Data Protection Policy

Who we are
Our website address is: https://orabellamilano.ae. We are committed to protecting and respecting your personal data in accordance with UAE Federal Decree‐Law No. 45 of 2021 (PDPL).


What personal data we collect & why

  • When visitors leave comments on our site, we collect the data provided in the comments form (such as name, email, content), your IP address, and your browser’s user agent string. This is necessary to detect spam, ensure security, and manage user interactions.

  • If you upload images, please avoid images with embedded location metadata (EXIF GPS). We do not collect or retain location data from those images unless explicitly provided by you.


Legal basis for processing
We process personal data only with your consent, or when necessary to fulfill a legal obligation, a contract, or other legitimate interest, always in a lawful, fair, and transparent manner. You can withdraw your consent at any time.


Cookies and similar technologies

  • If you leave a comment, you may opt-in to saving your name, email and website in cookies for convenience; these cookies last for one year.

  • Visiting our login page, we will set a temporary cookie to detect if your browser accepts cookies. This has no personal data and is removed when you close the browser.

  • Once logged in, cookies to save login status may last for two days; “Remember Me” option may persist login for two weeks; screen preferences may persist for one year.


Embedded content
Our pages may include embedded content (like videos, images or articles) from other sites. These behave as if you visited those sites directly. Those external sites may collect data about you, use cookies, embed trackers, etc.


How long we retain data

  • Comments and metadata are kept for as long as necessary, to allow for moderation, follow-up comments, or record of communications.

  • Data connected to user accounts is kept while the account is active, or pursuant to legal obligations requiring retention.

  • Once data is no longer required for the purpose for which it was collected, or is legally required to be kept, it will be deleted or anonymized.


Your rights
Under PDPL you have the right to:

  • Access your personal data;

  • Rectify inaccurate data;

  • Delete your data when it is no longer needed, or when you withdraw your consent;

  • Restrict or object to certain types of processing;

  • Data portability, where applicable;

  • Withdraw consent at any time.

To exercise any of these rights, contact us at info@orabellamilano.ae. We will respond without undue delay and in accordance with PDPL requirements.


Data protection officer (DPO)
If applicable:
We have appointed a Data Protection Officer who can be contacted at [DPO email/contact] for any privacy‐related questions or concerns.


Transfers outside the UAE
If we transfer your personal data outside the UAE, we ensure the receiving country or organisation provides an adequate level of protection, or has appropriate contractual or legal safeguards in place.


Security & breach notification
We implement appropriate technical and organisational measures to protect your personal data against unauthorized or unlawful processing, accidental loss or destruction.
In case of a data breach that may risk your rights or freedoms, we will notify the UAE Data Office and affected individuals as required by law.


How we share your data
We may share your data with trusted third parties (service providers, processors) who assist in operating our website, processing orders, sending communications, etc. We ensure they adhere to privacy standards and contracts that require them to protect data in compliance with PDPL.


Automated decision-making / profiling
If any decisions about you are made automatically (including profiling), we will inform you, explain how it’s done, and ensure you have the right to object or request human oversight.


Contact
If you have any questions about this policy or about how we process your personal data, you can contact us at: info@orabellamilano.ae