Privacy Policy
(a) Information about the Company’s customers: Personal information collected and processed by the Company for its business customers (the “Customers”), including personal information that Customers input into the Company’s e-Desk Travel platform for managing tourism offices and travel agencies (the “Platform”) while using the Company’s services, including the Website and the Platform (the “Services”).
(b) Information about users: Personal information related to representatives of the Customers (“Users”), including account details, system access information, and financial details for billing purposes.
(c) Information about Potential Customers: Personal information concerning visitors to our website, https://www.edesk.travel/ (the “Website”), and any other potential customer (the “Potential Customer”) who interacts with us via the Website, advertisements, content, email communication, or any other means.
If you are a Customer, User, or Potential Customer using the Platform and/or the Website, please read this Privacy Policy carefully. There is no legal obligation for you to provide the Company with your personal information, and you may choose to do so (or refrain from doing so) voluntarily. If you do not wish to provide personal information to the Company or for your personal information to be processed by the Company or any of its suppliers, you are requested not to use the Services.
This Policy is an integral part of the Website’s Terms of Use and the Platform’s Terms of Service. Any use or attempt to use the Website, Platform, and the Company’s Services constitutes agreement to this Privacy Policy, including the collection and processing of personal information as described below. To withdraw your consent, please contact us at: [email protected]
1. Collection and Disclosure of Personal Information
(a) Identifiable Information Provided Voluntarily by Customers, Users, and Potential Customers:
(b) Identifiable Information Provided During Communication with Customers, Users, and Potential Customers:
(c) Automatically Collected Information:
2. The Company as a Holder of Personal Information
With regard to Personal Information inputted into the Platform by the Company’s Customers about their customers, the Company will be a [“Processor”][“Controller”] of personal information as defined by the Privacy Law.[Obayda: this should be reviewed by Tarek to confirm or adjust terms and language under UAE law] The Company processes this personal information on behalf of its Customers and subject to their instructions.
3. Use of Personal Information
- a. To enable the use of the Services, including the Platform.
- b. To provide technical support, including by examining and monitoring the Services, as well as for diagnosing and fixing issues through remote access.
- c. To issue invoices and process payments.
- d. To allow you to customize the Services to your specific needs.
- e. To identify you and save you the need to re-enter your details upon repeat logins to areas requiring registration.
- f. To improve and enhance the Services, including the Platform.
- g. To optimize our marketing and sales systems, including enhancing our advertising means based on browsing and usage patterns on the Platform.
- h. To contact you and send you from time to time information related to the Services, including the Platform.
- i. To improve the Company's information security measures, including for preventing and managing fraud or unauthorized activity risks.
- j. To enforce the Terms of Use of the Website and/or the Terms of Service of the Platform, comply with legal requirements, and assist authorized authorities and any third party when the Company deems necessary.
- k. For any other purpose detailed in this Privacy Policy or the Terms of Service of the Platform and/or the Terms of Use of the Website.
4. Storage and Retention of Personal Information
5. Disclosure of Information to Third Parties
a. Proper provision of the Company’s Services: The Company may share personal information with selected service providers (the “Service Providers”) as part of providing the Services, including cloud storage providers, information security, billing and payment processing, data analysis, direct mailing, advertising, and legal or financial consulting. These Service Providers may have access to Personal Information we collect, subject to the data processing agreements concluded with them.
b. Interfaces with third-party services: Customers and Users may interface, via the Platform, with third-party services (e.g., payment processing services, passport scanning services), provided such an interface is supported by the Platform. These service providers may receive certain Personal Information about you, depending on the nature of the interface. If you do not wish for your personal information to be shared in this way, please contact the Customer who input your details into the Platform. For the avoidance of doubt, these third-party services, and any information you process, input, or transmit to them, are subject to their terms of use and privacy policies, not this Privacy Policy.
c. Fraud prevention: In case of actions that the Company deems to violate the law or the Terms of Service of the Platform, or attempts to perform such actions using the Services.
d. Binding order: In case the Company is required, by a court order or the request of an authorized authority, to provide personal information about you, subject to applicable law.
e. Legal dispute: In any dispute, claim, demand, or legal proceedings between you and the Company and/or anyone on its behalf.
f. Protection of you or a third party: When the Company deems the disclosure of information necessary to prevent serious harm to your rights, body, or property or those of a third party.
g. Mergers and acquisitions: If the Company transfers its activity/assets or any part thereof to a third party, the Company may transfer a copy of the personal information collected about you to the acquiring entity, provided the acquiring entity assumes similar obligations toward you as those outlined in this Policy.
h. Your explicit request: For the avoidance of doubt, the Company may share Personal Information about you in additional ways and circumstances, subject to your explicit consent, legal requirement, or data anonymization.
6. Cookies and Tracking Technologies
7. Direct Communication
Operational Notifications: The Company may contact you regarding important information related to the Services. For example, we may send you notifications about changes or updates to the Services, billing issues, system access attempts, password resets, and more.
Marketing Notifications: We may inform you about new features, additional value propositions, events, special opportunities, and/or any other information that we believe may be of value to you as a Customer, User, or Potential Customer. We may send these notifications through any communication means available to us, via the Services or through a marketing campaign on other websites. At any time, you may withdraw your consent to receive such information and stop receiving it by sending a written request to the Company.
8. Your Rights and Options
a. Right of access: You are entitled to access your Personal Information processed by the Company.
b. Right to rectify: You may request rectification or completion of Personal Information that is incorrect, outdated, or incomplete.
c. Right to delete: You may request the deletion of Personal Information if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if there is no other legal basis for its processing.
d. Right to restrict processing: You may request the restriction of processing in specific circumstances, such as when the accuracy of the Personal Information is contested.
e. Right to object: You have the right to object to the processing of your Personal Information for specific purposes.
f. Rights of the Data Subject: You have the right to receive the Personal Information that you provided to the Company in a structured, commonly used, and machine-readable format and to transmit such data to another controller, where technically feasible.
To exercise your rights, please contact us at [email protected]. Your request should include the necessary details to identify your account or the specific information in question, along with any supporting documentation. The Company will process your request in accordance with applicable law
9. Information Security
10. Governing Law and Jurisdiction
This Policy shall be interpreted in accordance with the laws of the United Arab Emirates [TBC with Tarek], and only such laws shall apply. By consenting to the use of the Services and/or the Platform, you agree that the exclusive jurisdiction for any claim, dispute, or legal action arising out of or in connection with this Policy shall be vested solely in the competent courts in ___________.[Obayda: this should be reviewed by Tarek to confirm or adjust the language if we will opt to UAE law]
11. Amendments to the Privacy Policy
For any questions or concerns regarding this Privacy Policy, please contact us at [email protected]