ROBERTO'S RESTAURANT PRIVACY POLICY
1. About this Policy
Roberto’s Club Ltd (in this Policy, “Roberto’s”, “we” and“our”) is committed to safeguarding the privacy of the personal informationthat we process in the course of our business, including the personalinformation we receive from you.This Privacy Policy describes how and why wecollect, store and use personal information, and it provides information aboutyour rights as a Data Subject.This policy also sets out our commitment toensuring that any personal data which we process about you is carried out in compliancewith the applicable DIFC Data Protection Law.
2. What is Personal Data?
Personal data is any data relating to an identified oridentifiable natural person who can be directly or indirectly identified fromthat data, for example, information such as your name, identification number orlocation data. [1]
3. Who are we?
Roberto’s is a restaurant and lounge located in Dubai International Financial Centre (DIFC). We are part of the Skelmore Holdings Limited.We are authorised and regulated by the Dubai Financial Services Authority (“DFSA”) and our registered address is: Gate Village Building No. 1, DIFC, Dubai, UAE.Roberto’s is registered with the DIFC Data Protection Commissioner (the body that administers Data Protection Law and supervises businesses for compliance with data protection obligations) as a Data Controller. A Data Controller determines the purposes and means of the processing of personal data.
4. Scope of policy
This policy applies to personal data that we collect from visitors and customers through our website https://robertosrestaurants.com (“our website”), our mobile application (“our mobile app”), our in-restaurant Wi-Fi or communications that we receive from you via telephone, email, face-to-face or in writing at our registered address.
5. Consent
When you access or use the above platforms or provide us with your personal data, you are accepting and, consenting to us collecting and processing your personal data. If you do not consent, you may discontinue use of our platforms.We may update this Privacy Policy from time to time by posting the amended terms on the platforms mentioned in the above “Scope” section in accordance with applicable DIFC Data Protection Law
6. How do we collect your Personal Data?
We may collect and process the following information about you including but not limited to:
(a) Identity data: Your title, full name, and date of birth (for any birthday promotions);
(b) Contact details: contact information such as your address details for delivery orders, your mobile number and email address.
(c) Behavioural & Allergy data: Your food preferences and dietary requirements including information about allergies.
(d) Transactional/Financial data: Payment information for confirming reservations and for placing orders for food deliveries.
(e) Contact data: Information you provide to us when you contact us by email, telephone or face to face (in the context of making a reservation for example);
(f) Responses you provide us in our surveys.
(g) Behavioural & Lifestyle data: Data from social media profiles and preferences such as:
Lifestyle information such as seating preferences, ages of children, and other information necessary to fulfill special requests; and Photographs taken of you at our events or when you dine in at Roberto’s.
We may source such data when you:
(a) Subscribe for a newsletter with your email address.
(b) Place an order for food deliveries online.
(c) Make an online enquiry.
(d) Make a reservation with us on our website, over the phone or via our mobile app.
(e) Voluntarily complete a customer comments card/survey.
(f) Get in touch with us via email to contact us or provide any feedback.
(g) Connect to our guest Wi-Fi portal.
(h) Send us a letter, email or social media message.
(i) Register on our delivery ordering platform or mobile app.
(j) Book any of our events.
(k) Attend events that we host.
(l) From publicly available sources including information from your social media profile when you like or share our content or when you access our in-restaurant Wi-Fi (please note that the information we receive will depend on the privacy preferences you have set on your social media platforms).
What information is automatically collected by us?
There is “Device Information” about your computer hardware and software that is automatically collected by us, this information caninclude but is not limited to:
(a) Device type (e.g. mobile, computer, laptop, tablet)
(b) Cookies
(c) Operating system
(d) IP address
(e) Browser type
(f) Browser information (e.g., type, language, and history)
(e) Domain names
(f) Access times
(g) Settings
(h) Referring the website addresses
(i) Location information
(a) Identity data: Your title, full name, and date of birth (for any birthday promotions);
(b) Contact details: contact information such as your address details for delivery orders, your mobile number and email address.
(c) Behavioural & Allergy data: Your food preferences and dietary requirements including information about allergies.
(d) Transactional/Financial data: Payment information for confirming reservations and for placing orders for food deliveries.
(e) Contact data: Information you provide to us when you contact us by email, telephone or face to face (in the context of making a reservation for example);
(f) Responses you provide us in our surveys.
(g) Behavioural & Lifestyle data: Data from social media profiles and preferences such as:
Lifestyle information such as seating preferences, ages of children, and other information necessary to fulfill special requests; and Photographs taken of you at our events or when you dine in at Roberto’s.
