DIFC Data Compliance

Compliance Framework

Webtrip Technology Solutions FZE is committed to compliance with:

• DIFC Data Protection Law (DIFC Law No. 5 of 2020)
• UAE Federal Law No. 45 of 2021 (Personal Data Protection Law)
• Dubai Health Authority (DHA) data handling requirements
• Dubai Tourism (DTCM) privacy regulations

Data Processing Principles

We adhere to the following principles:

• Lawfulness: Data processed only with valid legal basis
• Purpose Limitation: Data used only for stated purposes
• Data Minimization: Only necessary data is collected
• Accuracy: Data kept accurate and up-to-date
• Storage Limitation: Data retained only as long as necessary
• Security: Appropriate technical and organizational measures in place

Technical Safeguards

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication for admin access
• Regular security audits and penetration testing
• Automated backup systems with 30-day retention
• Data hosted in UAE-based servers only

Data Subject Rights

Under DIFC and UAE law, individuals have the right to:

• Access their personal data
• Rectify inaccurate data
• Erase data (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact: info@webtrip.me

Data Breach Protocol

In the event of a data breach, we will:

• Notify affected individuals within 72 hours
• Report to relevant UAE authorities as required
• Provide details of the breach and remediation steps
• Offer credit monitoring if financial data is compromised

Third-Party Processors

We only work with processors who:

• Are located in the UAE or have adequate data protection safeguards
• Have signed Data Processing Agreements (DPAs)
• Undergo regular compliance audits

Healthcare Data (DHA Compliance)

For healthcare clients, we implement additional safeguards:

• Role-based access control (RBAC)
• Audit logs for all data access
• Separate encryption keys for medical records
• Compliance with DHA Electronic Medical Records standards

Contact Our Data Protection Officer

For compliance inquiries:
Email: info@webtrip.me
Phone: +971 52 720 0555
Address: Office 304, Mirdif Hills Avenue, Dubai, UAE