- Introduction
This Privacy Policy describes how SIXTYLEVELONE RESTAURANT & CAFE L.L.C, trading as Billionaire Dubai (“Billionaire Dubai”, “the Company”, “we”, “us”), processes personal data (“Personal Data”) of users who visit or interact with our website (“Website”).
This notice applies solely to the Billionaire Dubai Website and does not apply to external sites that may link to or reference our Company. - Data Controller
SIXTYLEVELONE RESTAURANT & CAFE L.L.C
Trading as Billionaire Dubai
United Arab Emirates
Email: stephanie.ravessoud@majestas.com
The Company processes Personal Data of users who access or browse the Website in its capacity as the Data Controller. - Methods of Collecting Personal Data
We may collect Personal Data in various ways:
• Personal Data voluntarily provided by the user: Billionaire Dubai may collect personal information when users actively provide it, for example, by sending a request to the Company at the email address provided on the Website or by completing the “Contact Us” form. We may also process users’ Personal Data when they make a reservation or place an order directly through our Website.
• Personal Data collected through browsing and use of the Website: This includes information automatically gathered while users browse or interact with the Website. Upon accessing the Billionaire Dubai Website, users can choose which types of tracking technologies to enable through the cookie banner on the homepage. For more information on tracking technologies used, please refer to our Website’s Cookie Policy.
3.1. What types of Personal Data do we process?
• Personal Data: Identifying and contact information (name, email address, telephone number, browsing data, and any information provided by the user regarding the purpose of contacting Billionaire). When orders are placed through our Website, we may use business partners to ensure the requested service.
• Data collected during browsing: When users interact with the Website via computer or mobile device, we may automatically collect information about access methods, website usage, and the device used to connect. In addition to using the cookie banner, users can always accept or reject these technologies by changing privacy preference settings in their browser.
• Social Media Profiles: When users interact with our Website through social networks, we may receive information from the relevant platform regarding their personal account and any data the platform is authorized to share with third parties. Our Website includes links to our official pages and profiles on LinkedIn, TikTok, and Instagram.
• We may process: name, surname, Email address, telephone number, reservation details, date/time preferences, communications sent to us, browsing data and analytics.
• If online ordering, we may also process: order details, billing information (processed via third-party payment providers), transaction confirmations (but not full card details). - Why do we process users’ Personal Data?
Billionaire Dubai processes Personal Data exclusively for the following purposes:
a. To provide users with information about our services
Following a user’s specific request made via the Website, we may contact them to provide information regarding our services, venues, events, and activities.
Legal basis: Processing is necessary to respond to pre-contractual requests. If the user chooses to use our services, processing will occur under the contractual relationship established with Billionaire Dubai.
b. To enable users to make reservations through our Website
When a user wishes to book a table at one of our venues, we offer a booking service through our Website. We may rely on business partners to manage the reservation and may collect Personal Data such as name, surname, phone number, and email address.
Legal basis: Processing is necessary to perform pre-contractual measures requested by the user.
c. To enable online reservations through our Website
To allow users to book tables or experiences through our Website, possibly using third-party booking providers.
Legal basis: Pre-contractual steps.
d. To send newsletters and promotional communications
We may send newsletters and promotional messages to inform users about our services, promotions, news, exclusive events, and partnerships.
Legal basis: Based on the user’s explicit consent, which can be withdrawn at any time. Withdrawal does not affect the lawfulness of prior processing. Consent is optional, and refusal does not impact the user’s ability to access our services or products.
e. To carry out soft spamming activities
If a user is already our customer, we may send promotional communications about offers similar to those previously purchased, via email.
Legal basis: Our legitimate interest in keeping customers informed about Billionaire Dubai promotions.
Users can unsubscribe at any time via the link at the bottom of our emails or object to processing.
f. To ensure the proper functioning of the Website
We collect and use users’ Personal Data to manage and maintain our Website’s technical functionality and to respond to reports or complaints.
Legal basis: Our legitimate interest in ensuring proper technical/IT operation of the Website.
g. To inform users about changes to terms of use or this Privacy Policy
Legal basis: Our legitimate interest in keeping users informed of such updates.
h. To comply with legal obligations
To meet legal requirements or governmental orders, including those from foreign authorities, when disclosure of Personal Data is necessary to comply with such obligations.
Legal basis: Compliance with legal obligations.
i. To prevent fraud and misuse
To detect and prevent fraudulent or criminal activities related to the use of our services.
Legal basis: Our legitimate interest in protecting the Company from fraudulent activities.
j. To protect the Company’s legal interests
To enforce contractual terms, safeguard operations, and protect our rights, privacy, safety, or property, including pursuing legal remedies.
Legal basis: Our legitimate interest in protecting the Company’s rights and interests in accordance with applicable law. - Who has access to users’ Personal Data?
Personal Data are processed only by individuals authorized by the Controller. Certain information may be shared with companies and professionals providing services on behalf of Billionaire Dubai (e.g., SevenRooms and JustEat and other digital platforms for table bookings and order management).
Personal information may also be shared with companies belonging to the Majestas Group, of which Billionaire Dubai is a member, for service delivery purposes.
Such communication will comply with applicable data protection laws and, where necessary, will be governed by specific data processing agreements under Article 28 of the GDPR.
Where data is transferred outside the UAE or the EU, we ensure appropriate safeguards such as Standard Contractual Clauses or equivalent protections. - What are users’ rights regarding their Personal Data and how can they be exercised?
Users have the right, at any time, to obtain confirmation of the existence of their data, verify their accuracy, and request access, rectification, or completion including:
• Right of access – to obtain a copy of their personal information;
• Right to data portability – to receive their data in a structured format and transmit it to another controller;
• Right to rectification – to have inaccurate or incomplete data corrected without undue delay.
• Right to erasure – to request deletion of their Personal Data without undue delay where the data are no longer necessary for the purposes collected;
• Right to restriction of processing – to request temporary limitation of processing under specific circumstances;
• Right to object – to object to processing for reasons related to their particular situation or for direct marketing purposes.
If processing is based on consent, users may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise these rights, users may contact Billionaire Dubai at stephanie.ravessoud@majestas.com - Data Retention
We retain users’ Personal Data for as long as necessary to provide requested services and to fulfil contractual and legal obligations. For promotional activities, data are stored until a deletion request is received. In case of disputes, data may be retained for the duration necessary to defend the Controller’s legal interests. - Complaints to the Supervisory Authority
Users may lodge a complaint with their local supervisory authority. If based in the EU, complaints may be filed with the authority of their country of residence
