Damascus
  • عربي
  • Deutsch
  • English
Weather 29.1 °C 29.3 / 20.6 10-day forecast
US Dollar/Syrian Pound 131.10 / 131.60 Euro/Syrian Pound 150.40 / 152.20 Full rates

Damascus

Privacy Policy

Privacy Policy

Last updated: August 2026

The Damascus Visitor Portal (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in accordance with internationally recognised data protection principles, including the EU General Data Protection Regulation (GDPR) where applicable to users in the European Economic Area.

1. Data Controller

The data controller for this website is the Damascus Visitor Portal Editorial Team, Old City of Damascus, Damascus, Syria. For any data protection enquiries, contact us at info@damascusportal.com.

2. Legal Basis for Processing

We process personal data based on the following lawful grounds:

  • Consent: When you explicitly agree to certain processing, such as subscribing to our newsletter or accepting non-essential cookies.
  • Legitimate interests: For our legitimate business interests, such as improving the website, ensuring security, and preventing abuse.
  • Contractual necessity: When you submit a contact form or booking enquiry that requires us to respond.

3. Data We Collect

  • Contact form data: Your name, email address, and message content when you use our contact form. This data is used solely to respond to your enquiry.
  • Cookies and analytics: We use cookies to remember your language preference and dark mode setting. We also collect aggregated, anonymised usage statistics to understand how visitors use the site. See our Cookie Policy for details.
  • Server logs: Our hosting provider automatically collects technical data (IP address, browser type, pages visited) for security and diagnostic purposes. These are retained for a maximum of 30 days.

4. Data Retention

We retain personal data only for as long as necessary:

  • Contact form submissions: 24 months after the last correspondence.
  • Server log files: 30 days.
  • Newsletter subscriptions: until you unsubscribe.

5. Your Rights

Under the GDPR, users in the EEA have the following rights:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data (“right to be forgotten”).
  • Right to restriction: Request that we restrict processing of your data.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise these rights, email info@damascusportal.com. We will respond within one month.

6. Third-Party Processors

We engage the following third parties to provide services on our behalf:

  • Hosting: Our website is hosted on a self-managed server. Server logs are retained for security purposes only.
  • Analytics: We use privacy-respecting analytics that do not set cookies or collect personal data where possible.

7. Security

We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, access controls, and regular security reviews. We do not store credit card data – all transactions are handled by third-party payment processors.

8. International Transfers

Our servers are located in Syria. If you are accessing this website from outside Syria, please be aware that your data will be transferred to and processed in Syria, which may not have the same data protection standards as your country of residence. By using this website, you consent to such transfers.