Authority: The Personal Data Protection Authority;
Data Controller: means Ahlan, the entity which is responsible for determining when, why and how to Process Personal Data and for establishing practices and policies in line with applicable data protection law;
Personal Data: any information of any form related to an identifiable individual, or an individual who can be identified, directly or indirectly, particularly through their personal identification number, or one or more of their physical, physiological, intellectual, cultural or economic characteristics or social identity;
Process and Processing: any operation or set of operations carried out on Personal Data by automated or non-automated means, such as collecting, recording, organizing, classifying into groups, storing, modifying, amending, retrieving, using or revealing such data by broadcasting, publishing, transmitting, making them available to others, integrating, blocking, deleting or destroying them;
Sensitive Personal Data: any Personal Data which reveals, directly or indirectly, the individual’s race, ethnicity, political or philosophical views, religious beliefs, union affiliation, criminal record or any data related to their health or sexual life.
It is important that the Personal Data we hold is accurate and current. Please keep us informed if your Personal Data changes while you are a user of our Services.
The Application may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. Please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any Personal Data that may be collected through these websites or services, such as contact and location data. Please check these policies before you submit any Personal Data to these websites or use their services.
We may Process different kinds of Personal Data about you which we have grouped together as follows:
When you visit the Site or use the Application we may also Process aggregated, anonymized statistical or demographic data, which may be derived from your Personal Data but is not considered Personal Data in law as it cannot directly or indirectly reveal your identity.
If you provide Personal Data relating to other individuals in the order you are representing that you have their authority to provide their Personal Data to us and for the Processing of their Personal Data. We are entitled to rely upon such representations.
If we need to collect Personal Data by law, or under the terms of a contract with you, and you fail to provide such data when requested, we may not be able to perform the contract (an order, for example) we have or are trying to enter into with you. In these circumstances, we have the right to cancel or refuse to accept your order, but we will notify you if this is the case at the time.
By accessing the Site and/or Services using mobile digital routes such as, but not limited to, mobile, tablet or other devices/technology including the Application, then you should expect that our Processing of Personal Data as set out in this policy will apply in that context too.
Unless you have elected to remain anonymous through your device and/or platform settings, this information may be Processed by us automatically if you use the Service through your mobile device(s) via the Application, through your mobile's browser/the Site or otherwise.
Your Personal Data will enable us to provide you with access to the relevant parts of the Application or the Site or the Site and to supply the Services you have requested.
Your Personal Data will be Processed as permitted by law. Most commonly, we rely on the following types of lawful basis to Process your Personal Data:
Performance & Conclusion of Contract: in order to fulfil any orders you submit through the Application or in respect of your use of the Services;
Comply with legal obligation: in order for us to comply with any legal or regulatory obligation to which we are subject;
Protection of your vital interests: so that you receive the Service you expect to; and
Exercise our legitimate interests: so that we can conduct and manage our business in order to give you the highest standard of service.
Such activities connected to such lawful basis in respect of Processing your Personal Data may include:
We will only Process Sensitive Personal Data without your consent if it is:
Your express consent will be obtained in respect of all other Processing of Sensitive Personal Data.
We will only Process your Personal Data for the purposes for which it was collected unless we consider if reasonable that we need to use it for another reason and that reason is compatible with the original purpose.
Where you have indicated accordingly, you agree that we may use your Personal Data to let you know about our other products and services that may be of interest to you including services that may be the subject of direct marketing and we may contact you to do so by post, telephone, mobile messaging (e.g. SMS, MMS etc.) as well as by e-mail.
Where you have indicated accordingly, you agree that we may also share your Personal Data with third parties (including those in the food, drink, leisure, marketing and advertising sectors) to use your Personal Data in order to let you know about goods and services which may be of interest to you (by telephone, mobile messaging (e.g. SMS, MMS etc.) and/or e-mail), and to help us analyze the information we collect so that we can administer, support, improve and develop the Application and Services to you.
If you do not want us to use your Personal Data in this way or change your mind about being contacted in the future, please let us know by using the contact details set out below and/or amending your profile accordingly.
Please note that by submitting comments and feedback regarding the Application and the Services, you consent to us to use such comments and feedback on the Application and in any marketing or advertising materials. We will only identify you for this purpose by your first name and the city in which you reside.
The Personal Data you provide to us will be transferred to and stored on our servers.
Third parties may Process your Personal Data, such as:
If we enter into a joint venture, purchase or are sold to or merged with another entity, your Personal Data may be disclosed or transferred to the new company, our new partners or owners or their advisors.
We will share your Personal Data within Ahlan and any such group companies of Ahlan. We ensure your Personal Data is protected by requiring all group companies to follow the same rules when Processing your Personal Data.
Some third parties may be based outside of the Kingdom of Bahrain and so the Processing of your Personal Data may require a transfer of Personal Data outside of the Kingdom of Bahrain.
Whenever we transfer your Personal Data to third parties which are based outside the Kingdom of Bahrain we ensure that a similar degree of protection is afforded to your Personal Data.
