Privacy Policy

1. Data controller

MY DUBAI is the controller of your personal data collected through this website. Registered office: 48 boulevard des Coquibus, 91000 Evry-Courcouronnes, France. For any question about your data: contact@mydubai.fr. MY DUBAI is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR, given the nature and volume of its processing activities.

2. Data collected

As part of the contact form and quote requests, we collect only strictly necessary data:

• —First and last name
• —Professional email address
• —Phone number
• —Company name and business sector
• —Content of your messages and attached documents

No sensitive data (health, political opinions, etc.) is collected.

3. Legal basis and purposes of processing

Your data is processed on the basis of MY DUBAI's legitimate interest (Art. 6.1.f GDPR) to respond to your contact and quote requests and follow up on your Dubai project. Where you give your explicit consent to receiving commercial communications (Art. 6.1.a GDPR), your contact details may be used for that purpose. Your data is never transferred or sold to third parties.

4. Sub-processors and transfers outside the EU

MY DUBAI uses the following sub-processors, some of which are established outside the European Union:

• —Cloudflare, Inc. (USA) — website hosting and anti-spam protection (Turnstile). Transfer governed by the European Commission's Standard Contractual Clauses.
• —MailChannels (USA) — routing of contact emails. Transfer governed by Standard Contractual Clauses.

Our correspondents in Dubai only receive information strictly necessary to process your file and are bound by confidentiality obligations.

5. Retention period

Your contact data is retained for 3 years from your last contact, in accordance with CNIL recommendations. Data relating to contracts and invoices is retained for 10 years in accordance with legal accounting obligations. After these periods, your data is deleted or anonymised.

6. Your rights

In accordance with the GDPR, you have the following rights:

• —Access your data (Art. 15 GDPR)
• —Rectify inaccurate data (Art. 16 GDPR)
• —Erasure under the conditions provided (Art. 17 GDPR)
• —Restriction of processing (Art. 18 GDPR)
• —Data portability (Art. 20 GDPR)
• —Object to processing (Art. 21 GDPR)

To exercise these rights, send your request by email to: contact@mydubai.fr. A response will be provided within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr) if you believe your rights are not being respected.

7. Security

MY DUBAI implements appropriate technical and organisational measures to protect your data against loss, destruction, alteration or unauthorised access (HTTPS encryption, Cloudflare protection, restricted access).