Privacy notice

Data controller

Safwa Star S&S LLC, 48 Ahmed Zaki Street, Maadi, Cairo, Egypt. VAT number EG 583803393 — Commercial Registry Extract No. 150190.

For anything concerning your data, write to info@safwastar.com.

What we collect

Only what is needed to let you use the atlas:

• Email address — you provide it when you create an account.
• Password — never stored in clear text; we keep only an irreversible cryptographic hash.
• IP address and time of sign-in attempts — recorded briefly to rate-limit repeated attempts and protect accounts.
• Email confirmation — the date you opened the verification link we send you.
• Consent log — for every choice about the privacy notice and marketing: the version of the text accepted, date and time, IP address and browser, and the page you signed up from.
• Offline download log — date and IP address of each download of the atlas.
• Chosen language — so we can write to you in it.
• Install state and downloaded content — these stay in your browser and never reach us.

Why we process it, and on what basis

• To create and run your account, verify your email address, and let you use the atlas and download it for offline use — legal basis: performance of our contract with you.
• To protect accounts from abuse (sign-in rate limiting) — legal basis: our legitimate interest in keeping the service secure.
• To send you newsletters and commercial offers from Safwa Star S&S LLC about its services: the Red Sea Atlas, SharmBeat (events and venues in Sharm el-Sheikh) and Home4YouSharm (apartment rentals in Sharm el-Sheikh) — legal basis: your consent, freely given and withdrawable at any time. Marketing consent is optional: you can register, use and download the atlas without it. We only act on it once you have confirmed your email address.

How long we keep it

• Account data: for as long as you keep the account. You can delete it yourself from the Account menu in the atlas; if you ask us by email, we do so within 30 days.
• Sign-in attempt logs: a few days, only as long as anti-abuse protection requires.
• Marketing consent: while it stands and, after withdrawal, for as long as we need it to show that consent was given and withdrawn.

Who can access it

We do not sell or trade your data. It is accessible only to those at Safwa Star S&S LLC who need it, and to the providers running our technical services as data processors:

• InterServer, Inc. — server and database hosting.
• Sendinblue SAS (Brevo), France — sending verification emails and managing the newsletter, only for those who consented.
• Cloudflare, Inc. — site delivery and attack protection.
• Google LLC — serving the typefaces the pages use.

Transfers outside the European Economic Area

Our providers may process data on servers outside the EEA, including in the United States. Where that happens, the transfer relies on the Standard Contractual Clauses approved by the European Commission or on other adequate safeguards.

Cookies and similar technologies

The public site uses no profiling cookies and no analytics. The atlas uses a single technical session cookie, strictly necessary to keep you signed in — without it the service cannot work. Your browser also stores a few local preferences (language, session, content downloaded for offline use); these stay on your device and are never sent to us.

Your rights

You may ask us at any time to access, correct or erase your data, to restrict or object to processing, and to receive your data in a portable format. You can withdraw marketing consent whenever you like, from the Account menu in the atlas, through the unsubscribe link in every email or by writing to info@safwastar.com; withdrawal does not affect the lawfulness of processing carried out beforehand.

If you believe the processing breaches the law, you have the right to lodge a complaint with the competent supervisory authority.

Changes to this notice

If we change how we handle data we will update this page, and tell you when the change is significant.