Last Updated: 07-2024 

At Calvani Group, we are committed to protecting your privacy and ensuring the security of your personal information. We operate in various fields, including the import and export of agro-food products, luxury e-commerce, and the organization of luxury events for individuals and corporations. This privacy policy outlines in detail how we collect, use, share, and protect your personal data in accordance with UAE laws and major international regulations.

This privacy policy applies to all users of our website and to all our clients, whether they reside in the United Arab Emirates or elsewhere. It is designed to comply with the following international legal frameworks:

- Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL) of the United Arab Emirates.
- General Data Protection Regulation (GDPR) of the European Union (EU).
- California Consumer Privacy Act (CCPA) of the United States.
- Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.

We collect personal information directly from you when:

- You create an account on our website.
- You place an order or participate in an event.
- You interact with our customer service or respond to our surveys.
- You browse our site or use our online services.

The types of information collected include:

- Identity Information: name, address, email, phone number.
- Financial Information: bank details, payment information.
- Transactional Data: purchase history, product preferences.
- Technical Data: IP address, browser type, operating system, cookies.

We use your personal information for the following purposes, in compliance with relevant legal bases:

- Compliance with Legal Obligations: To meet applicable legal requirements, in accordance with Article 6(1)(c) of the GDPR and Section 1798.105 of the CCPA.
- Contract Execution: To process your orders and provide the requested services, under Article 6(1)(b) of the GDPR.
- Legitimate Interests: To enhance our services, personalize your experience, and offer relevant promotions, in accordance with Article 6(1)(f) of the GDPR.
- Consent: For direct marketing activities, when required, as stipulated in Article 6(1)(a) of the GDPR and Section 1798.120 of the CCPA.

We share your personal information only in the following cases:

- Third-Party Service Providers: With service providers for payment processing, product delivery, data analysis, and other necessary services. These providers are bound by strict contractual obligations to protect the confidentiality and security of your data (Articles 28 and 29 of the GDPR).
- International Transfers: When your data is transferred outside the EEA or the UAE, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other approved mechanisms, in accordance with Articles 44 to 49 of the GDPR.
- Legal Obligations: Your information may be disclosed to public or regulatory authorities when required by law, in accordance with Article 11 of the PDPL, Article 6(1)(c) of the GDPR, and Section 1798.115 of the CCPA.

We implement rigorous security measures to protect your personal data from unauthorized access, loss, or disclosure:

- Encryption: All sensitive data is protected by encryption during transmission using SSL/TLS technology.
- Access Controls: Access to personal data is restricted to authorized personnel only, in accordance with Articles 25 and 32 of the GDPR.
- Security Audits: We regularly conduct security audits to identify and address potential vulnerabilities.

You have the following rights regarding your personal data:

- Right of Access: You can request access to the personal data we hold (Article 15 of the GDPR, Section 1798.110 of the CCPA).
- Right to Rectification: You can request the correction of inaccurate or incomplete data (Article 16 of the GDPR).
- Right to Erasure: You can request the deletion of your data under certain conditions (Article 17 of the GDPR, Section 1798.105 of the CCPA).
- Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable format (Article 20 of the GDPR).

We retain your personal information for as long as necessary to fulfill the purposes described in this policy or to comply with our legal obligations (Article 5(1)(e) of the GDPR). Retention periods may vary depending on the nature of the data and legal requirements.

As a global company, your personal data may be transferred and processed in countries other than the one in which you reside. We ensure that these transfers comply with applicable laws, including Articles 44 to 49 of the GDPR, using mechanisms such as:

- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules (BCRs)
- Privacy Shield Framework (for transfers between the EU and the United States, although this framework is currently under review)

We use cookies and similar technologies to enhance the functionality of our website, personalize your experience, and analyze traffic trends. You can manage your cookie preferences via your browser settings or our online preference center.

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children without parental or guardian consent, in accordance with Article 8 of the GDPR and the Children's Online Privacy Protection Act (COPPA) of the United States.

We reserve the right to update this privacy policy to reflect changes in our practices or to comply with new regulations. We will notify you of any material changes by email or through a prominently displayed notice on our website.

For any questions or requests regarding this privacy policy, or to exercise your rights, please contact us at:

Calvani Group
Dubai, United Arab Emirates
Email: contact@calvani-group.com
Phone: +971 505095890 / +971 505086293

We are committed to complying with all applicable data protection laws in each country where we operate. We work with specialized legal advisors to ensure ongoing compliance with global data protection requirements.