Last updated: 14 September 2026
This Privacy Policy explains how DaVinci Beach collects, uses, shares and protects your personal data when you visit davincibeach.com, make a reservation, contact us, or stay with us. It should be read together with our Cookie Policy.
We handle personal data in accordance with the Egyptian Personal Data Protection Law No. 151 of 2020 (the “PDPL”) and its Executive Regulations, under the supervision of the Personal Data Protection Center (PDPC). For guests in the European Economic Area and the United Kingdom, we also honour the equivalent rights under the General Data Protection Regulation (GDPR).
1. Who we are
Data controller: DaVinci Beach, El-Helal District (Second Section), Hurghada, Red Sea Governorate, Egypt. The hotel is run by New Bloom Hotels in cooperation with the owner, and managed by Premium Swiss Hospitality (PSH), which operates our reservation system on our behalf.
Contact: info@davincibeach.com · Mobile: +201202200717 · Landline: +20653557869
Data Protection Officer: dataprotection@davincibeach.com
2. What personal data we collect
Data you give us
When you book a room, request a quote, use the enquiry form or correspond with us, we collect your name, contact details, stay dates, number and ages of guests, room preferences, payment details (processed by our payment provider), and any special requests. On arrival, Egyptian tourism and residency rules require us to record identification details (passport or national ID) for every guest.
Data we collect automatically
When you use the website we collect technical data such as your IP address, device and browser type, and pages viewed, through cookies and similar technologies. See our Cookie Policy.
Data we receive from others
We may receive booking details from travel agents, tour operators, online travel agencies and corporate clients who arrange stays on your behalf.
3. Why we use your data, and our lawful basis
- To provide your booking and stay — because it is necessary to perform our contract with you (PDPL processing on the basis of contract).
- To meet legal obligations — guest registration with the competent tourism and security authorities, tax and accounting records, and health and safety.
- With your consent — to send you marketing about the hotel, and to set non-essential cookies. You may withdraw consent at any time.
- For our legitimate interests — to keep the site and property secure, to answer enquiries, and to improve our services, balanced against your rights.
We do not sell your personal data, and we do not make decisions with legal effects about you using solely automated processing.
4. Who we share it with
We share personal data only where necessary, and always under a written processing agreement, with:
- Premium Swiss Hospitality — our management company, which operates the reservation/booking system (crs.premiumswisshospitality.com);
- our payment provider — to process card payments securely;
- Google — for the embedded map showing the hotel’s location (only if you allow functional cookies);
- our hosting and IT suppliers, and professional advisers such as auditors and lawyers;
- competent Egyptian authorities — tourism, police/residency registration, and tax authorities, where the law requires.
5. International transfers
Some providers named above, including our management company, process data outside Egypt (for example in Switzerland and the EU). Under the PDPL, personal data may be transferred abroad only where the recipient country or organisation ensures a level of protection no less than that of the PDPL, subject to the authorisations required by the Personal Data Protection Center and, where applicable, your consent. We use appropriate contractual safeguards for every such transfer.
6. How long we keep it
- Booking and financial records — for the period required by Egyptian tax and commercial law (generally at least five years).
- Guest identification and registration records — for the period required by tourism and residency regulations.
- Marketing consents — until you withdraw them, plus a short period to evidence the withdrawal.
- Website technical logs — a short period (typically up to 90 days).
7. How we protect your data
We use encryption of data in transit (HTTPS), access controls on a need-to-know basis, and payment handling that meets PCI-DSS through our provider. If a personal data breach occurs that is likely to cause you harm, we will notify the Personal Data Protection Center and affected individuals within 72 hours, as required by the PDPL.
8. Children
Under Egyptian law a child is anyone under 18. Our booking and enquiry forms are intended for adults, and we ask you to confirm you are 18 or older before submitting them. Where we process a child’s data — for example a young guest travelling with you — we rely on the consent of a parent or legal guardian and verify age and guardianship at check-in against a government-issued identity document. We do not knowingly place analytics or marketing cookies on a device we know belongs to a child.
9. Cookies
We set only strictly necessary cookies without your consent; everything else is off until you turn it on. You can review and change your choices at any time using the control, or the link in the footer of every page. Full details are in our Cookie Policy.
10. Your rights
Under the PDPL you have the right to:
- know what personal data we hold and access it;
- have inaccurate or incomplete data corrected;
- have your data erased where there is no lawful reason to keep it;
- withdraw your consent at any time;
- restrict or object to certain processing;
- be informed of any disclosure of your data and of any breach affecting it;
- receive a copy of data you provided, where applicable.
To exercise any of these rights, contact dataprotection@davincibeach.com. We will respond within the period set by the PDPL and its Regulations, and there is normally no charge.
11. Complaints
If you have a concern, please contact our Data Protection Officer first so we can put things right. If you remain unsatisfied, you may lodge a complaint with the Personal Data Protection Center (PDPC), established under the Ministry of Communications and Information Technology of the Arab Republic of Egypt. Guests in the EEA or UK may instead complain to their local supervisory authority.
12. Changes to this policy
We review this policy at least once a year and whenever our processing changes. Material changes will be signalled on the website and, where appropriate, by asking you to make your cookie choices again.