We may source such data when you:
(a) Subscribe for a newsletter with your email address.
(b) Place an order for food deliveries online.
(c) Make an online enquiry.
(d) Make a reservation with us on our website, over the phone or via our mobile app.
(e) Voluntarily complete a customer comments card/survey.
(f) Get in touch with us via email to contact us or provide any feedback.
(g) Connect to our guest Wi-Fi portal.
(h) Send us a letter, email or social media message.
(i) Register on our delivery ordering platform or mobile app.
(j) Book any of our events.
(k) Attend events that we host.
(l) From publicly available sources including information from your social media profile when you like or share our content or when you access our in-restaurant Wi-Fi (please note that the information we receive will depend on the privacy preferences you have set on your social media platforms).
What information is automatically collected by us?
There is “Device Information” about your computer hardware and software that is automatically collected by us, this information caninclude but is not limited to:
(a) Device type (e.g. mobile, computer, laptop, tablet)
(b) Cookies
(c) Operating system
(d) IP address
(e) Browser type
(f) Browser information (e.g., type, language, and history)
(e) Domain names
(f) Access times
(g) Settings
(h) Referring the website addresses
(i) Location information
7. How is your Data used?
We require the information outlined in the previous section for the following reasons:
(a) To provide you with our goods and services.
(b) To deliver the food ordered by you.
(c) To understand and cater to your dietary requirements and to ensure that we take into account information about your food allergies, intolerances and/or preferences when preparing and delivering your order to you.
(d) To process advance booking payments.
(e) Send you newsletters with updates.
(f) To send you communications we think will be of interest to you, including emails, SMS, WhatsApp messages, and special promotions on our goods and services.
(g) To notify you of changes to our services.
(h) To improve our goods and services.
(i) For internal record keeping.
Our use of your personal data will always have a lawful basis, either because it is necessary to complete a booking, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests.
(a) To provide you with our goods and services.
(b) To deliver the food ordered by you.
(c) To understand and cater to your dietary requirements and to ensure that we take into account information about your food allergies, intolerances and/or preferences when preparing and delivering your order to you.
(d) To process advance booking payments.
(e) Send you newsletters with updates.
(f) To send you communications we think will be of interest to you, including emails, SMS, WhatsApp messages, and special promotions on our goods and services.
(g) To notify you of changes to our services.
(h) To improve our goods and services.
(i) For internal record keeping.
Our use of your personal data will always have a lawful basis, either because it is necessary to complete a booking, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests.
8. ‘Special Category’ Personal Data
Special Category Personal Data is personal data revealing or concerning (directly or indirectly) data that is sensitive in nature (e.g. biometric data pertaining to your religion or health).We may use certain sensitive (or “special category”) personal data where you have given your explicit consent to us doing so, to better serve and meet your needs. Examples of sensitive personal data we may collect and process include but is not limited to:
(a) Information about food allergies or food intolerances.
(b) Dietary requirements, which may imply or suggest your religion, health or other sensitive personal data; and
(c)Information about any mobility requirements.
(a) Information about food allergies or food intolerances.
(b) Dietary requirements, which may imply or suggest your religion, health or other sensitive personal data; and
(c)Information about any mobility requirements.
9. Sharing your Personal Data
We will not sell, distribute, or lease your personal information to third parties. Any personal information we request from you will be safeguarded under the DIFC Data Protection Law.
We will only share your personal data if we are required todo so by law or with the following entities:
Our third-party service providers, who help deliver services to you on our behalf including but not limited to our payment processor, delivery provider, our delivery platform, email verification, email marketing services, SMS platforms, WhatsApp messaging, customer relationship management system and guest Wi-Fi; our partner companies within the Skelmore Holdings, so you can be offered related goods and services, which we think may be of interest to you. Your explicit consent will be obtained should your data be shared with any other entity not specified above.
We will only share your personal data if we are required todo so by law or with the following entities:
Our third-party service providers, who help deliver services to you on our behalf including but not limited to our payment processor, delivery provider, our delivery platform, email verification, email marketing services, SMS platforms, WhatsApp messaging, customer relationship management system and guest Wi-Fi; our partner companies within the Skelmore Holdings, so you can be offered related goods and services, which we think may be of interest to you. Your explicit consent will be obtained should your data be shared with any other entity not specified above.
10. Will we transfer your Personal Data outside of DIFC?
We will take all steps reasonably necessary to ensure your data is processed fairly and lawfully, in accordance with the DIFC Data Protection Law, other applicable laws and this Policy.
