Privacy Policy
Owner and Data Controller
MY Q Advertising L.L.C
Burj Marina Tower, 11th floor
Lusail, Doha, QATAR
DPO Contact
MY Q Advertising L.L.C
Burj Marina Tower, 11th floor
Lusail, Doha, QATAR
Legal Information
This privacy statement was prepared based on the provisions of multiple legislations, including Art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
This Privacy Policy relates solely to the Mega Deals Platform, unless stated otherwise in this document.
Latest update: 15/10/2024
I. Definitions and Interpretation
In this Privacy Policy:
A. All used capitalized words and expressions shall have the following meanings.
B. Unless the context otherwise requires, words in the singular shall include the plural and vice versa.
Cookies/Identifiers
Cookies are small data files placed on a User’s device to identify him.Cookie Policy
The Mega Deals Cookie Policy, a copy of which can be found on either the Mega Deals Website or Mobile App.Data Controller (or Owner)
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data, including the security measures concerning the operation and use of this Platform.Data Processor (or Data Processor)
The natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller, as described in this Privacy Policy.Data Subject
The natural or legal person to whom the Personal Data belongs.European Union (or EU)
Unless otherwise specified, all references made within this document to the European Union include all current member states of the European Union and the European Economic Area (EEA).Personal Data (or Data)
Any information that directly or indirectly identifies a natural person, including, but not limited to, a username, password, or other identifiers.Usage Data
Usage Data includes information such as:IP addresses or computer domain names used by the Users.
URI (Uniform Resource Identifier) addresses and the time of the request.
The method used to submit the request to the server and the size of the file received in response.
The numerical code indicating the status of the server’s response (e.g., successful, error).
The country of origin, browser features, and operating system used by the User.
The time spent on each page within the application.
The path followed within the application, including the sequence of pages visited.
Other parameters about the device operating system and/or the User’s IT environment.
II. Types of Data Collected
Among the types of Personal Data that this Platform collects, by itself or through third parties, are: the email address, Usage Data, first name, last name, telephone number, Cookies, unique device identifiers for advertising (such as Google Advertiser ID or IDFA), and geographic location.
Complete details regarding each type of collected Personal Data are outlined in the relevant sections of this Privacy Policy or provided through specific explanatory notices displayed before Data collection.
Personal Data may be voluntarily provided by the User or, in the case of Usage Data, automatically collected when using the Platform. Unless stated otherwise, all Data requested by the Platform is required. Failure to provide mandatory Data may result in the inability of the Platform to deliver its services.
Users bear full responsibility for any third-party Personal Data they obtain, publish, or share through this Platform and must ensure that they have obtained the necessary consent from the third party to provide such Data to the Owner.
III. Legal Basis of Data Processing
The Owner may process Personal Data relating to Users if any one of the following applies:
A. Users have given their consent for one or more specific purposes.
Note: Under some jurisdictions, the Owner may process Personal Data until the User objects to such Data Processing ("opt-out"), without relying on consent or any of the other legal bases listed. However, this does not apply when the processing of Personal Data is subject to European data protection law.
B. The provision of Data is necessary for the performance of an agreement with the User and/or any pre-contractual obligations thereof.
C. Processing is required to fulfill a legal obligation imposed on the Owner.
D. Processing is necessary for performing a task in the public interest or for exercising official authority granted to the Owner.
E. Processing is necessary for the legitimate interests pursued by the Owner or a third party.
In any case, the Owner will clarify the specific legal basis for Data Processing, particularly when providing Personal Data is a statutory or contractual requirement or necessary to enter into a contract.
IV. Place
Data Processing occurs at the Owner's operating offices and other locations where parties involved in the Data Processing are based. Depending on the User's location, data transfers may involve transferring User Data to countries outside of the User's home country. For more information about where Data is processed, Users can refer to the section "Detailed Information on the Processing of Personal Data."
Users are also entitled to learn about the legal basis for Data transfers to countries outside the European Union, or to international organizations governed by public international law or established by two or more countries (e.g., the UN), and for the security measures the Owner takes to protect their Personal Data.
If such a transfer occurs, Users can find more details in the relevant sections of this Privacy Policy or contact the Owner using the provided contact information.
V. Retention Time
Personal Data will be processed and stored for as long as necessary for the purposes for which it was collected. Therefore:
A. Personal Data collected for purposes related to a contract concluded between the Owner and the User will be retained until the contract is fully executed.
