Natural History Museum Abu Dhabi will take visitors on a 13.8-billion-year journey through the story of our universe and our planet, offering a view into the origins and complexity of life as we know it. Igniting a lifelong passion for the natural world, visitors will leave with a thought provoking perspective into a sustainable future for our planet, empowering a new generation of advocates to help shape the next chapter of Earth's story.
This Privacy Notice complies with UAE PDPL. It outlines the legal basis for processing, user rights, and data protection practices. This Privacy Notice applies to information we collect about:
The notice provides information on how we use any personal information we collect about anyone interacting with us through online platforms. Their individual rights to access, correct, and manage the information we hold about them including privacy preferences and cookie settings. Additionally, it outlines how to contact us for queries or complaints about our use of personal information or how to opt out from non-transactional communication
Each processing activity is based on a lawful basis such as consent, legitimate interest, legal obligation, or contract. When requesting your personal information, we will clearly explain the purpose for which it is needed and how it will be used. We will also guide you to our relevant Privacy Notice for further details. Safeguarding your data is a top priority for us, and we take great care in storing this data.
Personal information is collected directly from you when you interact with us and allow us to do so.
For instance, we gather your information when you perform the following actions with us:
Information may be collected through our website, social media channels, or from any form of communication established with us.
The personal information we collect may include the following but not limited to:
We only use cookies that are strictly necessary for the basic functionality of the website.The information that we may collect about you broadly falls into the following categories:
General Visit Information: The General Visit Information is used to help Us to better understand how our customers behave. We do this by generating reports based on such aggregated data. We may also aggregate and combine your General Visit Information with the General Visit Information of many people across our network.
We use the reports for a variety of purposes, such as to:
Please note, once you are Registered with the Our Services your General Visit Information is combined with your Registration Information and Activity Information as set forth in the “Registration Information and Activity Information” section below. This information helps us to improve your experience in case you opt-in to receive promotional communications, by allowing sending you a personalized communication also based on your visits. Such data may also be combined with Third Party Data and used for research and analytics and/or to help serve advertising. We do not combine Registration Information and Activity Information with General Visit Information previously collected from your mobile device.
Registration Information and Activity Information: As noted above, once you Register with the Our Services, we may combine and associate your Registration Information and Activity Information with your General Visit Information.
All such information may be used by us for the following purposes:
Other Uses: We also use your information to:
We may also use your provided Personal Information to contact you regarding products, services, and offers when you opt-in to receive them. We allow you to opt-out from receiving promotional communications from us, as described in the “How you can opt-out” section below.
We may use cookies and similar tracking technology (collectively “Cookies”) to collect and use Activity Information about you (including to serve interest based advertising). For further information about the types of Cookies we use, why, and how you can control Cookies, please see our Cookie Notice.
Promotional communications opt-out:
We offer you choices regarding the receipt of promotional communications when you access the guest Wi-Fi services. If you receive promotional communications from us or from our Customers, you may unsubscribe at any time by contacting us using the contact details provided under the “Contacting Us” heading below.
Once we receive your opt-out request, you will no longer receive communications for direct marketing purposes from us and/or from our customers.
Your “opt-out” will not affect the lawfulness of the processing based on the consent before the withdrawal.
For clarity, we may still collect and use (except for direct marketing purposes) your MAC Address.
When you carry your device (with its Wi-Fi and/or Bluetooth function enabled) into one of our venues, the technology we use senses the following: the presence of your device, its signal strength, its manufacturer (Apple, Samsung, etc.), the geographic position and a unique identifier known as its Media Access Control (MAC) address. This combination of numbers and letters identifies a specific device to the surrounding Wi-Fi or Bluetooth networks. Because the MAC Address does not disclose the device owner’s real-world identity, that information is never collected. We promptly de-identify and de-personalize any MAC addresses we collect. General Visit Information is collected as your mobile device moves across different Locations that use our technology. For clarity, this information is automatically collected if your device’s WiFi is enabled – even if you do not actually “connect” to the Location’s WiFi network.