When sharing your personal data with our service provider or our partner companies as set out in this Privacy Policy, some of the recipients may be located outside the DIFC.
Please note that your personal data will only be transferred outside the DIFC on one of the following bases:
(a) The jurisdiction where we send the personal data is providing an adequate level of protection for personal data.
(b) The third party to which the data is transferred to has provided appropriate safeguards that ensure the security of your personal data, in line with the DIFC Data Protection Law.
When sharing your personal data with our service provider or our partner companies as set out in this Privacy Policy, some of the recipients may be located outside the DIFC.
Please note that your personal data will only be transferred outside the DIFC on one of the following bases:
(a) The jurisdiction where we send the personal data is providing an adequate level of protection for personal data.
(b) The third party to which the data is transferred to has provided appropriate safeguards that ensure the security of your personal data, in line with the DIFC Data Protection Law.
11. Customer profiling
We may analyse (or appoint of third-party to analyse) your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. Please note that we may also make use of additional information about you when it is available from external sources to help us do this effectively.
However, you do have the right to object to us carrying out this type of automated processing. If you wish to do so please get in touch with us in writing – please refer to “Our contact details” section to obtain the relevant contact information
However, you do have the right to object to us carrying out this type of automated processing. If you wish to do so please get in touch with us in writing – please refer to “Our contact details” section to obtain the relevant contact information
12. Data security
Data security is very important to us, and to protect your personal data we have taken suitable measures to safeguard and secure data collected about you.
We train people who work for us on how to handle personal data appropriately and we restrict access to what is necessary for specific job functions. In addition, our employees and third-party service providers are subject to confidentiality and may not disclose your personal data unlawfully or unnecessarily.
Whilst we take all measures to protect your personal data, we cannot warrant or guarantee the security of your personal data and in agreeing to this privacy policy, you understand that you provide us with your personal data at your own risk.
We train people who work for us on how to handle personal data appropriately and we restrict access to what is necessary for specific job functions. In addition, our employees and third-party service providers are subject to confidentiality and may not disclose your personal data unlawfully or unnecessarily.
Whilst we take all measures to protect your personal data, we cannot warrant or guarantee the security of your personal data and in agreeing to this privacy policy, you understand that you provide us with your personal data at your own risk.
13. Direct marketing
We will send you the latest updates and promotions on our goods and services, which we think may be of interest to you. This information will be sent to you via email, SMS or WhatsApp.
If you wish to opt out of our promotional emails, please click on the unsubscribe link, which can be found at the bottom on each promotional email. Similarly, if you wish to opt out of our SMS or WhatsApp campaigns, please follow the opt-out instructions provided in the message.
Please note that opting out of our email, SMS and WhatsApp marketing campaigns only removes you from future marketing, but the personal data collected for the purpose of providing you with our goods and services will remain in our systems.
If you no longer wish to be contacted for marketing purposes, you can also email us at the following address: marketing@robertos.ae
If you wish to opt out of our promotional emails, please click on the unsubscribe link, which can be found at the bottom on each promotional email. Similarly, if you wish to opt out of our SMS or WhatsApp campaigns, please follow the opt-out instructions provided in the message.
Please note that opting out of our email, SMS and WhatsApp marketing campaigns only removes you from future marketing, but the personal data collected for the purpose of providing you with our goods and services will remain in our systems.
If you no longer wish to be contacted for marketing purposes, you can also email us at the following address: marketing@robertos.ae
14. How long do we keep your Personal Data?
We will retain your personal data for as long as necessary for the purpose for which we obtained it, unless you explicitly request for us to erase your personal information, or we are required by law to keep the data for longer.
15. Your Data Protection rights
Under DIFC Data Protection Law, you have certain rights over the personal information that we hold about you. Here is a summary of your rights:
(a) Obtain access to, and copies of, the personal data that we hold about you.
(b) Require us to correct the personal data we hold about you if it is incorrect.
(c) Require us to erase your personal data.
(d) Object at any time to the processing of your personal data.
(e) Require us to restrict our data processing activities.
(f) Require that we cease processing your personal data if the processing is causing you damage or distress.
(g) Withdraw the consent you have previously given us to process your personal data, if your consent was the basis under which your personal data was processed.
(h) We will inform all third parties to whom we sent your personal data to of your request to access, rectify, erase and restrict data processing activities or objection to the way your data is being processed, to the best of our abilities. We can inform you, if you so request, who the recipients of your personal data are.
(i)Ask us to transfer your personal data directly to you or to another company.
Please note that the above rights are not absolute, and we may be entitled to refuse certain requests where exceptions apply.