B. Personal Data collected for the Owner’s legitimate interests will be retained as long as necessary to fulfill those purposes. Users can find more information about the legitimate interests pursued by the Owner in the relevant sections of this Privacy Policy or by contacting the Owner.
The Owner may retain Personal Data for a longer period if the User has consented to such Data Processing, provided that the consent is not withdrawn. Additionally, the Owner may be required to retain Personal Data for a longer period to comply with a legal obligation or by order of an authority.
Once the retention period expires, Personal Data will be deleted. Therefore, the right to access, right to erasure, right to rectification, and right to data portability cannot be exercised after the retention period ends.
VI. Purposes of Processing
Personal Data is collected to allow the Owner to provide its services, comply with legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), and detect fraudulent or malicious activity. Additionally, Personal Data may be used for the following purposes, among others: advertising, analytics, user communication, displaying content from external platforms, handling payments, location-based interactions, managing contacts and sending messages, platform services and hosting, backend infrastructure, User database management, SPAM protection, and tag management.
More detailed information on how Personal Data is used for each purpose is mentioned in the section “Detailed Information on the Processing of Personal Data”.
VII. Telephone Contact
Users who provide their telephone number may be contacted for commercial or promotional purposes related to this Platform, as well as for fulfilling support requests.
A. Personal Data processed: Telephone number.
B. Category of personal data collected: Identifiers.
VIII. Displaying Content from External Platforms
This service allows Users to view content hosted on external platforms directly from the pages of this Platform and interact with it. Even if Users do not interact with the content, web traffic data for the pages where the service is installed may still be collected.
A. Google Fonts
Google Fonts is a web font service provided by Google LLC that allows this Platform to display fonts on its pages.
Personal Data processed: Usage Data; various types of data as specified in the service's privacy policy.
Place of Processing: United States – Privacy Policy. Privacy Shield participant.
Category of personal data collected: Usage Data.
B. YouTube
YouTube is a video content visualization service provided by Google LLC, which allows this Platform to display video content on its pages.
Personal Data processed: Cookies and Usage Data.
Place of Processing: United States – Privacy Policy. Privacy Shield participant.
Category of personal data collected: Usage Data.
IX. Handling Payments
Unless otherwise specified, the Platform processes payments via debit or credit cards, bank transfers, or other methods through external payment service providers authorized by Mega Deals Retailers and other service providers. Users provide their payment details and personal information directly to these third-party payment processors. The Platform does not handle or store sensitive payment information; it only receives notification from the relevant service provider confirming whether a payment has been successfully completed.
X. Payment Solutions
A. Personal Data processed: Cookies, credit card information.
B. Place of Processing: Qatar.
LOCATION-BASED INTERACTIONS
XI. Non-Continuous Geolocation
This Platform may collect, use, and share geographic location data to provide location-based services. Most browsers and devices allow users to disable this feature by default. If explicit authorization is provided, the User’s location may be tracked by the Platform.
The User's geographic location is determined intermittently, either at the User’s specific request or when the User allows the application to detect the location automatically.
A. Personal Data processed: Geographic position.
B. Category of personal data collected: Geolocation data.
XII. Managing Contacts and Sending Messages
This service enables the management of a database of email contacts, telephone contacts, or other information to communicate with the User. This service may also collect data about when a message was viewed by the User and when the User interacted with it, such as clicking on links in the message.
XIII. Airship
A. Personal Data processed: Email address, gender, and purchase information.
B. Category of personal data collected: Personal marketing information.
XIV. SPAM Protection
This service analyzes the Platform's traffic to filter out SPAM, which may include Personal Data of Users.
XV. Tag Management
This service allows the Owner to centrally manage tags or scripts required on the Platform. As a result, the User's data may be passed through these services and, in some cases, retained.
XVI. User Database Management
This service allows the Owner to build user profiles based on information provided by the User, such as email address, personal name, or other details. The Owner can also track User activities using analytics features. This Personal Data may also be matched with publicly available information about the User (such as social network profiles) and used to create private profiles that the Owner can display and utilize to improve the Platform.
Some of these services may also enable sending timed messages to the User, such as emails based on specific actions performed on this Platform.
FURTHER INFORMATION ABOUT PERSONAL DATA
XVII. Push Notifications
This Platform may send push notifications to the User to achieve the purposes outlined in this Privacy Policy.
Users may, in most cases, disable push notifications by going to their device settings, such as the notification settings for mobile phones, and adjusting the settings for this Platform or all apps on the device.
Users should note that disabling push notifications may impact the functionality of the Platform.