When you use Our Service, we may also automatically collect additional information from your mobile device. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered personal information under applicable data protection laws. We refer to this information as – “Activity Information”. This information does not reveal your specific identity but may include information about the specific mobile device you are using to access the Our Service, such unique device identifiers known as MAC Address, device type and model, operating system, browser type and language, your browser’s Internet Protocol address, start and stop timestamps of your connections, amount of traffic, hotspot from which you are connected, and the logout reason type. It may also include broad geographic location-related data (e.g. country or city-level location). We may use cookies and other tracking technologies to collect some of this Activity Information, as further explained under the section headed “How We Use Cookies and Similar Tracking Technologies”.
When you use the guest Wi-Fi services in one of our venues, registration is sometimes required. The “Registration Information” you may provide includes, for example, full name, telephone number, email address or demographic information (e.g. date of birth, gender, geographic area and preferences). You understand and agree that by providing Registration Information to Us, you are permitting Us to: a) store and access your personal data; b) link your personal data to the MAC address and your location, as offered by your mobile device; and, c) use your Registration Information in such other ways which accord with the terms and conditions herein set forth.
If you Log-In to the WiFi network via a third-party service, such as Facebook Login, Twitter Login or Google OpenID, we may access the information described in the third-party service’s request for authorization, such as your name, email address, gender, age, and home zip code. Please review your privacy settings with these third-party services to ensure you are sharing the information you wish to share.
We retain your information for as long as you are a user of the guest Wi-Fi services. We also retain this information after you are no longer a user or until it is no longer needed for the purposes for which it was collected. As far as such information is subject to any statutory data retention period exceeding afore-said storage period, We will store the data each concerned for the duration stipulated in the respective statutory provisions. In the latter case, the data will be stored in restricted form whereas further processing is allowed exclusively for the establishment, exercise or defense of legal claims, the protection of the rights of another person, or reasons of important public interest.
After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.
As of the date of this Policy, we store information in United Arab Emirates (UAE). We use third party provider who may process your personal data on Our behalf. We assessed the compliance and security measures implement by all of our providers and we signed Data Processing and Data Transfer agreements (where applicable) with them that comply with the PDPL & GDPR.
We use appropriate administrative, organizational, technical, and physical safeguards to protect the personal information we collect and process about you. The measure we use are designed to provide a level of security appropriate to the risk of processing your personal information and to help ensure that your data is safe, secure, and only available to you and to those you provided authorized access. Specific measures we use include using secure socket layer protection (which you can look up on your favorite search engine). We also take steps, like employing firewalls and authentication, to safeguard your information and prevent unauthorized access to it. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.
The guest Wi-Fi services may, from time to time, contain links to and from the website of third parties. If you follow a link to any of these websites, please note that these websites and any services that may be accessible through them have their own privacy policies and that we do not accept any responsibility or liability for these policies or for any Personal Information that may be collected through these websites or services. Please check these policies before you submit any personal data to these websites or use these websites.
We do not knowingly collect information from anyone under the age of 16 unless we first obtain permission from that child’s parent or legal guardian. However, if despite our best efforts we learn that we have collected information from a child under the age of 16 on our Platform, we will delete that information as quickly as possible. If you become aware that your child has provided us with personal information without your consent, please contact us using the contact details provided under the “Contacting Us” heading below.
We are dedicated to ensuring that its privacy practices are in compliance with the Principles and this Policy. Any employee that we determine is in violation of this Policy may be subject to disciplinary action up to, and including, termination of employment. We encourage you to direct any questions, concerns or complaints regarding the collection and use of your personal information to Our data protection officer (contact information provided below). We will investigate and work expeditiously to resolve any complaints or disputes in accordance with the Principles and this Policy. If we do not provide a timely response to you, or you are not satisfied with the way we have handled your matter, please contact the appropriate independent dispute resolution service identified in the beginning of this Policy. The services the Privacy Shield BBB are provided to you at no cost.
