Privacy Policy Outline for ATED DMCC 1. Introduction Welcome to ATED DMCC. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. Understanding this policy helps you make informed decisions about your interaction with us. Purpose of the Privacy Policy The purpose of this Privacy Policy is to provide transparency into our privacy practices and to inform you of your rights and our responsibilities regarding the collection, use, and protection of your personal information. It outlines the types of information we collect about you and how we process and safeguard that information in connection with the services we provide. Commitment to Protecting Privacy We are committed to maintaining the confidentiality, integrity, and security of the personal data of our clients, partners, and site visitors. We take this responsibility seriously and implement robust security measures and privacy controls throughout our operational procedures. Our commitment extends to ensuring that our vendors and partners adhere to similar standards of data protection. This Privacy Policy is periodically reviewed and updated to ensure that it reflects our current practices and the latest regulatory requirements. We encourage you to review it regularly to stay informed about how we are protecting your information. 2. Information Collection At ATED DMCC, we collect information to provide better services to all our users and to comply with legal obligations. The data we collect varies depending on the services you use and the ways in which you interact with us. Understanding what and how information is collected is crucial for maintaining your privacy. Types of Personal Information Collected Personal Identification Information: This includes but is not limited to your name, postal address, email address, telephone number, and other information that can be used to personally identify you. Financial Information: We collect financial information such as bank account details, payment card numbers, investment history, and transactions details, necessary for processing investments and other related services. Transactional Data: Details of the transactions you carry out through our services, including amounts invested, assets purchased, and transaction time. Technical and Usage Data: This may include information about how you access and use our site, such as your IP address, browser type, device type, pages viewed, and the times you access our services. Communication Data: Information we receive from you when you contact our customer service team, make inquiries, or interact with us in any other way, including via emails and telephone calls. Methods of Data Collection Direct Interactions: You may give us your personal, financial, and transactional information by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you: - Create an account on our website; - Subscribe to our services or publications; - Request marketing to be sent to you; - Give us feedback or contact support. Automated Technologies or Interactions: As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources such as: - Analytics providers (such as Google based outside the EU); - Advertising networks; - Search information providers; - Financial and transactional data from providers of technical, payment, and delivery services. Understanding the types of information collected and the methods employed allows you to better manage your personal data and make informed decisions regarding your privacy when using ATED DMCC’s services. This commitment to transparency is a cornerstone of our privacy practices. 3. Information You Provide When you engage with ATED DMCC, you provide us with various types of personal information directly. This direct interaction plays a critical role in how we manage and operate our services tailored to your needs. Below, we detail the types of personal information you typically provide and the contexts in which you provide them. Details on the Kinds of Personal Information Users Provide Directly Account Information: When you register for an account with us, you provide personal details such as your name, email address, postal address, telephone number, and potentially financial information for account management and verification purposes. Financial Details: For investment transactions, you may provide banking information, credit or debit card numbers, or other payment method details necessary for transaction processing. Identification and Verification Data: To comply with regulatory requirements, we may require documents to verify your identity and address, such as passports, driver’s licenses, utility bills, or other government-issued identification. Communication Data: When you contact our customer support or interact with our personnel, you provide information that may include feedback, contact details, and specifics about your inquiries or issues for resolution. Contexts in Which Information is Provided Account Registration and Profile Setup: During the creation of your account and profile on our platform, you provide essential identification and contact information which helps in personalizing and securing your access. Transactions: When engaging in transactions through our platforms, such as buying, selling, or managing assets, you provide transaction-specific information, which could include financial details and other pertinent data required to execute these transactions. Customer Support: When you reach out for help or to resolve issues, you provide information that could be used to assist you further, which also helps us improve service delivery. Participation in Promotions or Surveys: If you participate in promotions, contests, or surveys, you might provide additional personal information as required by the specific activities. Communications and Marketing Preferences: You provide preferences and consent regarding how you wish to be contacted for marketing purposes and how you receive communications from us. Understanding the data you provide and the circumstances under which you provide it is crucial for ensuring the privacy and security of your information. ATED DMCC is committed to using this information responsibly and transparently, maintaining the highest levels of data protection and privacy as set forth in our overall privacy strategy. 