Privacy Policy

1. Introduction

The Abu Dhabi Heritage Authority (AHA) is committed to protecting the privacy, confidentiality, and security of personal information collected through the Turathuna website (the "Website").

This Privacy Policy explains how AHA collects, uses, stores, protects, and discloses personal information obtained through the Website and associated digital services. AHA is committed to ensuring that personal information is processed in accordance with applicable laws and regulations of the United Arab Emirates, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), where applicable.

By accessing or using this Website, you acknowledge that you have read and understood this Privacy Policy.

2. Scope

This Privacy Policy applies to all visitors, users, and individuals who interact with the Website, including but not limited to:

Website visitors

Event participants

Newsletter subscribers

Individuals submitting inquiries or feedback

Users of online forms and digital services made available through the Website

3. Information We Collect

3.1 Information Provided by You

AHA may collect personal information that you voluntarily provide through the Website, including:

Full name

Email address

Mobile or telephone number

Organization name

Job title

Event registration information

Feedback, inquiries, and correspondence

Any additional information voluntarily submitted through online forms

3.2 Information Collected Automatically

When you access the Website, certain information may be collected automatically, including:

Internet Protocol (IP) address

Browser type and version

Device type and operating system

Date and time of access

Referring website or source

Pages viewed and navigation patterns

Session information

Website performance and usage statistics

3.3 Cookies and Similar Technologies

The Website may use cookies and similar technologies to:

Ensure proper Website functionality

Improve user experience

Maintain session information

Measure Website performance

Analyze visitor behavior and usage trends

Users may manage cookie preferences through browser settings. Disabling cookies may affect certain Website functionalities.

4. Purpose of Processing

Personal information may be collected and processed for the following purposes:

Responding to inquiries and requests

Managing event registrations and participation

Providing information regarding AHA initiatives, programs, publications, and activities

Delivering newsletters and communications where subscribed

Improving Website performance and user experience

Conducting statistical analysis and reporting

Monitoring and protecting Website security

Detecting and preventing unauthorized activities

Meeting legal, regulatory, audit, and compliance requirements

Supporting heritage awareness, cultural engagement, and public services

5. Legal Basis for Processing

AHA processes personal information based on one or more of the following legal grounds:

User consent

Performance of a requested service

Compliance with legal or regulatory obligations

Performance of tasks carried out in the public interest

Legitimate organizational interests related to cultural heritage preservation, awareness, and public engagement

6. Information Sharing and Disclosure

AHA does not sell, rent, exchange, or commercially exploit personal information.

Personal information may be shared only when necessary with:

Government entities and regulatory authorities

Authorized service providers supporting Website operations

Technology and hosting service providers

Event management and communication service providers

Law enforcement agencies where required by applicable law

All authorized third parties are required to implement appropriate confidentiality and information security controls.

7. Data Security

AHA implements appropriate administrative, technical, and physical safeguards designed to protect personal information against:

Unauthorized access

Unauthorized disclosure

Accidental loss

Misuse

Modification

Destruction

Security controls may include:

Access control mechanisms

Encryption technologies

Secure hosting environments

Network monitoring

Vulnerability management processes

Security incident monitoring and response procedures

While AHA takes reasonable measures to protect information, no method of electronic transmission or storage can be guaranteed to be completely secure.

8. Data Retention

Personal information will be retained only for as long as necessary to:

Fulfil the purpose for which it was collected

Meet operational requirements

Comply with legal and regulatory obligations

Support audit and record management requirements

Resolve disputes and enforce legal rights

Upon expiration of applicable retention periods, information will be securely deleted, anonymized, or archived in accordance with applicable requirements.

9. Data Subject Rights

Subject to applicable laws and regulations, individuals may have the right to:

Request access to personal information

Request correction of inaccurate information

Request updating of personal information

Request deletion of personal information where legally permissible

Request restriction of processing

Object to certain processing activities

Withdraw consent where processing is based on consent

Requests may be submitted using the contact information provided in this Privacy Policy.

AHA reserves the right to verify the identity of individuals before processing any privacy-related requests.

10. International Data Transfers

Where operationally necessary, personal information may be processed or stored using technology platforms or service providers located outside the United Arab Emirates.

In such cases, AHA will implement appropriate safeguards and controls to ensure that personal information remains adequately protected and processed in accordance with applicable legal and regulatory requirements.

11. Third-Party Websites

The Website may contain links to external websites operated by third parties.

AHA is not responsible for the privacy practices, content, security, or operation of external websites. Users are encouraged to review the privacy policies of any third-party websites they visit.

12. Children's Privacy

The Website is not intended to knowingly collect personal information from children without appropriate parental or guardian consent where required by applicable law.

If AHA becomes aware that personal information relating to a child has been collected without appropriate authorization, reasonable steps will be taken to remove such information.

13. Monitoring and Website Security

To protect Website services and users, AHA may monitor network traffic, system activity, and Website usage for:

Security purposes

Performance monitoring

Fraud prevention

Detection of unauthorized access attempts

Investigation of security incidents

Any monitoring activities shall be conducted in accordance with applicable laws and regulations.

14. Changes to this Privacy Policy

AHA reserves the right to modify, update, or revise this Privacy Policy at any time.

Any changes will be published on this page and shall become effective upon publication unless otherwise stated.

Users are encouraged to review this Privacy Policy periodically.

15. Contact Information

For questions, concerns, or requests relating to this Privacy Policy or the processing of personal information, please contact:

Abu Dhabi Heritage Authority (AHA) 
Abu Dhabi, United Arab Emirates

Email: info@aha.gov.ae

Last Updated: June 2026