Legal

PDPL & Data Protection

Last updated: December 2024

1. UAE Personal Data Protection Law (PDPL)

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data) establishes comprehensive rules for the collection, processing, and protection of personal data in the United Arab Emirates.

As a UAE-based company, Alpha Vulcan FZCO is committed to compliance with the PDPL and protecting the personal data of our customers, partners, and users.

2. Our Commitment

Alpha Vulcan is committed to:

  • Processing personal data lawfully, fairly, and transparently
  • Collecting data only for specified, explicit, and legitimate purposes
  • Ensuring data accuracy and keeping it up to date
  • Retaining data only as long as necessary
  • Implementing appropriate security measures
  • Respecting and facilitating your data protection rights

3. Your Rights Under PDPL

Under the UAE PDPL, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to your personal data that we hold. We will provide you with a copy of your data in a commonly used format.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer that data to another controller.

Right to Object

You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

4. How to Exercise Your Rights

To exercise any of your PDPL rights, please contact us using the details below. When submitting a request, please:

  • Clearly state which right you wish to exercise
  • Provide sufficient information to verify your identity
  • Include any relevant account or reference numbers
  • Specify the personal data your request relates to

We will respond to your request within 30 days. In complex cases, we may need additional time and will inform you accordingly.

5. Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and testing
  • Staff training on data protection
  • Incident response procedures
  • Data minimization practices

6. International Transfers

When we transfer personal data outside the UAE, we ensure appropriate safeguards are in place in accordance with the PDPL. This may include:

  • Standard contractual clauses
  • Binding corporate rules
  • Transfers to jurisdictions with adequate data protection
  • Explicit consent for specific transfers

7. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay. Where the breach is likely to result in a high risk, we will also notify affected individuals directly.

8. Related Policies

For more detailed information about our data practices, please refer to:

9. Contact for PDPL Requests

For all PDPL-related requests and inquiries, please contact:

Alpha Vulcan FZCO

Data Protection Contact

Email: info@alphavulcan.com

Phone: +971 50 998 4680

Dubai, United Arab Emirates