The privacy of our users is extremely important to us and therefore we encourage all users to read this policy, that is in compliance with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data and its Executive Regulations (“PPD”), very carefully as it contains important information regarding:
- Who we are;
- How and why we collect, store, use and share personal information;
- Your rights in relation to your personal information;
- How to contact us and supervisory authorities in the event that you have a complaint.
Who we are
- From cloud services to Information Technology and Information Systems Management, Exquitech offers specialized cloud solutions across the META, EU and US regions aligning our practices with ISMS standards to ensure the highest quality and security.
- Exquitech is a tier one Microsoft Advanced Specialized Cloud Partner having 9 Partner of the Year Awards and Advanced Specializations across all Microsoft Verticals.
- We are highly aware of the cyber threats our current digital world faces and thus place an important focus on protecting personal information we collect, use, store of our clients and partners.
The personal information we collect and use
- Personal information is information which you can be identified from (and does not include any anonymized forms of information where your identity cannot be reasonably determined):
1. Types of personal information
-
We may collect and process the following types of personal information in relation to you:
- Name
- Email Address
- Phone number
- Nationality
-
Other information necessary to help you with your experience, in compliance with applicable laws.
2. Types of sensitive information
- Where permitted or required by applicable laws, we may also process the following types of sensitive information in relation to you such as:
- Religion
- Ethnic origin
- Criminal information related to criminal convictions and offenses
Sensitive personal information will only be processed with your explicit consent or where otherwise authorized by PPD.
How your personal information is collected
- The section below describes how the types of personal information are collected by us:
- Personal information obtained from you directly
- We may obtain personal information from you directly, including when you:
- Register on our site
- Sign up for our newsletter
- Respond to a survey or marketing communication
- Surf the website
- Apply to any of our job vacancies
- Register as a third party
2. Personal information obtained by use of cookies or other automated means:
- We may obtain information via automated technology. This shall be through the use of cookies and other similar technologies. A cookie is a small text file which is placed onto your computer or electronic device when you access our website. Similar technologies include web beacons, action tags, local shared objects ('flash cookies') and single-pixel gifs. Such technologies can be used to track users' actions and activities, and to store information about them to monitor and obtain information regarding:
- Analytics on websites used for marketing purposes
- Enhance user experience on the website
- We will ask for your consent before using cookies and/or other similar processing technologies and provide options to manage your preferences. If you do not consent, these technologies will not be used. Thereafter you can opt out of using cookies at any time or you can set your browser not to accept cookies. However, some of our website features may not function as a result.
- For further information on our use of cookies and other similar technologies, please contact the email address provided at the end of the privacy policy.
3. Personal information obtained from third parties
- We do not obtain information about data subjects from any third-party sources.
4. Automated decision-making
- You will not be subject to decisions based solely on an automated processing without human intervention. Automated decision-making refers to the use of personal information to make decisions exclusively through automated systems.
- Any decision affecting you will always involve human decision-making process.
5. Changes to the way in which we collect your personal information
In the event where we need to process your personal information in relation to you in any other way than those described in this policy, we shall notify you and obtain your consent where required by law.
How we use your personal information
- 1. General purposes
- In general, your personal and sensitive information may generally be processed for some of the following purposes:
- To administer a contest, promotion, survey or other site features.
- Marketing purposes (Newsletter, Webinar Registrations)
- Analytics purposes (Monitoring new users, location, device type, etc.)
- 2. Monitoring
- We may monitor communications, and in doing so we may obtain your personal information through this process. We will undertake monitoring in the following circumstances:
- Analytics purposes (Monitoring new users, locations, device types, etc.)
- 3. Credit checking
- Where applicable, we may use your personal information to undertake credit checking on you. Any such search will be recorded in the files of the credit reference agency. Your personal information may also be linked to records relating to other people living at the same address with whom you are financially linked.
- Credit reference agencies may use your information to:
- (1) make credit decisions about you and the people with whom you are financially associated;
- (2) prevent and detect fraud and money laundering;
- (4) verify the information you have provided to us.
If decisions about you are made through automated processing, including credit assessment, we will ensure you are informed of this. You will have the right to request human intervention, object the decision, or obtain an explanation of the decision.
For further details about your rights and how to exercise them, please refer to the "Your Rights" section of this privacy policy.
- 4. Fraud prevention
- We may use your personal information for fraud prevention purposes. This will involve sharing and working with Fraud Prevention Agencies. We do so to protect our own commercial interests (which is encompassed within our own legitimate interests as a business), or to comply with legal regulatory requirements.
- In general, your information may be used for fraud prevention purposes, such as:
- To verify your identity and ensure the accuracy of information you have provided.
- To detect, prevent, and investigate fraudulent activities, including identity theft, payment fraud, or misuse of our services.
- To ensure compliance with legal obligations and regulatory requirements
- Fraud prevention agencies may retain your personal information for different periods of time, the maximum period being six years, provided such retention is necessary for fraud prevention purposes and complies with the principles of data minimization and storage under PPD.