4. Information Collected Automatically ATED DMCC employs various technologies to automatically collect data when you use our services or visit our website. This data helps us understand user behavior, improve our services, and maintain the security of our systems. Below, we detail the types of information that are typically collected automatically and the technologies used to collect them. Types of Data Collected Automatically Log Files: Every time you visit our website, our servers automatically log standard access information, including your IP address, browser type, access times, and referring URL. This information is essential for troubleshooting, improving site navigation, and maintaining site security. Web Analytics: We use web analytics services to track the behavior of visitors on our website. This includes pages visited, time spent on pages, and interaction with content. This data helps us understand user preferences and improve user experience. Device Information: Information about the device you use to access our services, such as hardware model, operating system, unique device identifiers, and mobile network information, may be collected automatically. This aids in optimizing our services for different device formats and troubleshooting device-specific issues. Technologies Used Cookies: Cookies are small data files stored on your device that help us improve our services and your experience, understand user preferences, and secure our website. They enable functionalities such as staying logged in, remembering user settings, and analyzing user interaction with our site. Tracking Pixels: These are tiny graphics files that contain a unique identifier that enable us to track user movements and interactions with emails or our website. They are useful for measuring the effectiveness of our marketing campaigns and understanding user engagement. Local Storage: We use technologies like HTML5 local storage and mobile device application data caches to store content information and preferences. This helps in faster retrieval of data to improve the user experience. Web Beacons: Web beacons are often used alongside cookies to monitor the behavior of users on our site and communication platforms. They help us understand how users navigate through our content and allow us to deliver tailored information. By understanding and managing the data collected automatically, ATED DMCC ensures that user interactions are secure, personalized, and aligned with the best user experience possible. Our use of these technologies is in full compliance with relevant laws and regulations regarding data privacy and protection. 5. Information from Third Parties ATED DMCC occasionally receives information about you from third-party sources. The integration of this data helps enhance the accuracy of our records, improve our services, and better understand your needs. Below, we detail the scenarios in which we receive information from third parties and the types of information we typically collect. Scenarios in Which Information is Received from Third Parties Partner Services: We collaborate with various business partners who provide complementary services. When you sign up for or use these partner services, they may share information with us that enhances our service offerings. Data Aggregators: We work with information providers that aggregate demographic and marketing data. This data enriches our existing information, allowing us to better tailor our communications and services. Credit and Fraud Prevention Agencies: For financial and security reasons, we obtain information from credit reference and fraud prevention agencies, particularly when you apply for credit or other finance-related services. Publicly Available Sources: We collect information that is publicly available online or through other public platforms. This includes information shared on social media platforms, directories, and other openly accessible databases. Marketing and Research Companies: Occasionally, marketing and research firms provide us with data that aids in market analysis and strategic planning. Types of Information Collected from Other Sources Contact Information: This may include additional names, email addresses, phone numbers, and physical addresses not provided directly by you but found through external sources. Financial Data: Includes credit history or creditworthiness information which aids in financial assessments and fraud prevention. Demographic Data: Supplementary demographic details like age, gender, and interests help us understand our user base better and improve service targeting. Behavioral Data: Information on consumer behavior, preferences, and purchasing habits obtained from market research partners to enhance customer service and product offerings. Professional Data: Employment history and professional background that might be used for recruitment, business-to-business relationships, or networking purposes. Understanding and responsibly managing the information received from third parties is crucial to maintaining user trust and complying with privacy regulations. ATED DMCC commits to handling this data with the highest level of privacy and security, ensuring that any third-party information sources are reputable and comply with applicable legal frameworks. 6. Use of Collected Information ATED DMCC utilizes the information collected from its clients and users to ensure efficient service delivery, enhance user experience, and comply with legal obligations. Here, we detail the specific purposes for which we use the collected information and the legal bases that justify these processes. Specific Purposes for Using the Collected Information Service Delivery: We use your information to manage and administer your account, provide customer support, and deliver the services you have requested or purchased from us. Personalization: Your information helps us to tailor our services to meet your specific needs and preferences, enhancing your overall experience with our platform. Communication: We use your contact details to communicate with you regarding your account, updates, security alerts, and informational messages about our services. We also use your information to respond to your inquiries, comments, and suggestions. Marketing and Promotions: With your consent, we use your information to send promotional messages and marketing communications about new products, features, and offerings that may be of interest to you. Security and Fraud Prevention: Information is critical in helping us to secure our services and prevent fraudulent or illegal activities. We use information to identify, investigate, and deter these activities to protect our clients and our business. Compliance and Legal Obligations: We process your information as necessary to comply with our legal obligations, such as financial reporting, complying with requests from law enforcement agencies, or as required by applicable law. Research and Development: We analyze how users interact with our services to help us improve them and develop new products and features that respond to the needs of our users and the market. Legal Bases for Processing Consent: We process certain data based on the consent you explicitly provide, such as sending marketing materials and certain types of cookies and similar technologies. Contractual Necessity: We process personal information necessary to enter into or perform our contract with you, including providing the services or products you have requested. Legal Obligations: We process personal information as necessary to comply with our legal obligations, such as maintaining business records, compliance with regulatory monitoring and reporting requirements, and responding to lawful requests. Legitimate Interests: We process personal information based on our legitimate interests while ensuring that your privacy rights are not overridden. This includes but is not limited to enhancing our services, administrative purposes, and direct marketing. Vital Interests: Occasionally, we may process personal information when it is necessary to protect the vital interests of any individual. By transparently listing the uses of collected information and the legal bases for processing, ATED DMCC ensures that all stakeholders understand the rationale behind data handling practices and respects the rights and preferences of its users. This transparency is crucial for building and maintaining trust with our clients. 