There are limited occurrences where we are able to transfer your Personal Data outside of the Kingdom of Bahrain. For all other occurrences, your consent will be obtained prior to such transfer.
All Personal Data you provide to us is stored on our secure servers. Any payment transactions (carried out by us or our chosen third-party provider of payment processing services) will be encrypted using encryption technology. Where we have given you (or where you have chosen) a password that enables you to access certain parts of the Site or the Application, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
Once we have received your Personal Data, we will use strict procedures and security features to try to prevent your Personal Data from being accidentally lost, used or accessed in an unauthorized way.
We will collect and store Personal Data on your device using data caches and browser web storage (including HTML5) and other technology.
The Services or the Application may include social networking, chat room or forum features. Ensure when using these features that you do not submit any Personal Data that you do not want to be seen, collected or used by other users.
We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator when we are legally required to do so.
We will only retain your Personal Data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting or reporting requirements.
In some circumstances we will anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
In the event you do not use the Application for a period of one (1) year then we will treat the account as expired and your Personal Data may be deleted.
Under certain circumstances in respect of your Personal Data you have the right to:
Request access to your Personal Data (commonly known as a "data subject access request"). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it.
Request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
Request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to Process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to Processing (see below), where we may have Processed your Personal Data unlawfully or where we are required to erase your Personal Data to comply with applicable law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any Processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide the Services to you. We will advise you if this is the case at the time you withdraw your consent.
Object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to Processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal Data for direct marketing purposes (and you will always be able to opt-out via the “unsubscribe” link on an email from us). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of Processing of your Personal Data. This enables you to ask us to suspend the processing of your Personal Data in the following situations:
Request the transfer of your Personal Data to you or to a third party. We will provide to you, or a third party you have chosen, your Personal Data in a structured, commonly used, machine-readable format. Please note that this right only applies to information which was originally collected electronically and which you either consented to us using or was used to perform a contract with you.
If you wish to exercise any of the rights set out above, please contact us.
You will not usually have to pay a fee to access your Personal Data or to exercise any of the other rights. However, we may charge a reasonable fee if we consider your request to be unfounded, repetitive or excessive.
We may require specific information from you to help us confirm your identity and ensure your rights to access your Personal Data. This is a security measure to ensure that your Personal Data is not disclosed to someone who has no right to receive it.
We will respond to all legitimate requests within one (1) calendar month unless notified otherwise.
This acceptable use policy sets out the terms between you and us under which you may use the Ahlan mobile e-commerce application (the “Application”)(together the Site and the Application being the “Services”). This acceptable use policy applies to all users of, and visitors to, the Services.
We are the owners of or the licensee of all intellectual property rights in the Services, and in the material published on then (excluding your Contributions). Such rights are protected by copyright laws and regulations in the Kingdom of Bahrain and around the world. All such rights are reserved. You may not copy, reproduce, republish, download, post, broadcast, transmit, make available to the public, or otherwise use any content on the Services in any way except for your own personal, non-commercial use.
Commentary and other materials posted on the Services are not intended to amount to advice on which reliance should be placed. We therefore disclaim all liability and responsibility arising from any reliance placed on such materials by any visitor to the Services, or by anyone who may be informed of any of its contents.
To the extent permitted by applicable law, the Services are provided on an "as-is" and "as available" basis and we make no representation or warranty of any kind, express or implied, regarding the content or availability of the Services, or that they will be timely or error-free or that defects will be corrected, or that the Services or server that makes them available are free of viruses or other harmful components. Subject to the above, neither we nor any of our directors, officers, agents, employees or contractor shall have any liability for any direct, indirect, special or consequential losses or damages (including without limitation, damages for loss of business or loss of profits), arising in contract, tort or otherwise from the use or inability to use the Services. Nothing in these terms and conditions shall exclude or limits liability for death or personal injury resulting from our negligence or that of our agents or employees.
Any material you upload to the Services or data that we collect as set out in the customers terms and conditions [Ahlanrewards.com] will be considered non-confidential and non-proprietary, and you acknowledge and agree that we have the right to use, copy, distribute, sell and disclose to third parties any such material or data for any purpose related to our business. To the extent that such material is protected by intellectual property rights, you grant us a perpetual, worldwide, royalty-free license to use, copy, modify, distribute, sell and disclose to third parties any such material or data for any purpose related to our business.
Where the Services contain links to other sites and resources provided by third parties, these links are provided for your information only. We have no control over the contents of those sites or resources, and accept no responsibility for them or for any loss or damage that may arise from your use of them.
These terms and conditions and any dispute or claim arising out of, or in connection, with them, their subject matter or formation (including non-contractual disputes or claims) shall be governed by, and constructed in accordance with, the laws of the Kingdom of Bahrain.
The courts of the Kingdom of Bahrain shall have exclusive jurisdiction to settle any dispute or claim arising out of, or in connection with, these terms and conditions, its subject matter or formation (including non-contractual disputes or claims).