Privacy Policy

1. Introduction

La Dolce Vita Sharm El Sheikh ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website dolcevitasharm.com and use our services.

We process personal data in compliance with the European General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

3. Data We Collect

We may collect and process the following categories of personal data:

a) Data You Provide

• Name and email address (newsletter subscription)
• Contact information (email, phone, WhatsApp messages)
• Booking and reservation details (VIP tables, ticket purchases)
• Payment information (processed securely via third-party payment providers)

b) Automatically Collected Data

• IP address and browser type
• Device information and operating system
• Pages visited, time spent, and navigation patterns
• Referral source and search terms
• Cookies and similar technologies (see our Cookie Policy)

4. How We Use Your Data

We process your personal data for the following purposes:

• To provide and manage our services (ticket sales, VIP bookings)
• To send you newsletters and marketing communications (with your consent)
• To respond to your inquiries and provide customer support
• To improve our website, services, and user experience
• To comply with legal obligations
• To ensure the security of our website and services

5. Legal Basis for Processing

We process your data based on the following legal grounds under the GDPR:

• Consent (Art. 6(1)(a) GDPR): Newsletter subscriptions, marketing communications, and non-essential cookies
• Contract Performance (Art. 6(1)(b) GDPR): Processing ticket purchases and VIP reservations
• Legitimate Interest (Art. 6(1)(f) GDPR): Website analytics, fraud prevention, and service improvement
• Legal Obligation (Art. 6(1)(c) GDPR): Tax and accounting requirements

6. Third-Party Services

We use the following third-party services that may process your data:

a) Google Tag Manager & Analytics

We use Google Tag Manager to manage tracking scripts and Google Analytics to analyze website usage. Google may process data on servers in the United States. For more information, see Google's Privacy Policy.

b) Ticket Tailor

Our ticketing is provided by Ticket Tailor. When purchasing tickets, your data is processed according to Ticket Tailor's Privacy Policy.

c) Stripe

Payment processing is handled by Stripe. Your payment data is processed securely according to Stripe's Privacy Policy.

d) WhatsApp (Meta)

When you contact us via WhatsApp, your messages and contact data are processed by Meta. See WhatsApp's Privacy Policy.

e) Webflow

Our website is hosted on Webflow. See Webflow's Privacy Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Booking and transaction data: retained for the duration required by tax law (typically 7–10 years)
• Newsletter subscriptions: until you unsubscribe
• Website analytics data: 26 months (Google Analytics default)
• Contact inquiries: 12 months after resolution

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access – Request a copy of the data we hold about you
• Right to Rectification – Request correction of inaccurate data
• Right to Erasure – Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing – Limit how we use your data
• Right to Data Portability – Receive your data in a structured, machine-readable format
• Right to Object – Object to processing based on legitimate interests
• Right to Withdraw Consent – Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at info@dolcevitasharm.com. We will respond to your request within 30 days.

9. Data Transfers

Some of our third-party service providers are located outside the European Economic Area (EEA), including in the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-U.S. Data Privacy Framework.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include SSL encryption, secure hosting, and access controls.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.