GDPR Policy

General Data Protection Regulation (GDPR) Policy

Welcome to the General Data Protection Regulation (GDPR) Compliance Policy for UAE Luxury Stays, accessible via uae.bdjobgovt.com. Under the executive direction of Mizanur Rahman Hridoy, our platform operates as an elite digital publisher and luxury hospitality curator specializing in premium hotel bookings, private beachfront villas, and 7-star resort staycations across the United Arab Emirates. We are fully committed to protecting your personal data, ensuring transparency in all our data processing activities, and upholding the highest international standards of privacy, specifically in compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR).

1. Scope and Principles of Data Processing

This GDPR Policy applies to all individuals within the European Union (EU) and European Economic Area (EEA) who access our platform, interact with our high-end travel guides, or utilize our VIP concierge inquiry channels. We process personal data strictly in accordance with the core data protection principles established under Article 5 of the GDPR:

  • Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and in a completely transparent manner in relation to the data subject.
  • Purpose Limitation: Personal data is collected only for specified, explicit, and legitimate purposes—primarily to deliver premium travel insights, facilitate luxury resort inquiries, and optimize digital ad delivery—and is not further processed in a manner incompatible with those purposes.
  • Data Minimization: We ensure that personal data collected is adequate, relevant, and limited to what is strictly necessary in relation to the purposes for which it is processed.
  • Accuracy: We take every reasonable step to ensure that personal data is accurate and, where necessary, kept up to date.
  • Storage Limitation: Personal data is stored in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
  • Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

2. Lawful Bases for Processing Personal Data

Under Article 6 of the GDPR, we rely on specific lawful bases to collect and process your personal information when you explore our UAE luxury travel platform:

  • Consent: You have given explicit consent for the processing of your personal data for one or more specific purposes, such as subscribing to exclusive VIP booking alerts, receiving luxury staycation newsletters, or accepting non-essential advertising cookies.
  • Legitimate Interests: Processing is necessary for the purposes of legitimate interests pursued by UAE Luxury Stays, such as optimizing site architecture, enhancing server performance, monitoring digital fraud, and delivering contextually relevant luxury hospitality advertising through Google Ad Exchange (ADX) networks, provided those interests are not overridden by your fundamental rights.
  • Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (for instance, processing a VIP concierge advisory request).
  • Legal Obligation: Processing is necessary for compliance with a legal or regulatory obligation to which we are subject under UAE law or international commercial mandates.

3. Categories of Personal Data We Collect

When you navigate our high-end travel portal to review exclusive hotel reservation guides or luxury event staycations, we may collect and process the following categories of data:

  • Technical and Usage Data: Internet Protocol (IP) addresses, browser type and version, time zone setting, operating system, device identifiers, referring URLs, and page interaction details gathered via standard automated log files.
  • Contact Information: Full name, professional title, email address, phone number, and correspondence records when you submit inquiries directly to our VIP concierge or corporate partnership desks.
  • Commercial and Preference Data: Insights into your preferred UAE destinations (such as Palm Jumeirah, Downtown Dubai, or Saadiyat Island), interest in specific luxury hotel brands (such as Marriott Bonvoy or Jumeirah One), and preferred seasonal booking windows (including the October-December peak season).

4. Use of Cookies and Real-Time Bidding (ADX)

UAE Luxury Stays implements cookies, web beacons, and tracking pixels to analyze traffic patterns, enhance user experience, and serve personalized, commercial-intent advertisements. In alignment with GDPR requirements and ePrivacy directives:

We deploy a Consent Management Platform (CMP) that enables EU/EEA users to give or withhold informed consent before any non-essential cookies or third-party tracking scripts are activated on their browsers. Our advertising infrastructure utilizes Google Ad Exchange (ADX) and certified third-party vendor networks. These partners process anonymized technical identifiers to participate in real-time bidding (RTB) auctions for luxury travel inventory. Users retain the unrestricted right to modify, adjust, or revoke their cookie preferences at any time through their individual browser settings or via our on-site cookie configuration tools.

5. Your Fundamental Data Protection Rights Under GDPR

Under Chapter III of the GDPR, visitors residing within the European Union and the European Economic Area possess comprehensive rights regarding their personal data. We guarantee you the full capability to exercise these rights:

  • Right of Access (Article 15): You have the right to obtain confirmation from us as to whether personal data concerning you is being processed and to receive a clear copy of that personal data along with supplementary information regarding its processing.
  • Right to Rectification (Article 16): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you, including completing any incomplete data records.
  • Right to Erasure / “Right to be Forgotten” (Article 17): You have the right to request the deletion of your personal data when it is no longer necessary in relation to the purposes for which it was collected, or when you withdraw your consent and no other legal ground for processing applies.
  • Right to Restriction of Processing (Article 18): You have the right to obtain restriction of processing where you contest the accuracy of the data, the processing is unlawful, or we no longer need the data but you require it for legal claims.
  • Right to Data Portability (Article 20): You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller without hindrance.
  • Right to Object (Article 21): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on legitimate interests. You have an absolute right to object to the processing of your personal data for direct marketing purposes.
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on your explicit consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6. Cross-Border Data Transfers

As UAE Luxury Stays operates globally and is hosted on international cloud infrastructure, your personal information may be transferred to, stored, and processed outside the European Economic Area, including in the United Arab Emirates. When transferring personal data outside the EEA, we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR. These safeguards include the utilization of European Commission Standard Contractual Clauses (SCCs), ensuring an adequate level of data protection equivalent to European standards, and partnering exclusively with enterprise-grade hosting providers that enforce rigorous technical encryption protocols.

7. Data Security and Breach Notification Protocols

We maintain comprehensive technical and organizational security measures to protect your personal data from unauthorized access, accidental alteration, unlawful disclosure, or destruction. Our website enforces Secure Sockets Layer / Transport Layer Security (SSL/TLS) encryption across all endpoints. In the highly unlikely event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify the appropriate supervisory authority and affected data subjects without undue delay, in accordance with Articles 33 and 34 of the GDPR.

8. Third-Party Online Travel Agencies (OTAs)

Our platform contains editorial links to external Online Travel Agencies and premium booking platforms such as Booking.com, Expedia VIP Access, Marriott Bonvoy, and Jumeirah One. Once you navigate away from uae.bdjobgovt.com to reserve a suite or villa, the processing of your personal and payment details falls under the direct data protection protocols and privacy notices of those external providers. UAE Luxury Stays does not control and accepts no legal responsibility for the independent GDPR compliance of third-party platforms.

9. Data Retention Policy

We retain personal data only for the period necessary to fulfill the specific purposes outlined in this policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or regulatory requirements). For inquiries submitted through our concierge or corporate channels, records are routinely reviewed and securely purged once the communication has concluded and retention is no longer operationally justified.

10. Submitting a Data Protection Request and Contact Information

If you wish to exercise any of your GDPR rights, have inquiries regarding our data handling procedures, or wish to file a formal inquiry regarding your privacy, please direct your communication to our dedicated Data Protection Administration headed by Mizanur Rahman Hridoy. We will evaluate and respond to all legitimate requests within one calendar month, as mandated by the GDPR.

Corporate Office:
Level 41, Emirates Towers
Sheikh Zayed Road
Dubai, United Arab Emirates

Primary Communication Channels:
Data Protection & Privacy Requests: info@uae.bdjobgovt.com
VIP Concierge Support: support@uae.bdjobgovt.com
Legal, Compliance & ADX Partnerships: business@uae.bdjobgovt.com

For additional details regarding our platform rules and disclaimer frameworks, please review our Privacy Policy and Terms and Conditions.