Corporate Business Solutions – Privacy Policy

These terms apply to the use of this website (“Website”). For the purposes of this Privacy Policy “CBS” / “we” / “us” / “our” means Corporate Business Solutions FZCO, a company incorporated in Dubai Airport Free Zone under registration No. RNo-00281, license number 05137. Our office is at Office # 4EB G28 DAFZ Dubai, United Arab Emirates.

This Website may contain hyperlinks to third party websites. These third party websites operate fully independently from us, and we cannot accept any responsibility or liability for the privacy practices of such third parties nor the availability of these external sites or resources. The appearance of such links on the Website or in any part of our Services is not an endorsement. Should you use any of these third party websites, such use is at your own risk and we would recommend that you review their respective privacy policies.

Who does this Privacy Policy apply to?

This privacy policy (“Privacy Policy”) applies to individuals who use this Website. Depending on the services listed on the Website, we may provide additional privacy notices and/or terms of use. This Privacy Policy should be read in conjunction with those privacy notices and terms of use, as applicable to our specific services.

Questions?

We have appointed a data protection officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy and the data handling by CBS. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact the DPO using the following details: info@cbs-compliace.com. 

Office # 4EB G28 DAFZ Dubai, United Arab Emirates

1. How we use your personal data

Your Enquiries

If you contact us about our Services, the forms you complete or the emails you send may include information about you, such as your name as the contact point for an organization, your email address, the organization’s address, job title, telephone number and your enquiry.

Mailing List

We may use the email address we collected from you to keep you updated with our news by email unless you would like to be removed from that list (in which case please let us know by clicking unsubscribe at the bottom of each marketing email).

There may also be circumstances where we will ask you for your explicit consent in respect of our use of your data in which case you will be notified at the time.

All content you submit to us

If you send us objectionable content or otherwise behave in a disruptive manner when using our Website, we may process personal data included in your messages to respond to and stop such behaviour.

We only process personal data in the way ensuring that use of our Website and the Services are lawful, does not disrupt our systems (and the availability of the Services), does not harass our staff or other individuals, and to enforce our legal rights and to comply with our legal obligations.

Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your personal information to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.

2. Purposes and Grounds of processing

We have provided further detail on the lawful reason for processing your personal information below. 

The data is processed for the purposes from time to time needed on the basis of the service asked by CBS customer. 

The data is processed on the basis of different grounds of processing, in accordance with the type of service provided by CBS. 

We do not use your personal data for activities where our interests are overridden by the impact on your privacy (and right to a private life), unless we have your consent or are otherwise required or permitted to by law.

3. Do we share your personal information with anyone else?

We may disclose personal data to the CBS and its respective personnel, suppliers or subcontractors insofar as it is reasonably necessary and it is allowed by applicable data protection laws, for the purposes set out in this Privacy Policy, provided that they do not make independent use of the information.

We only permit them to process your personal data for specified purposes and in accordance with our instructions. All our third party service providers are required to take appropriate security measures to protect your personal information in line with our policies. Activities which are carried out by third party service providers include: CRM management software, website hosting, and IT support.

In addition, we may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in connection with any legal proceedings or prospective legal proceedings; and to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

If we are involved in a merger, acquisition, or sale of all or a portion of our business or assets, the information we hold may be included as part of that sale, in which case you will be notified via email and/or a prominent notice on the Website of any changes in ownership or use of your information, as well as any choices you may have regarding that information.

Except as provided above, we will not provide your information to third parties.

4. Your rights in relation to personal data which we process relating to you

We will honour your rights under applicable data protection laws. These rights are not absolute and they do not always apply in all cases.

Ask for a copy of the data we are processing about you and have inaccuracies corrected

You have the right to request from us i) confirmation of whether we are processing your personal data, and if so ii) a copy of the personal information we hold about you, and iii) correction of any inaccuracies.

We will use reasonable efforts to the extent required by law to supply or correct personal information held about you on our files (and with any third parties to whom it has been disclosed to).

Object to us processing data about you

You can ask us to restrict, stop processing or delete your personal data if:

  • you consented to our processing of the personal data and have withdrawn that consent;
  • we no longer need to process that personal data for the reason it was collected;
  • the personal data was unlawfully processed;
  • you need the personal data to be deleted in order to comply with legal obligations;
  • the personal data is processed in relation to the offer of a service to a child.

In some cases you can delete your personal data from your account by following the instructions in your account settings.

Obtain a machine-readable copy of your personal data, which you can use with another service provider

  • If (i) we are processing data in order to perform our obligations to you or because you consented and (ii) that processing is carried out by automated means, we will help you to move, copy or transfer your personal data to other IT systems at your request.

Make a complaint to a Supervisory Authority

  • If you are unhappy with the way we are processing your personal data, please let us know by contacting us.
  • If you do not agree with the way we have processed your data or responded to your concerns, an alternative is to submit a complaint to a Data Protection Supervisory Authority.

5. Children

We do not use the Website or any Service to knowingly solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information without their consent, he or she should contact us. We will delete such information within a reasonable time.

6. Security

We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. For example, our databases are password protected and limited to essential employees only. Please be aware that although we endeavour to provide reasonable security for information we process and maintain, no security system can prevent all potential security breaches.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Changes

This Policy may be updated from time to time. We will notify you of any changes by posting the new policy here and, where feasible, letting you know by email.

8. International Data Transfers

We may share your personal data with external third parties based outside DAFZ.

Whenever we transfer your personal data outside DAFZ, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We transfer your personal data to jurisdictions that have been deemed to provide an adequate level of protection according to the applicable data protection laws.
  • Where we transfer your personal information to entities in countries which have not been deemed to have an adequate level of protection, we have put in place specific contracts containing standard contractual clauses or an alternative compliance mechanism, such as binding corporate rules to ensure that your personal information is treated by those third parties in a way that is consistent with and which respects the applicable data protection laws.

9. Retention Periods

We will hold your personal information on our systems for as long as is necessary for the relevant purpose, or as otherwise described in this Privacy Policy.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.