With this Data Protection Statement, we, INSUS UAE (hereinafter together referred to as INSUS, we or us), describe how we collect and further process personal data. This Data Protection Statement is not necessarily a comprehensive description of our data processing activities. It is possible that other data protection statements, General Terms and Conditions, Conditions of Participation, or similar documents may apply to specific circumstances.
The term "personal data" in this Data Protection Statement means any information that identifies, or could reasonably be used to identify, an individual.
If you provide us with personal data of other persons, such as family members or colleagues, please ensure that those individuals are aware of this Data Protection Statement and only provide us with their data if you are authorized to do so and the information is accurate.
This Privacy Policy is aligned with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable data protection laws and regulations. Where INSUS processes personal data of individuals located in other jurisdictions, including the European Economic Area (EEA), additional legal requirements may apply, including the General Data Protection Regulation (GDPR) where applicable.
1. Controller
The controller responsible for data processing under this Privacy Policy is:
INSUS UAE
Address: Dubai, UAE
Email: info@insus.ae
You may contact us using the above details regarding any questions, concerns, or requests relating to the processing of your personal data.
Where required by applicable law, INSUS may appoint a data protection officer or representative and will make the relevant contact details available through its website or upon request.
2. Collection and Processing of Personal Data
We primarily process personal data that we obtain from our clients, suppliers, business partners, and other individuals in connection with our business relationships. We also collect personal data through our websites, applications, and other digital platforms.
Where permitted by law, we may obtain personal data from publicly available sources, affiliated companies, regulatory authorities, professional advisers, service providers, business partners, and other third parties.
The personal data we process may include contact information, identification details, employment-related information, correspondence and communication records, payment and banking information, insurance-related information, information required for compliance with legal and regulatory obligations, publicly available information, marketing and preference data, and technical information relating to the use of our websites and services.
Technical information may include IP addresses, device identifiers, browser information, operating system information, cookies, website usage data, location information, and information relating to how users interact with our websites and digital platforms.
3. Purpose of Data Processing and Legal Grounds
We process personal data to establish, manage, and perform contractual relationships with our clients, suppliers, subcontractors, and business partners, including the provision of digital engineering solutions and related services.
We may also process personal data to operate, maintain, improve, and develop our services, websites, and applications; communicate with clients, suppliers, applicants, and other stakeholders; respond to inquiries and requests; conduct business development and customer relationship management activities; undertake marketing and promotional activities; perform market research and analytics; protect and enforce legal rights; prevent fraud and other unlawful activities; maintain security and risk management systems; comply with legal, regulatory, and corporate governance obligations; facilitate corporate transactions such as mergers, acquisitions, or restructurings; and protect our employees, visitors, premises, systems, and assets.
INSUS processes personal data on lawful grounds recognized under applicable law, including where processing is necessary for the performance of a contract, compliance with legal obligations, protection of vital interests, legitimate business interests that do not override the rights and freedoms of individuals, consent where required, or any other lawful basis permitted under applicable law.
Where processing is based on consent, you may withdraw your consent at any time, subject to legal or contractual limitations. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.
5. Data Transfers and International Transfers
In the course of our business activities, we may disclose personal data to affiliated companies, service providers, cloud hosting providers, technology vendors, professional advisers, business partners, clients, regulatory authorities, courts, law enforcement agencies, and parties involved in corporate transactions.
Personal data may be transferred to and processed in countries outside the United Arab Emirates where such transfers are necessary for business operations, service delivery, technical support, hosting services, regulatory compliance, or other legitimate business purposes.
Where personal data is transferred internationally, INSUS will implement appropriate safeguards required under applicable law to ensure that personal data remains adequately protected. Such safeguards may include contractual protections, organizational and technical security measures, transfers to jurisdictions recognized as providing an adequate level of protection, consent where required, and other lawful transfer mechanisms recognized under the UAE PDPL.
6. Retention of Personal Data
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including the performance of contractual obligations, compliance with legal and regulatory requirements, protection of legitimate business interests, resolution of disputes, and enforcement of legal rights.
Personal data will not be retained longer than necessary for the purposes for which it was collected unless a longer retention period is required or permitted by applicable law.
Once personal data is no longer required, it will be securely deleted, anonymized, or otherwise disposed of in accordance with applicable legal and regulatory requirements.
7. Data Security
INSUS implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, misuse, loss, destruction, or other unlawful forms of processing.
Such measures may include access controls, encryption technologies, network security protections, monitoring systems, internal policies and procedures, staff training, and other safeguards appropriate to the nature of the personal data and associated risks.
INSUS regularly reviews and updates its security measures to address evolving technological, operational, and cybersecurity risks.
8. Obligation to Provide Personal Data
Where personal data is necessary for entering into or performing a contractual relationship, complying with legal obligations, or providing requested services, you may be required to provide such information.
If you choose not to provide personal data that is necessary for these purposes, INSUS may be unable to provide services, enter into agreements, or fulfill certain obligations.
9. Profiling and Automated Decision-Making
INSUS may use automated tools, analytics, and profiling techniques to better understand user preferences, improve services, support marketing activities, and enhance business operations.
Where profiling or automated decision-making produces legal effects or similarly significant effects on an individual, INSUS will provide any information, safeguards, and rights required under applicable law.
10. Your Rights
Subject to applicable law, including the UAE PDPL, you may have rights relating to your personal data, including the right to request access to personal data, request correction of inaccurate or incomplete information, request deletion of personal data in certain circumstances, request restriction of processing, object to certain processing activities, withdraw consent where processing is based on consent, request transfer of personal data where applicable, and request information regarding automated decision-making activities.
To exercise any of these rights, please contact us at info@insus.ae. We may request information necessary to verify your identity before processing your request.
You may also have the right to submit a complaint to the competent authority responsible for personal data protection in the United Arab Emirates or any other authority having jurisdiction over the relevant processing activity.
11. Amendments to this Privacy Policy
INSUS may amend this Privacy Policy from time to time without prior notice. The most current version published on our website will apply.
Where required by applicable law, we will notify users of material changes through our website, email communications, or other appropriate means.