01 · Legal
Our Commitment and Consent
• Data protection: The award's management is committed to protecting the data and information collected from participating establishments, users, evaluators and members of the judging committees, in accordance with the laws and regulations in force in the State of Qatar. • Scope of data collection: Data is collected as necessary to administer registration, participation, evaluation, judging, communication, the announcement of results, and the management of the platform and its related services. • Data minimisation: The management undertakes not to request data that unjustifiably exceeds what is necessary to fulfil the purposes of registration, evaluation and the administration of the award and the platform. • Consent: Using the platform or submitting an application to participate constitutes consent to the processing of the data necessary to administer participation and services in accordance with the published privacy policy and terms, to the extent permitted by law.
02 · Legal
Data We Collect
• Establishment data: The data collected may include the establishment's name, registration and licence details, address, contact details, details of the establishment's representative, the categories applied for, and the documents, information and evidence submitted for evaluation purposes. • User data: User data may be collected as necessary to create accounts, take part in reviews or voting, or use the services available through the platform. • Voting data: Where public voting is used, the data necessary to verify the validity of votes and to prevent duplication or manipulation may be collected. Voting data may not be used in a manner that contravenes the published privacy policy.
03 · Legal
How We Use Data
• Use of data: Data may be used to verify participants' eligibility, manage applications, conduct the evaluation, communicate with participants, handle complaints and appeals, issue results and reports, and improve the platform and services. • Communications: Contact details may be used to send messages relating to participation, the account, the evaluation, the results or services related to the platform. Marketing messages are subject to the approved rules and options for subscribing or unsubscribing. • Cookies: Cookies and similar technologies may be used to operate the platform, improve the user experience, analyse usage and protect the system, in accordance with the approved privacy policy. • Preventing manipulation: Technical means may be used to verify that reviews or votes come from genuine users, and to detect fake accounts, automated activity or abnormal patterns. • Photography and media coverage: The awards ceremony and related events may be photographed, and the photographs and video footage may be used for documentation, media and promotional purposes, in accordance with the applicable regulations and policies.
04 · Legal
Publication and Confidentiality
• Public information: General information about participating or winning establishments may be published, such as the trade name, category, position, year of winning, and any information the establishment has agreed to publish in its public profile. • Confidential information: Documents and data submitted for evaluation purposes are treated as confidential information where by their nature they are not available to the public. Such information is not published except with its owner's consent or where disclosure is required by law. • Evaluation results: Detailed scores, evaluators' reports and the deliberations of the judging committees are internal and confidential information, unless the policy of the cycle provides for part of them to be shared with the participant. • Reports provided to participants: An establishment may be provided with a report containing its result, evaluation comments, or strengths and opportunities for improvement, depending on the type of participation and the services available. An establishment has no right to access the confidential scores or reports of other participants. • Continuing confidentiality: Obligations relating to the confidentiality of non-public information and data remain in force even after the participation cycle ends or the validity of the award expires, where the nature of the information requires continued protection.
05 · Legal
Sharing Data
• Sharing data with evaluators: Evaluators and members of the judging committees may be provided only with the information necessary to carry out the evaluation. They are bound to keep the information confidential and not to use it for any other purpose. • Service providers: Technical, professional or operational service providers may be engaged to help operate the platform, manage the evaluation or process data. They are given access to data only to the extent necessary to perform their tasks and subject to appropriate obligations to protect the information. • Partner entities: The existence of a sponsor or partner does not automatically grant it access to participants' confidential information. The scope of any data sharing is determined according to the nature and purpose of the partnership and the applicable regulations. • Official bodies: Data may be shared with the competent official bodies where required by law or by an official request issued in accordance with the applicable legal procedures.
06 · Legal
Information Security
• Information security: The management takes appropriate organisational and technical measures to protect data against unauthorised access, loss, alteration, disclosure or unlawful use. • Access permissions: Access to sensitive information is restricted according to roles and permissions, so that only those whose responsibilities require it can view it. • Passwords and accounts: The user is responsible for keeping their account login details confidential and not sharing them with others. The management must be notified if unauthorised use of the account is suspected. • Data breaches: In the event of a security incident involving data, it is handled in accordance with the approved legal, regulatory and security procedures, and appropriate measures are taken to limit its effects.
07 · Legal
Retention, Deletion and Participants' Rights
• Data retention: Participation and evaluation data may be retained for the period necessary for regulatory, legal and historical purposes and for maintaining the record of entries and results. • Data deletion: A data subject may request the deletion of some of their data in accordance with the applicable laws and policies, unless retaining it is required for legal, contractual or regulatory purposes or to protect the integrity of the award's records. • Historical record of winners: The establishment's name, category, position and year of winning may be retained in the award's historical record even after the period for using the winner title has ended. Retaining this information does not constitute an extension of the award's validity. • Participants' rights: Participants may request that their data be updated or corrected if it is inaccurate or incomplete, in accordance with the approved procedures.
08 · Legal
Updates to This Policy
The data protection and privacy policy may be updated when necessary due to legal, regulatory, technical or operational changes. The updated version of the policy is published through the official channels.