We promise to do our best to remedy any problems arising out of the failure to comply with the Principles, including taking responsibility for a third party agent’s processing of personal information received under the Privacy Shield. If the third party agent does not process your personal information consistent with this Policy and the Principles, and We are responsible for the events giving rise to the damage you have incurred, then we remain liable to you under the Principles.
We may update this Privacy Notice from time to time. This Privacy Notice applies to information we collect while that notice is in effect. When such changes occur, you will be able to view the new version of this Privacy Policy on our website. If we change this Policy in a manner that materially alters your rights or obligations under this Policy, we will use reasonable efforts to notify you of the change. For example, we could generate pop-up or similar notification when you access the Services for the first time after such material changes are made. Your use of the Platform after the effective date of the changes constitutes acceptance of the amended terms. We reserve the right to apply the amended terms to the information we have already collected, subject to any legal requirements. We suggest that you review our Privacy Policy regularly to see if there have been any changes.
Our website does not use cookies to collect personal data. We only use cookies that are strictly necessary for the basic functionality of the website.
We collect your information to fulfil our public task (serves as our legal basis for this data collection) and provide you with the service(s) you have requested.
When you sign up, subscribe, and opt in to our communications through online channels, then you are giving us your consent to send you non-transactional communications through email. We will never send you these communications without your consent, and you can opt out or withdraw your consent at any time.
The personal data we collect from you is only used for the purposes for which it was obtained. We ensure that we have a legal basis to use your personal information for the purposes mentioned in this Notice (usually with your consent, further to a legitimate interest’s assessment, or because the use of your data is necessary to comply with a legal obligation).
There are transactional communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. This may include thanking you and renewal letters, member benefits, queries regarding returned mail, bounced payments, booking, and purchases-related communications.
If you contact us with queries, comments, compliments or, complaints then we will keep a record of this correspondence and any associated documents so that we have the information available in the event of a follow up, dispute, or investigation.
If we make updates to our policies that may affect you, we will use your contact details to inform you of the changes.
We may send you promotional communication based on your consent. The communication that we might share with you includes:
It is within the museum's legitimate interests to store and perform analytics on your data to continue to improve our understanding of our visitors. This allows us to deliver world-class transformative, visitor-focused experiences, customer support, and knowledgeable visit.
Visitor analytics is done on aggregate basis so that individuals cannot be readily identified.
We carry out customer analytics to improve our understanding of our target audiences. This helps us target our marketing more efficiently, understand what topics you are interested in, and personalize and improve your experience if you have consented to receive communications from us.
You can choose to opt out from our marketing related communications at any time by visiting our website.
We will never sell, trade, or transfer your personal information to any third parties or external organizations, except as required by law. Your data will be used solely for the purposes stated in this Privacy Notice and will not be shared or sold under any circumstances.
The information that we hold about you will only be kept for such periods as is necessary to perform the required purpose unless a longer period for the retention of your personal information is required by law.
Under the UAE data privacy legislation, you have the following rights to have your data managed as per your wish:
Please note that the above rights are not absolute, and we may be entitled to refuse your requests where exceptions apply.
We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal information to those employees, agents and contractors who have a business need to know. They will only process your personal information on and as per our instructions, and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and the relevant authorities of a suspected breach where we are legally required to do so.
Natural History Museum Abu Dhabi may change and/or update this Privacy Notice from time to time to meet changes in the laws/standards, business needs, or to satisfy the needs of our visitors and members. We keep our Privacy Notice under regular review. Any changes to this Privacy Notice will be posted on our website and date-stamped so that you are always aware of the latest update.
Contact us Should you have any concerns or questions regarding your privacy; you may submit your inquiries to data.privacy@naturalhistorymuseum.ae