right to prevent processing for the purposes of direct marketing
  • Right in relation to automated decision making
  • Right to take action for compensation if the individual suffers damage.
  • Right to take action to rectify, block, erase or destroy inaccurate data

MARKETING COMMUNICATIONS. 

If you no longer wish to receive any marketing communications, remain on a mailing list to which you previously subscribed or receive any other communication from SOUL BEACH, please follow the unsubscribe link in the relevant communication. Even after you opt-out or update your marketing preferences, we may still contact you for transactional or informational purposes. These include, for example, customer service issues, surveys, or any questions regarding a specific reservation

It is important to understand that these rights are not absolute (e.g. their application may depend upon the legal basis we rely upon to process your personal data) and that we may require further information from you (e.g. to confirm your identity) in order to action your request.

If you have any questions as to how we collect and use your personal information, please contact us at dataprotection@soulbeachdxb.com.  

Where GDPR applies, you have the right to lodge a complaint with the supervisory authority in your country of residence.

We only collect the information, which is provided by you when you use SOUL BEACH services or websites or are available for the public.

You provide information to us when you:

  • Food preferences and services are on our website.
  • Place an order and book the Table.
  • Download, stream, view, or use the content on a device or through a service or application on a device.
  • When you complete the reservation form or send us an email for the same purpose.
  • Upload your contacts.
  • Communicate with us by phone, email, or otherwise.

AS A RESULT OF THESE ACTIONS, YOU MIGHT SUPPLY US WITH SUCH INFORMATION AS:

  • Identifying information such as your name, address, and phone number
  • Payment information
  • Your location information
  • Your IP address.
  • Addresses and phone numbers.
  • Email addresses 
  • Financial information

AUTOMATIC INFORMATION

Examples of the information we collect and analyse include

  • The internet protocol (IP) address used to connect your computer to the internet
  • Login, email address, and password
  • The location of your device or computer
  • Device metrics such as when a device is in use, application usage, connectivity data, and any errors or event failures.
  • SOUL BEACH metrics (e.g., the occurrences of technical errors, your interactions with service features and content, your settings preferences and backup information, location of your device running an application, information about uploaded images and files such as the file name, dates, times and location of your image.
  • The full Uniform Resource Locator (URL) clickstream to, though, and from our websites, including date and time; products and content you viewed or searched for; page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).
  • phone numbers used to call our customer service number.

We may also use device identifiers, cookies, and other technologies on devices, applications, and our web pages to collect browsing, usage, or other technical information.

Your personal data will not be kept longer than necessary to meet the purposes detailed above. The criteria that we use to determine how long we will keep your personal data include the period of time during which we have an ongoing relationship with you, and whether we have a legal obligation to store it.

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it and will delete or destroy it according to law.

CHILDREN: SOUL BEACH does not knowingly collect Personal Information from children under the age of 16, and users under the age of 16 should not submit any Personal Information to us.

If we have actual knowledge that Personal Information about a child under 16 years old has been collected, then we will take the appropriate steps to delete this Personal Information.

You have the right to withdraw your consent at any time by contacting the Data Protection Manager at dataprotection@soulbeachdxb.com.

Once we have received notification that you have withdrawn your consent, we will no longer process your application and, subject to our retention policy, we will dispose of your personal data securely.

We keep this Notice under regular review. We reserve the right, at our discretion, to change, modify, add, or remove a section of this Notice at any time. You are also encouraged to review this notice from time to time for updates. Modifications will be effective on the day they are posted.