For the most accurate pricing information, please reach out to the clinic directly by calling or sending us a message. Thank you for your understanding that prices may vary.
Unfortunately, it is in the nature of things that these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible when creating them.
Responsible for data processing
Responsible for data processing in accordance with the provisions of the GDPR and Law No. 45 is:
Novelty Clinic102 – Indigo Central 6umm al sheif - Dubai - Sheikh Zayed Road - UAE
If you have any questions about Cookies or about data protection in general, you can reach us at050-884-1815 or via email using firstname.lastname@example.org.
General information on data processing
In the course of our business and website operations, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so-called third countries outside the UAE. Where we transfer data outside the UAE, this is governed by Processing Agreements that include Standard Contractual Clauses to ensure a high level of data protection.
All Personal Data that we obtain from you via the website will only be processed if:
- you have given your consent,
- the data is necessary for the fulfilment of a contract / pre-contractual measures,
- the data is necessary for the fulfilment of a legal obligation or
- the data is necessary to protect the legitimate interests, provided that your interests are not overridden.
Data Storage and retention
Novelty Clinic processes and stores your Personal Data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular commercial and tax law) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.
Data that you provide automatically
To provide our website, we use the services of Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA who process all data to be processed in connection with the operation of our website on our behalf. The legal basis for the data processing is our legitimate interest in providing our website.
2- Log files
We or rather Webflow on our behalf, collects data on every access to our website. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing website.
4- Google Maps
Our website uses Google Maps on Google LLC of 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, to visually display our location. When using Google Maps, Google also collects, processes, and uses data about visitors’ use of the map functions, and this may include your IP address and device IP. The integration of Google Maps represents a legitimate interest.
Data that you provide voluntarily
a) Contacting us
If you contact us, we process the following data from you for the purpose of processing and handling your enquiry: Name, contact details (phone number and e-mail address) -if provided by you- and your message. The legal basis of the data processing is our obligation to fulfil the contract and/or to fulfil our pre-contractual obligations and/or our legitimate interest in processing your enquiry.
For our appointment bookings, we obtain your Name, E-mail, Phone Number, and additional information you provide to us as well as your payment details. The data you provide us with will also only be used for the purpose of your contact, bookings, or appointments and the services carried out. The legal basis for processing your data when booking an appointment is the preparation for a contract.
c) When you use our services
If you have contracted us to provide a service, we process your data (if provided: Name, contact details (email address and phone number), address, and all information required in the context of the performance of the services including health data you may provide, exclusively for the purpose of processing and handling the contractual relationship. This includes in particular our appropriate treatment, advice and support, correspondence with you, invoicing, fulfilment of our accounting and tax obligations.We ask you not to provide us with health data from the outset. If health data are relevant, we process them together with your other data. Your data will not be used by us for automated decision making or profiling, nor will it be shared with third parties. Accordingly, the data is processed on the basis of fulfilling our contractual obligations as well as to fulfil our legal obligations with your consent.
We process data within the scope of administrative tasks as well as organization of our business, financial accounting, service, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services (see above). The purpose and our interest in the processing lies in the administration, financial accounting, archiving of data, i.e., tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services.
e) Service Notifications
By using our services, you are giving your consent to receiving notifications and messages per email. Those typically include administrative information about your account and activity. Doing so we are using the services of AEserver of SAIF Zone, Building Z2, Suite #9, Sharjah, UAE. The legal bases are to provide you with our services and your consent.
Duration of data storage
We only store Personal Data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.
Transfer of Personal Data
We will not disclose or otherwise distribute your Personal Data to third parties unless this is necessary for the performance of our services, you have consented to the disclosure, or the disclosure of data is permitted by relevant legal provisions.
However, we are entitled to outsource the processing of your Personal Data in whole or in part to external service providers to support us, for example, in the technical operation of the service and the website, data management, the provision and performance of services marketing, as well as the implementation and fulfillment of reporting obligations.
The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the Law No. 45 and the GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us.
We may also disclose Personal Data to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfil our legitimate interests.
We are present on social media on the basis of our legitimate interest. If you contact us via social media platforms, you should note that the chat history can neither be deleted by us nor by you. And that, in accordance with the GDPR, the relevant social media platform and we are jointly responsible for the processing of your data and enter into a so-called joint controller agreement. The legal basis for the use of the relevant social media platform is our legitimate interest, your consent or, in the case of a (pre) contractual relationship with us, the initiation of a contractual service, if any.
Automated decision-making including profiling does not take place.
Do Not Sell
We do not sell your Personal Data.
We do not knowingly collect and process Personal Data of children.
Your data subject rights
These rights are standardized in the Law No. 45 and the GDPR. These include:
- the right to information, the right to rectification,
- the right to erasure,
-the right to restriction of data processing,
-the right to data portability, the right to object to data processing,
-the right to revoke any consent you have given, and the right to lodge a complaint with the competent supervisory authority.
Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us using email@example.com.
Access Request and updating your Personal Data
In the event that you wish to make a Data Subject Access Request, you may inform us in writing of the same using firstname.lastname@example.org. We will respond to requests regarding access and correction as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the respective legal regulations mentioned above).
Security and confidentiality
Our data processing is subject to the principle that we only process the Personal Data that is necessary for the use of our services. In doing so, we take great care to ensure that your privacy and the confidentiality of all Personal Data are always guaranteed.
All transmitted data is protected by HTTPS encryption. Hyper Text Transfer Protocol Secure (HTTPS) is a protocol used to ensure secure data transmission on the Internet. The public-private key procedure is used here. This means that data encrypted with a publicly accessible key can only be decrypted again with a separate private key.
We also use technical and organizational security measures (TOMs) throughout the company to protect the data we manage from you against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
We use Google Analytics from Google LLC to evaluate your use of our website, to compile reports on the activities and to provide other services related to the use of our website in order to improve the user experience. When Google Analytics is used, interactions of website visitors are primarily recorded and systematically evaluated with the help of cookies.
Google states that it will not associate your IP address with any other data held by Google. You can prevent the storage of cookies by setting your browser accordingly. You can also prevent the collection of the data generated by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
Advertising and Marketing
Insofar as you have also given us your consent, we may contact you for the purposes of advertising and marketing via the communication channels you have given your consent to. Advertising and Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.
We use the offer of Google Ads from Google LLC to draw attention to our attractive offers with the help of advertising media on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
We adhere to the Digital Advertising Alliance’s AdChoices program principles. If you do not wish to participate in our advertising personalization using your Personal Data or retargeting/tracking programs, you can opt-out by following the directions provided within the applicable advertisement, or directly at the AdChoices website and use the opt-out mechanism. Similar and if you are a European user, you can object to behavioral advertising at the EDAA`s Your Online Choices website and for Canadian Users on the Digital Advertising Alliance of Canada website. Or alternatively using the global Network Advertising Initiative`s opt out facility.
However, please not that opting out does not necessarily mean that no advertisements will be shown to you. It simply means that these advertisements will not be personalized for you by means of cookies, web beacons or similar technologies.
Links to other providers
Our website also contains – clearly recognizable – links to the websites of other companies. Insofar as there are links to websites of other providers, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.
Changes and updates
Concerns and Contact
If you have any concerns about a possible compromise of your privacy or misuse of your Personal Data on our part, or any other questions or comments, you can contact us.