You also have the right to raise a complaint regarding non-compliance of our privacy policy where you have made a request to remove or delete your personal data from specific processing (for example, marketing communications).
(a) Obtain access to, and copies of, the personal data that we hold about you.
(b) Require us to correct the personal data we hold about you if it is incorrect.
(c) Require us to erase your personal data.
(d) Object at any time to the processing of your personal data.
(e) Require us to restrict our data processing activities.
(f) Require that we cease processing your personal data if the processing is causing you damage or distress.
(g) Withdraw the consent you have previously given us to process your personal data, if your consent was the basis under which your personal data was processed.
(h) We will inform all third parties to whom we sent your personal data to of your request to access, rectify, erase and restrict data processing activities or objection to the way your data is being processed, to the best of our abilities. We can inform you, if you so request, who the recipients of your personal data are.
(i)Ask us to transfer your personal data directly to you or to another company.
Please note that the above rights are not absolute, and we may be entitled to refuse certain requests where exceptions apply.
You also have the right to raise a complaint regarding non-compliance of our privacy policy where you have made a request to remove or delete your personal data from specific processing (for example, marketing communications).
16. How to exercise your rights?
If you would like to exercise any of the above rights, you can contact us in writing – please refer to “Our contact details” section to obtain the relevant contact information. We will endeavour to get back to you as soon possible but not later than within 28 days. In the event your request is particularly complex, we will notify you and keep you updated should it take longer than 28 days to process your request.
Please note: We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
Please note: We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it.
17. Cookies
Like many other websites, we use cookies. We use them to help you personalise your online experience.
A cookie is a text file that is placed on your hard disk by a web page server which allows the website to recognise you when you visit. Cookies only collect data about browsing actions and patterns, and do not identify you as an individual.
We use cookies for some of the following reasons:
(a) To verify your account and device and determine when you log in, so we can make it easier for you to access the services and provide the appropriate experiences and features; and
(b) To assist with analysing performance, we may use third-party cookies, such as Google Analytics.
Please note that you can set your browser to not accept cookies, but this may limit your ability to use the services. If you would like more information on cookies, we encourage you to visit www.aboutcookies.org/.
A cookie is a text file that is placed on your hard disk by a web page server which allows the website to recognise you when you visit. Cookies only collect data about browsing actions and patterns, and do not identify you as an individual.
We use cookies for some of the following reasons:
(a) To verify your account and device and determine when you log in, so we can make it easier for you to access the services and provide the appropriate experiences and features; and
(b) To assist with analysing performance, we may use third-party cookies, such as Google Analytics.
Please note that you can set your browser to not accept cookies, but this may limit your ability to use the services. If you would like more information on cookies, we encourage you to visit www.aboutcookies.org/.
18. Privacy Policies of other websites
We may update this Privacy Policy at any time. When we do, we will revise the date. We encourage you to check this page from time to time for any changes. This policy was last updated in December 2024.
20. Our contact details
If you have any questions about how we use your personal data, or you wish to exercise any of your data protection rights as provided by the law and described in this policy, please contact us:
By post at: Gate Village Building No. 1, Dubai International Financial Centre, Dubai, UAE
By email at: dataprotection@robertos.ae
By phone on: +971 4 3860066
By post at: Gate Village Building No. 1, Dubai International Financial Centre, Dubai, UAE
By email at: dataprotection@robertos.ae
By phone on: +971 4 3860066
21. DIFC Data Protection Commissioner
If you are not satisfied with how we are processing your personal data, you can make a complaint to the DIFC Data Protection Commissioner. You can contact them:
By post at: Dubai International Financial Centre Authority Level 14, The Gate Building
By email at: commissioner@dp.difc.ae
By phone on: +971 4 362 2222
You can find out more about your rights at https://www.difc.ae/business/operating/data-protection/
[1] https://www.difc.ae/files/4115/9350/4012/Commissioners_Guide_to_DP_Law_
_Regs_2020.pdf
[2] https://www.difc.ae/files/4115/9350/4012/Commissioners_Guide_to_DP_Law_
_Regs_2020.pdf
By post at: Dubai International Financial Centre Authority Level 14, The Gate Building
By email at: commissioner@dp.difc.ae
By phone on: +971 4 362 2222
You can find out more about your rights at https://www.difc.ae/business/operating/data-protection/
[1] https://www.difc.ae/files/4115/9350/4012/Commissioners_Guide_to_DP_Law_
_Regs_2020.pdf
[2] https://www.difc.ae/files/4115/9350/4012/Commissioners_Guide_to_DP_Law_
_Regs_2020.pdf