XVIII. Selling Goods and Services Online
Personal Data collected is used to provide the User with services or to sell goods, including processing payments and arranging for delivery.
Personal Data collected to complete a payment may include debit or credit card details, bank account information, or other payment methods. The type of Data collected depends on the payment method or system used.
XIX. The Rights of Users
Users have the following rights regarding the processing of their Data by the Owner:
A. Withdraw Consent: Users have the right to withdraw their consent at any time where they have previously consented to the processing of their Personal Data.
B. Object to Processing: Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section "User’s rights to object to Processing."
C. Access Data: Users have the right to know if their Data is being processed by the Owner, to obtain details about the Data Processing, and a copy of the Data undergoing processing.
D. Verification and Rectification: Users have the right to verify the accuracy of their Data and request updates or corrections.
E. Restrict Processing: Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process the Data for any purpose other than storing it.
F. Delete Personal Data: Users have the right, under certain circumstances, to request the deletion or removal of their Data from the Owner's records.
G. Receive and Transfer Data: A. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to transfer it to another Data Controller without hindrance. This right applies when the Data is processed by automated means and based on the User's consent, a contract, or pre-contractual obligations.
H. Lodge a Complaint: Users have the right to bring a claim before the competent data protection authority.
XX. User’s Rights to Object to Processing
Where Personal Data is processed for public interest, in the exercise of an official authority vested in the Owner, or for the purposes of the legitimate interests pursued by the Owner, Users may object to such Processing by providing a justification related to their particular situation.
However, if their Personal Data is being processed for direct marketing purposes, Users may object to such Processing at any time without providing any justification. To determine whether the Owner is processing Personal Data for direct marketing purposes, Users may refer to the relevant sections of this document.
XXI. Exercise of These Rights
Any requests to exercise User rights can be directed to the Owner using the contact details provided at the beginning of this document. These requests can be made free of charge and will be addressed by the Owner as soon as possible, and in any case, within one month.
XXII. Cookie Policy
This Platform uses Cookies and other Identifiers. To learn more, the User may consult the Cookie Policy, a copy of which can be found on the Mega Deals Website or Mobile App.
XXIII. Legal Action
The User's Personal Data may be used for legal purposes by the Owner in court or during the stages leading to possible legal action arising from improper use of this Platform or related services.
The User acknowledges that the Owner may be required to disclose Personal Data upon request from public authorities.
XXIV. Additional Information About User's Personal Data
In addition to the information provided in this Privacy Policy, this Platform may provide Users with additional contextual information concerning specific services or the collection and Processing of Personal Data upon request.
XXV. System Logs and Maintenance
For operational and maintenance purposes, this Platform and any third-party services may collect files that record interaction with this Platform (system logs) and use other Personal Data (such as the IP Address) for these purposes.
XXVI. Information Not Contained in This Privacy Policy
Further details concerning the collection or Processing of Personal Data may be requested from the Owner at any time. The contact details are mentioned at the beginning of this document.
XXVII. Handling of “Do Not Track” Requests
This Platform does not support “Do Not Track” requests.
The compliance of third-parties services used by this Platform with "Do Not Track" requests is subject to their respective privacy policies.
XXVIII. Changes to This Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying its Users on this page and, where technically and legally feasible, by sending a notice to Users via any available contact information. It is strongly recommended that Users check this page frequently, referring to the date of the last modification stated at the beginning of this document.
If the changes affect Processing activities based on the User’s consent, the Owner will seek new consent from the User, where required.
XXIX. Categories of Personal Information Collected, Disclosed, or Sold
This section provides a summary of the categories of personal information that have been collected, disclosed, or sold, along with their purposes. Further details on these activities are available in the “Detailed Information on the Processing of Personal Data” section of this document.
XXX. Categories of Collected Personal Information
Collected categories of personal information about the User include: Identifiers, internet information, and geolocation data.
Additional categories of personal information will not be collected without notifying the User
XXXI. Sources of Information and Collection Methods
The above-mentioned categories of personal information are collected either directly or indirectly from the User when he use this Platform.
For example, the User directly provides his personal information when he submits requests via forms on this Platform. The User also provides personal information indirectly when he navigates the Platform, as personal information is automatically observed and collected.
Additionally, the Platform may collect personal information from third parties who work with it in connection with the service or the functioning of this Platform and its features.
XXXII. Use of Collected Information: Sharing and Disclosing Personal Information with Third Parties for a Business Purpose
The Platform may disclose the collected personal information to a third party for business purposes. In this case, the Platform enters into a written agreement with the third party that requires the third party to keep the personal information confidential and not use it for any purpose(s) other than those necessary for the performance of the agreement.
