Responsibility

This Privacy Policy is provided by KRASOTA RESTAURANT L.L.C., Dubai, United Arab Emirates( “KRASOTA”, “we”, “us”, “our”), for and on behalf of itself and the various affiliated entities of the KRASOTA RESTAURANT L.L.C. This Data Protection Policy has been prepared with reference to “The General Data Protection Regulation”, the following laws of the United Arab Emirates: “Personal Data Protection Law” and “Federal Decree Law No.45 of 2021regarding the Protection of Personal Data” considerations and will be augmented by jurisdictional specific addendums from time to time.

We are committed to safeguarding the privacy of the personal information that we process in the course of our business, including the personal information we receive from you, the users of our website https://krasota.art/en, (hereinafter - “you” or “your”). This Privacy Policy describes how and why we collect, store and use personal information, and provides information about the rights of the individuals to whom such personal information relates.

For the purposes of applicable data protection laws, KRASOTA is typically the “data controller” of any personal information provided to us. Very occasionally, we will act on specific retainers as a “processor” (meaning that we process personal data only in accordance with the directions of a data controller, or as otherwise permitted by law).

Please read the following information carefully to understand our views and practices regarding how we handle personal information. If you have any queries about our approach to data protection that are not already addressed in this Privacy Policy, please contact our Director of Compliance & Quality, as per the contact details set out at the end of this Privacy Policy.

Collection of Personal Information

We may collect personal information from you in the course of our business, when you contact us or request information from us, when you instruct us to provide particular services or when you use our website.

The personal information that we process includes:

• full names;
• phone numbers;
• e-mail addresses;
• contact preferences;
• a city you would like to open a restaurant in;
• information relating to the matter on which you are seeking our feedback, including the details of your inquiry;
• any other information relating to you and/or your inquiry which you may provide to us.

We may collect your personal information when you interact with our website or use any of our online services. We collect most of this information directly from you, or through your use of our website.

The information you provide may be confidential, and we will maintain such confidentiality and protect your information in accordance with our professional obligations and applicable law.

Purposes

We will only use your personal information if we have obtained your consent (where necessary), or if we have another lawful basis upon which to do so (e.g. for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into such contract).

The purposes for which we process your personal information are as follows:

• Becoming partners with you;
• Providing services to you;
• Communicating with you in respect of your inquiries to Krasota;
• Managing our business relationship with you (or your organization) whether in connection with the partnership, provision of our services or any other inquiries;
• For any purpose related and/or ancillary to any of the above or any other purposes for which your personal data was provided to us.

Sharing your Personal Information

We may disclose your personal information to a recipient (i) for the purposes of outsourcing one or more of the purposes-related functions described above; (ii) to confirm or update information provided by you; (iii) to inform you of events, information about our services, and other important information, or (iv) for other purposes disclosed at or before the time the information is collected. If we reorganize our business, we may need to transfer your personal information to other affiliated entities or to third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

How long we keep your Personal Information

We will retain your personal information for the length of time needed to fulfil the purposes for which it was collected, unless we specifically agree a longer retention period with you, or a longer retention period is required or permitted by law.

Your Rights

Various rights may be available to you, depending on the circumstances and the applicable law. We summarize key rights likely to be available to most data subjects:

• Withdraw consent: When personal information is processed on the basis of consent, you may withdraw consent at any time, although such withdrawal will not affect the lawfulness of processing occurring prior to such withdrawal;
• Access and rectification, etc.: You may request access to and rectification or erasure of personal information, or restriction of Processing concerning the Data Subject or to object to Processing as well as the right to data portability; and
• Objecting and restricting: You may object, on legitimate grounds, to the processing of your personal information, or request that processing be restricted.

If you would like to exercise any of the above rights, or any other rights available to you pursuant to applicable law, please contact our Director of Compliance & Quality using the contact details set out below.

Cross-Border Transfer of your Information

Our servers are located in Russia and United Arab Emirates. If you are accessing our Services from outside Russia and United Arab Emirates, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information (see “Sharing your Personal Information” section above), in Russia, and other countries.

It may also be necessary for us to share your personal information with associated professional services firms around the world, who provide services to us or on our behalf (including data storage facilities or online storage located within or outside the United Arab Emirates, which may be operated by independent service contractors). This will entail a transfer of personal information from within Dubai to recipients outside the United Arab Emirates, and vice versa.

The level of personal information protection in the various jurisdictions in which we operate varies, and in some instances may not provide an adequate level of protection from an international perspective. To address this, we have procedures and safeguards in place to ensure the protection of personal information. These procedures include contractual obligations to ensure that all such entities safeguard your personal information and use it only for the purposes that we have specified and communicated to you. When we transfer your information to other countries, we will use, share and safeguard that information as described in this Privacy Policy.

Information Security

We have implemented reasonable administrative, technical and physical measures to protect your personal information against loss, misuse and alteration.

Changes to this Privacy Policy

We may from time to time make changes to this Privacy Policy. Where these are likely to be material, we will communicate these in advance. Otherwise, these will become effective once the amended Privacy Policy is posted on our website. Please check back regularly to keep informed of updates to this Privacy Policy.

Contact details

If you have questions or comments about this Privacy Policy, you may email us at dubai@krasota.art or contact us by the: +971 4433-12-58