Use of the Expo Portal is subject to our Terms and Conditions ("Terms"). By consenting to this Policy you also agree to be bound by the Terms. Please ensure you read these carefully and understand them before consenting to this Policy.

We may amend this Policy from time to time to keep it up to date with legal requirements and the way we operate our business. Please regularly check these pages for the latest version of this statement. If we make material changes to this Policy, we will endeavor to inform you by either updating the date at the top of the page or by notifying you on our website or by email.

The Expo Portal may link you to other websites, including those of our partners, advertisers and affiliates. We are not responsible nor liable in any manner whatsoever for the way in which third party websites operate or the way in which they may process any Personal Data, which you provide to them. It is important that you understand this and check their respective privacy policies and terms of use.

• What is Personal Data
  • Personal Data in this Policy means any information relating to an identified or identifiable natural person (a 'Data Subject'). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• Creating registered accounts on the Expo Portal
  • Users are required to register their details and create an account on the Expo Portal in order to access the services offered by the One-Stop Shop.
  • If you register with us to create an Expo Portal account, we will process your personal data to:
    • Manage your access to certain parts of the Expo Portal and where applicable allow you to receive certain services
    • Send you communication and updates related to your participation
    • Enable you to download reading material on the One-Stop Shop services offered
• The Personal Data we will collect from you if you register with us to create an Expo Portal account will include identification data (such as your name, age, gender and country of residence), contact details (such as your email address, phone number and address).
• If you create an account with us, we will use your Personal Data to verify your identity when using the Expo Portal. We will also use your contact details to send you communication pertaining to your account and provide certain other account maintenance services.
• One-Stop Shop services and other services in relation to your participation
  • There are number of services available to you through the Expo Portal, the virtual One-Stop Shop, as part of your overall participation in Expo 2020 Dubai
  • Personal Data will be collected to provide the requested services required for such participation, and will be shared with third parties as may be necessary to provide such services, for instance with the UAE authorities
  • The data we collect might include some of your sensitive information, including, but not limited to, information associated with a minor for visa related purposes where the request is on behalf of a minor (if applicable).
• Information posted by you
  • The information posted by you on public areas of the Expo Portal or elsewhere on the internet may be used by anyone including Expo 2020 Dubai.
  • Expo 2020 Dubai may use cookies, pixel tags, local storage, and other technologies to automatically collect information through the services. These are collected for the purposes of developing the design and style of our products and services to make improvements, and do not store any sensitive information on the user
  • The Expo Portal collects information about how you use our content online, and the device(s) you use to access the site. This includes collecting unique online identifiers such as IP addresses, which are numbers that can uniquely identify a specific computer or other network device on the internet

• We will only collect, use and share your Personal Data where we have an appropriate legal basis to do so. Depending on where you are, appropriate legal bases may include:
  • Where we need to use your Personal Data to perform a contract or take steps to enter into a contract with you
  • Our legitimate interests as an organisation, for example we may use customer contact information to keep our customers informed about changes to the Expo 2020 Dubai and other important service messages; in these cases we will respect your privacy rights and ensure you may object to processing as explained in the "Your Rights" section (section ‎11) below
  • Where we need to use your Personal Data to comply with a relevant legal or regulatory obligation that we have; and
  • Where we have your consent to use your Personal Data for a particular activity. If you are a data subject in the UAE, this will always be the legal basis upon which your Personal Data will be processed
• If you would like to find out more about the legal bases upon which we process Personal Data please contact us.

• As part of the service delivered to you, we work closely with a number of trusted partners and third parties with whom we need to share your Personal Data to help us provide our services:
  • UAE Authorities, Government entities and other third parties (within the UAE or outside of it) to provide the requested services
  • Banks and payment providers, to authorise and complete payments
  • Third parties who help manage our business and deliver services. For example, these may include IT service providers who help manage our IT and back office systems, or third-party booking agents
• From time to time we may share information about you with government organizations and agencies, to comply with applicable laws, regulations and rules, and legitimate requests from law enforcement, regulatory and other governmental or international agencies, or when to do so is in our legitimate interests, even if we are not compelled to share that information by applicable law
• If, in the future, we sell or transfer some or all of our business or assets to a third party, we may disclose or transfer information to a potential or actual third-party purchaser of our business or assets.

