Privacy Notice

We are committed to protecting and respecting your privacy. This Privacy Notice (this “Privacy Notice”) governs the processing of your Personal Data by the Department of Economy and Tourism and its affiliates, Dubai Corporation for Tourism and Commerce Marketing and Dubai Festivals and Retail Establishment (collectively referred to as “DET”). It explains how we process your Personal Data and applies to the Personal Data that you provide us directly, or which we may obtain from other sources. Please read the following carefully to understand how we process your Personal Data.
References to "our", "us" or "we" within this Privacy Notice are to DET.

Jump to section

  1. Who We Are
  2. Data Controller
  3. Definitions
  4. What we collect from you?
  5. How long do we keep your Personal Data?
  6. Who do we share your Personal Data with?
  7. Where we store/transfer your Personal Data
  8. Security of Personal Data
  9. Links to other websites
  10. Your rights
  11. Cookie notice
  12. Contacting us
  13. Compliance and cooperation with regulatory authorities
  14. Changes to this Privacy Notice

Who We Are

DET is an entity established pursuant to Law No. 20 of 2021 having its principal office at P.O. Box 594, Dubai, United Arab Emirates. DET is the principal authority for the economic development of Dubai to be the global center for business, investment and tourism. DET is also responsible for the licensing of all commercial activity in Dubai. You can find out more about DET at:

Back to top

Data Controller

DET acts as the Data Controller of your Personal Data.
If you follow a link to a service provided by another government department, agency or other third-parties, that organisation will:

  • be the Data Controller
  • be responsible for processing any data you share with them
  • publish and manage their own privacy notice with details of how to contact them


“Processing” This means anything that is done to or with Personal Data (including simply collecting, storing or deleting the Personal Data).

“Personal Data” Any information which you provide to us which directly or indirectly personally identifies you, such as your name, email address, or other data which can be reasonably linked to you, such as information we associate with any accounts you may hold with DET.

“Data Controller” A Data Controller is a person, company, or other body that determines the purpose and means of the processing of Personal Data.

“Widget” A mini program on a web page that delivers information, such as news items or weather reports, while the rest of the web page remains as is. Widgets include search boxes, weather guides, pop-up windows and drop-down lists or a link to a different webpage.

Back to top


We process different categories of Personal Data to enable us to provide services to you, and as further described below.

  • contact details such as your personal or professional email address or telephone number.
  • identification data such as your name, city, country or emirate of residence, school or university name and designation.
  • web data such as cookies, username and password.

For which purposes we use your personal Data and the legal basis to do so

Purpose of processing Category of Personal Data Legal basis
For updates regarding Festival and tickets contact details, identification data Consent
To register and become a sponsor contact details, identification data Consent
To register at the Game Expo Summit as a speaker contact details, identification data Consent
To register as an Exhibitor at DEF 2024. contact details, identification data Consent

Where you have provided your consent, we (or permitted third parties) may contact you for direct marketing purposes via post, telephone, email, SMS/MMS, or social media channels such as Facebook, Instagram, X, YouTube, TikTok, Reddit, Twitch, LinkedIn or Snapchat. This marketing may relate to informing you about upcoming events, competitions, schemes, initiatives and promotions or other opportunities that are similar to those that you have already used or enquired about.

If you no longer wish to receive marketing communication from us you may unsubscribe by following the unsubscribe link in our email communications or by requesting us to delete your Personal Data by sending an email to: [email protected].

Our websites include links to the social media channels of DET such as Facebook, Instagram, X, YouTube, TikTok, Reddit, Twitch, LinkedIn or Snapchat and access to Widgets that run on our website. These links may collect your Personal Data such as your IP address, by placing a cookie. Your interactions with social media channels and Widgets are governed by the privacy notices of these social media platforms and providers of such Widgets. Our websites may also provide you the possibility of chatting by WhatsApp. Below are the links to their privacy notices:

Google Analytics processes information about:

  • the pages you visit on;
  • how long you spend on each page;
  • how you got to the site;
  • what you click on while you’re visiting the site.

We make sure you cannot be directly identified by Google Analytics data. We do this by using Google Analytics’ IP address anonymisation feature and by removing any other Personal Data from the titles or URLs of the pages you visit.

We will not combine analytics information with other data sets in a way that would directly identify who you are.

Cloudflare processes information such as your IP address to identify the country and city from which you are visiting the webpage.
We make sure you cannot be directly identified by Cloudflare data. We will not combine analytics information with other data sets in a way that would directly identify who you are.


We may also collect your Personal Data from third parties including:

  • Organisers or co-organisers of events, schemes or initiatives as well as service providers assisting us in organising such events, schemes or initiatives;
  • Our contractors and business partners that:
    • we work with to organise events, competitions, promotions and festivals;
    • provide us marketing services and conduct online and offline campaigns.

Back to top


We will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Privacy Notice. When assessing these periods, we carefully examine our need to collect Personal Data at all times and if we establish a relevant need, we only retain it for the shortest possible period to serve the purpose of collection unless a longer retention period is required by contractual obligation or law.