The Platform may also disclose personal information to third parties when the User explicitly asks or authorizes it, in order to provide the User with the Platform service.
The User can find out more about the purposes of Processing in the relevant sections of this Privacy Policy.
XXXIII. Sale of Personal Information
For the purposes of the Platform business, the word "Sale" means any selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic means, a User's personal information by the business to another business or a third party, for monetary or other valuable consideration.
This means that, for example, a Sale can occur whenever an application runs ads, makes statistical analyses on traffic or views, or uses tools such as social network plug-ins and the like.
XXXIV. User’s Right to Opt Out of the Sale of Personal Information
The User has the right to opt out of the Sale of his personal information. This means that whenever the User requests that the Platform stops selling the User’s data, the Platform will honor the User’s request.
Such requests can be made freely and at any time, without submitting a verifiable request, simply by following the instructions below.
XXXV. Instructions to Opt Out of the Sale of Personal Information
If the User likes to know more or exercise his right to opt out regarding all Sales carried out by this Platform, both online and offline, the User can contact the Platform for further information using the contact details provided at the beginning of this document.
XXXVI. Purposes for Personal Information Collection
The Platform may use the User’s personal information to allow its operational functioning and features ("Business Purposes"). In such cases, the User’s personal information will be processed in a manner necessary and proportionate to the business purpose for which it was collected, and strictly within the limits of compatible operational purposes.
The Platform may also use the User’s personal information for other reasons, such as commercial purposes (as indicated within the section "Detailed Information on the Processing of Personal Data" herein), as well as for complying with the law and defending the Platform’s rights before the competent authorities when the Platform’s rights and interests are threatened, or when the Platform suffers actual damage.
The Platform will not use personal information for different, unrelated, or incompatible purposes without notifying the User.
THE USER’S PRIVACY RIGHTS AND HOW TO EXERCISE THEM
XXXVII. The Right to Know and to Data Portability
The User has the right to request that the Platform discloses to him the following:
A. Categories and sources of the personal information collected, the purposes for which the Platform uses the User’s information, and with whom such information is shared;
B. In the case of the sale of personal information or disclosure for a business purpose, two separate lists where are disclosed:
For sales, the personal information categories purchased by each category of recipient; and
For disclosures for a business purpose, the personal information categories obtained by each category of recipient.
The disclosure described above will be limited to the personal information collected or used over the past 12 months.
If the Platform delivers the response electronically, the information provided will be "portable," i.e., delivered in an easily usable format to enable the User to transmit the information to another entity without hindrance, provided that this is technically feasible.
XXXVIII. The Right to Request the Deletion of Personal Information
The User has the right to request that the Platform deletes any of his personal information, subject to exceptions set forth by law (such as, but not limited to, where the information is used to identify and repair errors on this Platform, detect security incidents, protect against fraudulent or illegal activities, or exercise certain rights).
If no legal exception applies, as a result of exercising the User’s right, the Platform will delete his personal information and direct any of its service providers to do so.
XXXIX. Exercise of the User’s Rights
To exercise the rights outlined above, the User must submit a verifiable request to the Platform using the contact details provided at the beginning of this document.
For the Platform to process the User’s request, it needs to verify the User’s identity. Therefore, the User can only exercise the rights mentioned by submitting a verifiable request that must:
A. Provide sufficient information to allow the Platform to reasonably verify that the User is the person about whom the personal information is collected. Alternatively, the User may be represented by an authorized representative;
B. Describe the User’s request with enough detail to enable the Platform to understand, evaluate, and respond to it effectively.
If the Platform cannot verify the User’s identity, it will not be able to respond to the request.
C. If the User is an adult, he may submit a verifiable request on behalf of a minor under his parental authority.
The User may submit a maximum of two requests within a 12-month period.
XL. Requests Handling
The Platform will confirm receipt of the User’s verifiable request within 10 days and provide information about how it will process it.
The Platform will respond to the User’s request within 45 days of receipt. If more time is needed, the Platform will explain the reasons and specify how much additional time is required. The Platform may take up to 90 days to fulfill the request.
The Platform’s response will cover the preceding 12-month period.
If the request is denied, the Platform will provide an explanation for the denial.
The Platform does not charge any fees to process or respond to the verifiable request unless the request is manifestly unfounded or excessive. In such cases, the Platform may charge a reasonable fee or refuse to act on the request. In either case, the Platform will inform the User of its decision and explain the reasons behind it.