We operate our organisation from the UAE, where we have our head office

In performing our operations, we may need to transfer data, including your Personal Data, to the European Union ("EU"), the Bureau International des Expositions (“BIE”) and the UAE. By agreeing to the terms of this Expo Portal Privacy Policy, you agree that your Personal Data may be transferred internationally from your location when you use our services or when you agree to this Expo Portal Privacy Policy. Our third-party service providers may also require to transfer your personal data to third countries outside the EU in order to perform their services

We will take appropriate steps to ensure that transfers of Personal Data are in accordance with applicable laws and carefully managed to protect your privacy rights and interests. If your Personal Data is being transferred outside the EU then transfers will be limited to countries which are recognized as providing an adequate level of legal protection as assessed by the European Commission or where we can be satisfied that alternative data protection arrangements are in place to protect your privacy rights. To this end, if required by law, where we transfer your Personal Data to third parties who help provide our products and services, we obtain contractual commitments from them to protect your Personal Data

You have a right to contact us for more information about the safeguards we have put in place (including, for EU data subjects, the right to receive a copy of relevant contractual commitments we have put in place, which might be redacted) to ensure the adequate protection of your Personal Data when this is transferred as mentioned above. See also the section titled "Your Rights" (section 11), below

• We invest an appropriate level of resources to protect the security and confidentiality of Personal Data:
  • We follow strict security procedures in the storage and disclosure of information which you have given us (including through password protection and, for certain transmissions to our services, encryption), to prevent unauthorised access to that information; and
  • We take all reasonable and appropriate steps to protect your Personal Data but cannot guarantee the security of any data you disclose to us via email or online.
• Storing your Personal Data
  • We will store your Personal Data for as long as reasonably necessary for the purposes for which it was collected, as explained in this Expo Portal Privacy Policy. Where your information is no longer required, we will ensure it is disposed of in a safe manner. In some circumstances we may need to store your Personal Data for longer periods of time, for instance where we are required to do so in accordance with legal, reporting, regulatory, tax, accounting requirements. Should you require information about how we retain particular information you can contact us
  • In specific circumstances we may store your Personal Data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.

• Our policy on "cookies"
  • A cookie is an element of data that a website sends to your browser, which then stores it on your system. Cookies may collect Personal Data about you. Cookies allow us to understand who has seen which pages to determine how frequently particular pages are visited and to determine the most popular areas of our website. Cookies also allow us to make Expo 2020 Dubai Websites more user-friendly by, for example, allowing us to take you to the language site of last use, so that we can give you a better experience when you return to our website.
  • Cookies will be deployed on your device when you visit the Expo Portal unless you indicate that you do not wish this to happen or if you have turned this feature 'off' in your web browser or device settings
  • Only the issuer of the cookie concerned may read or modify the information contained therein
• Your management and use of cookies
  • You can manage and modify your use of cookies through your browser software
  • The settings you make may change your Internet browsing and your conditions of access and use of certain services on the Expo Portal that require the use of cookies

• You may have rights relating to your Personal Data depending upon the country in which you access the Expo Portal
• Where you access the Expo Portal in the European Union (or otherwise benefit from rights as a data subject under the GDPR), you will have certain rights in relation to our handling of your Personal Data below, including the right:
  • To access your Personal Data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
  • To erase Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Please note that for certain purposes we may be legally obligated to retain your data. Please see the section titled "How we protect and store your information" (section ‎9).
  • To restrict the processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following scenarios
    • If you want us to establish the data's accuracy
    • Where our use of the data is unlawful
    • Where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
    • You have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it
  • To transfer your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you
  • To transfer your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you
  • To object to the processing of Personal Data where our lawful basis for such processing is our legitimate interests (or those of a third party) and you can specifically justify an objection to that processing on the basis that it impacts on your fundamental rights and freedoms
  • To object to how we use your Personal Data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • To obtain a copy of safeguards used when we transfer your Personal Data outside the jurisdiction in which the Personal Data were captured (as per paragraph ‎8.4).
  • To lodge a complaint with your local supervisory authority
• Please note that the rights referred to in paragraph ‎11.2 are not absolute and may be subject to our own rights in respect to the Personal Data
• You may have rights to lodge a complaint to a local privacy authority, however whether you lodge a complaint and who you lodge it with is solely your responsibility
• If you wish to access any of these rights, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing Personal Data to you. We reserve the right to refuse such access, if your request is manifestly unfounded or excessive
• You can exercise your rights by contacting us. Subject to legal and other permissible considerations, we will make every reasonable effort to honour your request promptly or inform you if we require further information in order to fulfil your request.
• We may not always be able to address your request fully, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way

If you provide Expo 2020 Dubai with Personal Data about your next of kin and/or related persons for emergency contact or any other purposes, it is your responsibility to inform such individuals about such activities and to obtain their consent, where necessary, to the processing (including transfer) of that Personal Data as set out in this Expo Portal Privacy Policy

• If you have any questions, concerns or complaints regarding our compliance with this Expo Portal Privacy Policy and the data protection laws, or if you wish to exercise your rights, please contact us. We will investigate and attempt to resolve complaints and disputes and will make every reasonable effort to honour your wish to exercise your rights as quickly as possible, and, in any event, within the timescales provided by data protection laws
• In some countries, you may have a right to lodge a complaint with your local data protection supervisory authority. We ask that you please attempt to resolve any issues with us before your local supervisory authority.