Privacy policy

1. Who is responsible

Planet Love EME is a brand of Braune International FZ-LLC, which is the controller for the processing described here:

2. What we collect and why

Visiting the website. When you open the website, our hosting provider Cloudflare processes the technical data every browser sends, such as IP address, time, requested page and browser type, to deliver the page and protect it against attacks. We use no analytics, advertising or tracking tools and set no cookies.

Booking list. If you join the booking list, we store your name, email address, WhatsApp number if given, number of guests and language, so we can tell you when booking opens. We do this only with your consent, which you can withdraw at any time.

Booking. If you book a place, we store your name, email address, WhatsApp number if given, number of guests, language, booking reference and status, and create one entry code per guest. We need this to manage your booking, send you your confirmation and codes and let you in on the day.

Entry. At the entrance our staff scan your code. We record whether and when a code was used, so that each code is valid only once. In case the network fails, staff devices keep a short list with names, number of guests and a check value of the codes for no longer than 36 hours.

Contact. If you contact us by email or WhatsApp, we use your details only to answer you.

3. Legal bases

Under the PDPL we process your data on the basis of your consent, to carry out your booking and to meet legal obligations. Under the GDPR the legal bases are Art. 6(1)(a) for the booking list (consent), Art. 6(1)(b) for booking and entry (contract), Art. 6(1)(c) for legal obligations such as keeping business records, and Art. 6(1)(f) for our legitimate interest in a secure website and in entry codes that can be used only once.

4. Service providers

We use a small number of providers that process data only on our instructions: Cloudflare, Inc. (USA) for hosting, database and security, and Resend, Inc. (USA) for sending booking emails. If we offer online payment, we will name the payment provider here beforehand. We do not sell your data and do not share it for advertising.

5. International transfers

Our providers may process data outside the UAE and outside your country, in particular in the USA and the EU. We make sure that such transfers are permitted under the PDPL and, for guests from the EU, the UK and Switzerland, are protected by an adequacy decision such as the EU-US Data Privacy Framework or by standard contractual clauses.

6. How long we keep your data

Booking list entries: until you withdraw your consent, at the latest 12 months after you signed up. Bookings, entry codes and entry records: deleted automatically 6 months after the event, unless the law requires us to keep them longer, for example invoices and payment records for the statutory retention period for business records (in the UAE generally 5 years). Technical logs at Cloudflare: a few days, as set by Cloudflare.

7. Your rights

Depending on the law that applies to you, you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a common format and to withdraw your consent at any time with effect for the future. We do not use automated decision-making or profiling. To exercise your rights, contact us via the contact above. We answer within 30 days, under the GDPR within one month.

8. Complaints

You can complain to the UAE Data Office. If you live in the EU, the UK or Switzerland, you can also turn to the data protection authority in your country, for example the Information Commissioner’s Office in the UK or the Federal Data Protection and Information Commissioner in Switzerland.

9. Storage in your browser

We save your language choice in your browser’s local storage, so that the site opens in your language next time. This value is not sent to us, and you can delete it in your browser settings at any time. We use no cookies.

10. Links to other services

The buttons for directions (Google Maps), sharing (WhatsApp) and our social media pages (Instagram, TikTok, Facebook) open these services only when you click them. From then on, their own privacy policies apply.

11. Age

Our events and this website are intended for adults. We do not knowingly collect data from persons under 18.

12. Security

All connections are encrypted (HTTPS). Only authorised staff can see booking data, protected by personal access keys. Your booking link contains a key that only you receive.

13. Changes

We update this policy when our services or the law change. The date at the top shows the current version.