7. Information Sharing and Disclosure ATED DMCC recognizes the importance of your privacy. We only share your information in specific circumstances and with particular third parties who help us provide and improve our services. Here, we detail the scenarios in which your information may be shared and the categories of third parties with whom it might be disclosed. Circumstances Under Which Information Might Be Shared Service Providers: We share information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. These providers are contractually obligated to protect your information and to use it only as necessary to carry out their designated functions. Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as a court or a government agency. This includes meeting national security or law enforcement requirements. Merger or Acquisition: If ATED DMCC is involved in a merger, acquisition, or asset sale, your personal information may be transferred as part of that deal. We will continue to ensure the confidentiality of any personal information involved in such transactions. To Protect Rights and Property: We may share information to protect the rights, property, or safety of ATED DMCC, our customers, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. With Consent: We may share information with third parties when we have your explicit consent to do so. This could include sharing with other financial institutions for purposes of offering joint products or services. Types of Third Parties With Whom Information is Shared Financial Institutions: Partnerships with other financial institutions might require sharing information for the purpose of offering integrated services. Third-Party Service Providers: Companies that assist with our business operations, such as fraud prevention, bill collection, technology services, and customer service. Marketing Partners: Third parties with whom we partner to offer contests, joint promotional campaigns, or new products that may be of interest to our users. Regulatory and Legal Authorities: Bodies that require reporting of processing activities in certain circumstances for compliance with financial, tax, or other legal requirements. Affiliates: Entities within our corporate family who may have access to information as part of their role in providing collective services or support. By carefully managing these disclosures, ATED DMCC ensures that any sharing of information is justified by legitimate business needs, compliant with all applicable laws, and executed with the utmost consideration for your privacy rights. 8. International Data Transfers ATED DMCC operates on a global scale, and as such, it is sometimes necessary to transfer your personal information across borders. This section explains the processes and legal frameworks that govern these international data transfers, ensuring that your information remains protected in accordance with globally recognized standards. Information on Cross-Border Data Transfers Global Operations: As an international entity, ATED DMCC may need to transfer personal information to countries outside of your country of residence. This includes transferring data to countries where we have operations or where our service providers are located. Purpose of Transfers: Transferring data internationally allows us to provide consistent services wherever our clients are located. It facilitates the centralized management of our services, including customer support, IT and infrastructure management, and financial processing. Legal Mechanisms in Place for International Transfers Adequacy Decisions: For transfers of personal data from the European Union, ATED DMCC relies on the European Commission’s adequacy decisions about certain countries, if applicable, which means these countries are deemed to provide an adequate level of data protection. Standard Contractual Clauses (SCCs): In the absence of an adequacy decision, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission. These clauses contractually oblige the recipient to protect the data to the same standard required within the EU. Binding Corporate Rules (BCRs): For transfers within our corporate family, we may use Binding Corporate Rules which are legally binding and apply across our global operations, ensuring that all data transfers uphold a consistent level of security and compliance. Privacy Shield Framework: Though primarily relevant to transfers between the EU and the US, if applicable, ATED DMCC complies with the principles of the Privacy Shield Framework ensuring adequate protection of transferred data. Consent: Occasionally, we may transfer data based on your explicit consent where you have been fully informed of the potential risks of such transfers for the data due to the absence of an adequacy decision and appropriate safeguards. Necessary for Contract Performance or Implementation: We may also transfer your personal data when it is necessary for the performance of a contract with you, or for the implementation of pre-contractual measures taken at your request. By implementing these mechanisms, ATED DMCC ensures that all international data transfers are carried out in compliance with applicable data protection laws and that the integrity and security of your personal data are maintained across borders. This commitment helps build trust with our clients and partners around the world. 9. Data Security ATED DMCC is committed to safeguarding the security of your personal information. We implement robust security measures and protocols to protect your data from unauthorized access, alteration, disclosure, or destruction. This section outlines our security practices and our response strategies in case of a data breach. Security Measures to Protect Personal Information Encryption: We use strong encryption technologies to protect data at rest and in transit. This ensures that your personal and financial information is securely encoded and transmitted over networks. Access Control: Access to personal information is strictly limited to personnel who need the information to perform their job functions. We enforce strict password policies, multifactor authentication, and regular access audits to maintain the integrity of our access controls. Network Security: Our network security measures include firewalls, intrusion detection systems, and regular vulnerability scans to protect against unauthorized access and other malicious activities. Physical Security: Physical access to our