The Personal Data we collect may be shared with other government departments, agencies and public bodies. Where necessary to fulfil the purposes described in this Privacy Notice, we shall disclose your Personal Data to certain third-parties, vendors and service providers (such as our hosting partner) as described below. Whenever we share your Personal Data, we will always make sure this takes place in compliance with applicable privacy laws and in accordance with this Privacy Notice.

When we process your Personal Data, we might also share your Personal Data with selected third parties. These third parties will also be subject to data protection laws and will only process your Personal Data in compliance with our Privacy Notice and under appropriate confidentiality and security measures.
Examples of third parties we share your Personal Data with are:

  • Event organisers,
  • Organisations running competitions on our behalf, for example newspapers and websites,
  • Organisations sending you information about upcoming events or attractions,
  • Organisations and service providers that DET collaborates with in order to arrange and deliver programmes, competitions, and other initiatives
  • Ticket resellers

We might disclose Personal Data when required by any applicable law, or to protect or defend the rights or property of DET, our websites, or their users with other governmental bodies. We will only fulfil requests to share Personal Data where we are permitted to do so in accordance with applicable law or regulation.
Examples of these other governmental bodies are national security agencies, Dubai Police, Dubai Courts or other governmental departments from Dubai.

We will not sell or rent your Personal Data to third parties.

Back to top


All Personal Data that we collect from you is stored in UAE and EEA region.

We will take all reasonable steps to protect the Personal Data that we hold from misuse, loss, or unauthorised access, including by means of firewalls, password access and secure servers. In particular, we review our information collection, storage and processing practices, including physical security measures, to guard against unauthorised access to our systems, and restrict access to Personal Data to our employees, contractors and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.
Where we share your Personal Data within DET or with third parties we ensure it will be handled in compliance with relevant data protection laws such as the UAE Personal Data Protection Law (PDPL) and in accordance with this Privacy Notice. Where we do this, we will use appropriate safeguards to protect any Personal Data. Unfortunately, there is always a risk involved in sending information through any channel over the internet. If you suspect any misuse, loss, or unauthorised access to your Personal Data, please let us know immediately.

For some services we may use the ReCAPTCHA service provided by Google Inc. (Google) to protect your submissions via internet submission forms on our websites. Your use of ReCAPTCHA is subject to the Google Privacy Policy and Terms of Service .

Back to top


This Privacy Notice only applies to, and does not cover other government services and transactions that we link to.

If you go to another website from, read the privacy notice on that website to find out what it does with your Personal Data.

If you come to our website from another website, we may receive Personal Data from the other website. You should read the privacy notice of the website you came from to find out more about this.

Back to top


Under certain circumstances, you have a number of rights with regard to your Personal Data that we must comply with. The rights you have are:

The right to be informed
You have the right to be informed about the collection and use of your Personal Data by us or, on our behalf, by a third party.

The right to access
You have the right to obtain from us confirmation as to whether or not your Personal Data is being processed and, if so, the right to access that Personal Data. This right does not apply where it would adversely affect the rights and freedoms of another person.

The right to rectification
You have the right to request that we correct any inaccurate Personal Data and we must comply in a timely manner. Considering the purposes of the processing, you shall have the right to have incomplete Personal Data completed.

The right to erasure
You have the right to request the erasure of your Personal Data, in our possession, in a timely manner.

The right to restrict processing
You have the right to request the restriction of use of your Personal Data, where the data is not being used for the purpose it was collected for.

The right to object to processing
You have the right to object at any time to our use of your Personal Data where:

  • the processing is carried out for direct marketing purposes including profiling relating to direct marketing;
  • the processing is carried out for statistical surveys purposes;

The right to not be subject to automated decision making
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effect on you.

The right to complain to a supervisory authority
You have the right to submit a complaint to our supervisory authority. For more info,

The right to withdraw consent
When we process your Personal Data based on your consent, you have the right to withdraw your consent and inform us that you no longer wish us to collect, store, or use your Personal Data, where there is no business or legal reason for us to do so.
DET has procedures in place to ensure that it deals with any requests it receives in an efficient manner. You can exercise any of the above rights by contacting us at: [email protected] . We might need to ask you to provide some Personal Data in order to confirm your identity and to properly identify you throughout our systems.

Back to top


In some cases, we may also collect your Personal Data through the use of cookies. Where we use cookies, you can also control your Personal Data stored by cookies and withdraw your consent to cookies by using the browser-based cookie controls.
For further information on the cookies we use, please refer to the Cookie Notice .

Back to top


If you have any questions about this Privacy Notice or our privacy practices, including any requests to exercise your privacy rights, please contact us at [email protected] .
If you have any general enquiries, complaints or suggestions, please contact us at [email protected] .

Back to top


We regularly review our compliance with our Privacy Notice. When we receive formal written complaints, we will contact the person who made the complaint to follow up. We work with the regulatory authorities, including local data protection authorities, to resolve any complaints regarding the processing of Personal Data.

Back to top


We keep this Privacy Notice under regular review. In the future, we may revise or amend this Privacy Notice at any time by amending this page. You are also encouraged to review this Privacy Notice from time to time for updates.
This Privacy Notice should be read together with our Terms and Conditions and any other documents referred to in it.

Last modified: 28th March, 2024 (view archived versions)

Back to top