Privacy
policy.

The controller of the data collected on this site is The Penthouse Dubai, with offices at JBC 1, Cluster G, Office No 202, Jumeirah Lake Towers, Dubai — United Arab Emirates.

For any question relating to your data, please contact abirnakad.haaz@gmail.com.

We collect only the data necessary for our commercial relationship and for site security:

• Contact-form data: first name, last name, email, phone (optional), buyer profile, considered budget, message.

• Navigation data: anonymised IP address, preferred language, browser type, pages visited (aggregated statistics).

• Data exchanged in direct correspondence (email, WhatsApp): the content of your messages and any information you share with us spontaneously.

Your data is processed exclusively to:

• Respond to your contact or meeting request.

• Maintain the commercial and patrimonial follow-up of your file if you become a client.

• Improve the quality of our services (anonymised site-usage analyses).

• Comply with our legal and regulatory obligations.

No automated decision-making or profiling is applied.

Processing relies on:

• Your explicit consent, collected when you submit the contact form (tick box).

• Our legitimate interest in carrying out our real-estate advisory activity and maintaining site security.

• The performance of a contract or pre-contractual measures, when you engage in an acquisition process with us.

Your data is strictly reserved for the The Penthouse Dubai team. It is never sold, rented or shared with third parties.

It may be shared, under non-disclosure agreement, with our operational partners only when necessary to advance your file (developer, tax counsel, bank, notary) and with your prior consent.

Data collected is retained for the following periods:

• Contact requests not followed by a commercial relationship: 24 months maximum.

• Client files: duration of the commercial relationship + 5 years from last contact, for accounting and tax obligations.

• Anonymised navigation data: 13 months maximum.

We implement appropriate technical and organisational measures to protect your data: TLS encryption on all communications, hosting with a certified provider (Vercel Inc.), restricted access to authorised personnel only, regular backups.

In the event of a data breach likely to affect your rights, we undertake to inform you within 72 hours, in line with GDPR requirements.

Under the GDPR (EU) and the PDPL (UAE), you have the following rights:

• Right of access to your data.

• Right to rectification of inaccurate data.

• Right to erasure ('right to be forgotten').

• Right to restriction of processing.

• Right to data portability.

• Right to object to processing.

• Right to withdraw consent at any time.

• Right to lodge a complaint with the competent authority (CNIL in France, UAE Data Office in the UAE).

To exercise these rights, write to abirnakad.haaz@gmail.com. We commit to respond within 30 days.

Your data is stored on Vercel servers located in Europe and the United States. Transfers outside the EU/EEA are governed by the standard contractual clauses adopted by the European Commission, ensuring a level of protection equivalent to the GDPR.

This policy may be updated to reflect legal or organisational changes. The last-updated date appears at the top of this page.