Privacy policy for the UAE pages

1. Controller

The controller of personal data is BUILDWELL SOFTWARE DESIGN - FZCO (“we”, “us”), a free zone company registered at premises DSO-DDP-A5-D-FLEX-G021, Building A5, Dubai Silicon Oasis, Dubai, United Arab Emirates, under licence No. 93797 issued by the Dubai Integrated Economic Zones Authority. We trade as doIT Agency. Requests about personal data: info@do-it.agency

This policy explains how we process personal data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). It covers personal data we receive through the UAE pages of do-it.agency — the /uae/ section and the forms on it. Requests sent from the other pages of the website are processed by O SPORT LLC under its own policy

2. Purposes of processing

(a) Replying to a request sent through the website form and arranging the free process review

(b) Concluding and performing a contract with a client

(c) Web analytics (Yandex Metrica) — only after the visitor allows it in the cookie banner

3. Categories of data subjects and data

Visitors who submit the form: name, company, phone / Telegram / email, the text of the request, the date and time of the request, the IP address and the version of the consent text (kept as proof of consent)

Website visitors (analytics, only after consent): cookie identifiers, IP address, browser and device data, pages viewed

4. Legal grounds

For purposes (a) and (c): your consent, given by ticking the box in the form or by clicking “Accept” in the cookie banner. For purpose (b): performance of a contract to which you are a party, or steps you ask us to take before entering into it

5. How we process the data

Collection, recording, organisation, storage, updating, use, disclosure to the employee who answers the request, anonymisation, restriction, deletion and destruction. We process the data by automated means

6. Retention periods

Requests: 3 years from the date of the last contact; after that the data is destroyed. Data under a contract: for the term of the contract and the retention period required by UAE law. Analytics data: for the cookie lifetimes set by Yandex Metrica

7. Where the data is stored

The database of requests is stored on a server located in the Russian Federation, so the data is transferred outside the UAE. We transfer it on the basis of your express consent (see the consent to personal data processing). A notification about a new request (name, company, contact, text) is sent to our employee via Telegram, so these details also stay in that chat. If you allow analytics in the cookie banner, Yandex Metrica data is processed by Yandex outside the UAE as well

8. Cookies

Technical cookies: the language choice, the region choice (Russia and the CIS or the UAE) and the cookie-consent choice; stored for 12 months; they do not identify the visitor. Analytical cookies: Yandex Metrica, set only after the visitor clicks “Accept” in the banner; purposes — counting visits and pages read; lifetimes — as set by the Metrica service. “Decline” prevents analytics from loading; the choice can be changed by clearing the site’s cookies

We also count visits with our own counter, which sets no cookies and does not store IP addresses: a visit is recognised by a hash of the address, browser and site with a daily salt, and the salt is erased after 2 days

9. Your rights

You have the right to: get information about how we process your data and a copy of it; have it corrected, updated or deleted; restrict or stop its processing; receive it in a structured, machine-readable format; withdraw your consent at any time. To use these rights, write to info@do-it.agency. We reply within 10 working days of receiving your request

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. After withdrawal, processing stops and the data is destroyed within 30 days unless a legal ground for further storage exists. You may also lodge a complaint with the UAE Data Office

10. Security and incidents

Access to the request database is limited to the persons answering requests and is granted by role; backups are made daily. If a security breach puts your data at risk, we notify the UAE Data Office and, where required, you. The person responsible for personal data protection is our Company Manager; contact: info@do-it.agency

11. Changes

We may update this policy; the current version is always published at do-it.agency/uae/privacy/. The date of the current version is given at the top of this page