1. General Provisions (UAE)

1.1. This Personal Data Processing Policy (the "Policy") has been developed in accordance with the requirements of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and the applicable Executive Regulations issued by the UAE Data Office.

1.2. This Policy governs the procedures for collecting, using, storing, disclosing, and protecting personal data of users of Papa Dubai digital services, including websites, booking systems, loyalty programs, CRM systems, and related platforms (collectively, the "Platform").

1.3. For the purposes of this Policy, the data controller and operator of personal data processing is:

THE DNA MANAGEMENT SERVICES CO. L.L.C — S.O.C
A limited liability company (Single Owner) duly incorporated and existing under the laws of the United Arab Emirates.
Legal Type: Limited Liability Company — Single Owner (LLC-SO)
Licensing Authority: Department of Economic Development, Dubai
Commercial License No.: 1 499 607
DCCI Membership No.: 611 793
Commercial Registration No.: 2 591 956
Registered Address: P.O. Box 45 400, Dubai, United Arab Emirates
License Valid Until: 30 April 2026

(Hereinafter referred to as the "Operator" or "Data Controller")

1.4. The Operator recognizes the protection of personal data as a fundamental right and undertakes to ensure that personal data is processed lawfully, fairly, and transparently, in accordance with the PDPL and this Policy.

1.5. This Policy applies to all personal data collected through the Platform, including but not limited to:

  • Online forms and reservations;
  • Loyalty programs and memberships;
  • CRM systems and integrations;
  • Marketing communications and subscriptions;
  • Direct communications via email, messaging applications, or other digital channels.