UrArtU Gallery

Urartu Gallery (FZE)

(Notice regarding the processing of personal data)

1. Personal Data Controller

Name: Urartu Gallery (FZE)
Trade License Number: 5605
Registered Office and Management Address: Block B-B28-160
Telephone: +971 58 657 7303
Email Address: urartugallery@gmail.com
Website: https://urartugallery.com/

Urartu Gallery (FZE) ("the Company" or "the Controller") operates in accordance with Federal Decree-Law No. 45 of 2021 on Personal Data Protection ("UAE PDPL"). This Privacy Policy ("Policy") aims to inform each Client about the processing of personal data as per UAE regulations.

For the purposes of this Policy, a "Client" is any natural person who is a party to a contract with the Company for the purchase of goods and/or services, an individual who has expressed intent to enter into pre-contractual relations, or a user of the online store …………………, accessible at …………………., including legal representatives, directors, and employees of corporate clients.

2. What Personal Data Do We Process?

The Company processes the following categories of personal data:

Identification Data: Full name, Emirates ID, passport number, date of birth, nationality.
Contact Data: Address, telephone number, email.
Financial Data: Bank account details, payment transaction data.
Technical Data: IP address, device information, browser type, cookies.
Communication Data: Emails, call recordings (where applicable), and interactions with customer support.

We do not process special categories of personal data (e.g., biometric, health, or religious data) unless required by law.

3. How We Collect Personal Data

We collect personal data through:

Registration on our website or when using the online store.
Communication via email, phone, or other digital channels.
Cookies and analytics tools on our website.
Third parties, such as service providers, public records, or regulatory authorities.

Our website uses cookies to enhance user experience. For details, refer to our Cookie Policy at www………………com.

4. Legal Basis for Processing Personal Data

We process personal data based on the following legal grounds:

Performance of a Contract: To provide goods/services and fulfill contractual obligations.
Compliance with UAE Laws: Including financial, tax, and anti-money laundering (AML) regulations.
Legitimate Interests: Fraud prevention, network security, dispute resolution, and business operations.
Explicit Consent: When required by law, such as for direct marketing.

5. Data Retention Period

We retain personal data for the duration necessary to fulfill legal and contractual obligations:

Business and financial records: Retained for at least 5 years as per UAE Commercial and Tax Laws.
Marketing and communication data: Retained until consent is withdrawn.
Legal claims or disputes: Data is stored until the matter is fully resolved.

After the retention period, data is securely deleted or anonymized.

6. Sharing Personal Data

We may share data with:

Third-party service providers: Payment processors, logistics providers, IT support, marketing agencies.
Government and regulatory authorities: UAE Central Bank, Dubai Economy, Ministry of Interior, courts, law enforcement agencies.
Affiliated companies: For business operations where legally permitted.

Personal data may be transferred outside the UAE only if:

The receiving country provides adequate data protection; or
The transfer is based on explicit consent or contractual necessity.

7. Data Protection and Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

Encryption and secure storage of data.
Access control and authentication protocols.
Regular security audits and compliance checks.

In the event of a data breach, we will notify affected individuals and the UAE Data Office as required by law.

8. Your Rights Under UAE Law

As per the UAE PDPL, Clients have the following rights:

Right to Access: Obtain confirmation on whether we process your data and request copies.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of personal data under certain conditions.
Right to Restriction: Request limited processing in specific circumstances.
Right to Object: Object to processing for direct marketing or other legitimate interests.
Right to Data Portability: Request transfer of your data to another entity where feasible.
Right to Withdraw Consent: Revoke consent at any time without affecting prior lawful processing.

To exercise these rights, contact us at urartugallery@gmail.com

If you believe your rights have been violated, you may file a complaint with the UAE Data Office.

9. Changes to This Policy

We may update this Privacy Policy in response to legal or operational changes. Clients will be notified of significant changes through our website or direct communication.

Last Updated: 15/3/2025

For any inquiries regarding this Privacy Policy, please contact us at: urartugallery@gmail.com