- Where applicable, your personal information may be transferred to Fraud Prevention Agencies outside the UAE. Such transfers will occur in accordance with “Use Your Information Outside the United Arab Emirates” section of this privacy policy.
- You have the right to access, rectify, or object to the processing of your data for fraud prevention purposes. For more information, refer to the "Your Rights" section of this privacy policy.
Lawful basis for processing of your personal and sensitive information
General lawful bases
- The lawful bases upon which we are able to process your personal information are:
- (1) Consent: when you have given explicit consent for a specific purpose. You may withdraw your consent at any time by contacting us.
- (2) Contract: when it is necessary to fulfill a contract with you or to take steps at your request before entering into a contract. For example, this includes processing your data to deliver services or respond to inquiries.
- (3) Legal Obligation: when required to comply with legal obligations, such as maintaining records for tax purposes or responding to valid legal requests.
- (4) Vital Interests: to protect your vital interests or those of another individual. For example, this could apply in cases of medical emergencies.
- (5) Public Task: when it is necessary to perform a task carried out in the public interest or in the exercise of official authority vested in us.
- (6) Legitimate Interests: when it is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. For example, this includes improving our services, ensuring website security, or preventing fraud.
- In general, for the purposes we have described above, we will process your personal information where we have your express consent.
Sharing of your personal information
- In the future, where we potentially require sharing your personal information collected with any third party, we shall:
- inform you in advance
- only permit them to process such information for our required purposes, under our specific instruction, and not for their own purposes.
- o We have established proper procedures, corrective measures to confront any data security breaches. Such breaches shall be reported and handled in accordance with PPD. If a data breach occurs, we will notify the UAE Data Bureau and affected individuals as required by law. o We have established proper procedures, corrective measures to confront any data security breaches. Such breaches shall be reported and handled in accordance with PPD. If a data breach occurs, we will notify the UAE Data Bureau and affected individuals as required by law. o We have established proper procedures, corrective measures to confront any data security breaches. Such breaches shall be reported and handled in accordance with PPD. If a data breach occurs, we will notify the UAE Data Bureau and affected individuals as required by law.
How long your personal information will be kept
- Your personal information will only be kept for as long as necessary for us to fulfil the above purposes, such as sending future campaigns and newsletters. After this period, your information will be securely deleted or anonymized in compliance with PPD.
Keeping your information secure
- We shall ensure the proper safety and security of your personal information and have implemented appropriate measures to do so. Those include using technological and organizational measures to keep your personal information secure. We ensure that:
- All personal information received for marketing purposes are securely stored using Microsoft technologies.
- We comply with ISO 27001 best practices. These practices help us in ensuring the security of your personal information.
- We have established proper procedures, corrective measures to confront any data security breaches. Such breaches shall be reported and handled in accordance with PPD. If a data breach occurs, we will notify the UAE Data Bureau and affected individuals as required by law.
Use of your information outside of the United Arab Emirates
- We have described above the purposes and lawful bases for which we may process your personal information. To meet those needs, we may sometimes need to transfer your personal information outside of the United Arab Emirates including to the United Kingdom. Such transfer will only occur to countries that the UAE Data Bureau recognizes as having adequate levels of personal data protection through approved mechanisms, such as using Binding Corporate Rules (BCRs), contracts or other safeguards in compliance with Articles 22 and 23 of the PPD.
Children
- Our website is not intended for children (anybody under the age of 21), and we do not knowingly collect data from such individuals. If we become aware of any data collection from children, we will delete it immediately.
Your rights
- Under PPD, we place an important attention to the exercise of your rights to access, rectify, erase, restrict, object to, and request the portability of your personal information. These rights are free of charge and include :
- Right to access - You have the right to ask us for copies of your personal information. You can request other information such as details about where we obtained your personal information from and who do we share your personal information with. There are some exemptions that may apply which means you may not receive all the information you ask for.
- Right to rectification - You have the right to ask us to correct personal information you think is inaccurate or incomplete.
- Right to erasure - You have the right to ask us to delete your personal information
- Right to restrict Processing - You have the right to ask us to limit how we can use your personal information.
- Right to object - You have the right to object to the processing of your personal information.
- Right to data portability - You have the right to ask that we transfer the personal information you gave us to another organization, or to you.
- Right to withdraw consent – When we use consent as our lawful basis, you have the right to withdraw your consent at any time.
- If you make a request, we must respond to you without undue delay and in any event within one month.
- Further information on these rights, including the circumstances in which they apply, please contact the UAE Data Bureau.
- If you would like to exercise any of these rights, please contact us at DPO@exquitech.com.
Changes to the privacy policy
- This privacy policy was published on January 31, 2025 and last updated on January 31, 2025. Any significant changes will be communicated to you via appropriate methods such as website notification.
Complaints and Contact information
- If you have concerns about how we handle your personal data, you can contact us to the email address provided below, and we will handle the issue promptly.
- If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Bureau.
- Any other requests or questions regarding this privacy policy can be directed to DPO@exquitech.com for assistance.