data centers is restricted to authorized personnel only, with comprehensive security measures including surveillance cameras, biometric access controls, and security personnel. Secure Software Development: We follow secure software development practices to ensure that security is integrated into our software from the ground up. Regular security reviews and updates are part of our development cycle. Protocols for Handling Data Breaches Incident Response Plan: We have a formal incident response plan that outlines the steps to be taken in case of a data breach. This plan is regularly reviewed and updated to adapt to new security threats and compliance requirements. Notification Procedures: In the event of a data breach, we will notify affected individuals and regulators as required by law. Notifications will include details about the nature of the breach, the data involved, the possible impact, and the actions taken to mitigate any adverse effects. Investigation and Remediation: Upon discovering a breach, we immediately initiate an investigation to determine the breach's scope and origin. Remediation efforts are undertaken to close any security gaps and to prevent future occurrences. Training and Awareness: We conduct regular training for our employees on data protection and security measures. This training is designed to raise awareness about the importance of data security and to ensure that all staff members are equipped to recognize and respond to security threats effectively. By maintaining strong data security practices and having a clear protocol for handling data breaches, ATED DMCC ensures that all personal information within our care is protected against today's evolving security threats. This commitment to data security not only helps protect our clients but also strengthens their trust in our services. 10. Data Retention ATED DMCC adheres to strict data retention policies to ensure that personal information is not held for longer than necessary in relation to the purposes for which it was collected. This section outlines our data retention policies and the measures we take to handle data responsibly after the retention period. Policies on How Long Data is Retained Purpose-Specific Retention: The length of time for which we retain your information depends on the specific purposes for which the data is processed. For example, transactional records may be kept for a longer period to comply with financial reporting and tax obligations. Legal and Regulatory Requirements: We retain certain information as required by law or for as long as is necessary to protect our legal rights or manage our risks. This includes holding data for compliance with legal obligations under financial, anti-money laundering, and corporate laws. Contractual Obligations: For individuals with whom we have an ongoing relationship, such as registered users or clients with active accounts, we retain personal data as long as the contractual relationship lasts and as needed to fulfill our contractual obligations. Review and Audit: Our data retention periods are regularly reviewed to ensure they are compliant with applicable laws and regulations. This review process considers changes in legal requirements and business needs. How Data is Handled After the Retention Period Deletion: Once the retention period expires and there is no lawful basis or legitimate business reason to retain the data, the information is securely deleted from our systems. Anonymization: In cases where the data is needed for analytical or statistical purposes, we may anonymize the data, removing all identifiers that link it to an individual, thus preventing any further privacy implications. Secure Disposal: We employ secure disposal methods for physical records and secure deletion standards for digital data to prevent any possibility of data reconstruction or recovery. Archiving: Some data may be archived where there is a need to preserve information for historical or research purposes. Such data is processed in accordance with applicable data protection laws, ensuring that appropriate safeguards are in place. By implementing these data retention and disposal policies, ATED DMCC ensures that personal information is handled responsibly and securely, minimizing the risk of unauthorized access or data breaches and complying with applicable privacy laws and regulations. This careful handling reflects our commitment to protecting our clients' privacy and maintaining their trust. 11. User Rights and Choices At ATED DMCC, we recognize and respect your privacy rights. We ensure that you have substantial control over your personal information. This section outlines the rights you have regarding your data and the steps you can take to exercise these rights. Comprehensive List of User Rights Regarding Their Data Right to Access: You have the right to request access to the personal information we hold about you. This includes knowing what data we have, why we have it, and who it has been shared with. Right to Rectification: You can request that we correct any inaccuracies in your personal data to ensure it remains up-to-date and accurate. Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when withdrawing consent. Right to Restrict Processing: You have the right to request that we temporarily or permanently stop processing all or some of your personal data. Right to Data Portability: You have the right to request a copy of your personal data in electronic format and the right to transmit that data for use in another party’s service. Right to Object: You have the right to object to us processing your personal data on grounds relating to your particular situation, at any time, under certain circumstances, including the processing of data for direct marketing, scientific or historical research, or statistical purposes. Right to Withdraw Consent: Where the processing of your data is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your consumer’s privacy rights. How Users Can Exercise These Rights Contact Us: To exercise any of your rights, you can directly contact our Data Protection Officer through the contact information provided on our website. We will provide a response to your request within a reasonable timeframe. Verification Process: To protect your privacy and security, we may request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). Automated Tools: For certain operations, such as accessing or rectifying your data, we may provide automated tools through your account settings that allow you to perform these actions at your convenience. Guidance and Support: If you have questions about how to exercise your rights, or if you need assistance, our support team is available to provide the necessary guidance. By informing you of your rights and providing easy ways to exercise them, ATED DMCC ensures that you have full control over your personal information. We are committed to maintaining transparency and providing continued support to help you manage your privacy. 12. Cookies and Tracking Technology ATED DMCC utilizes cookies and other tracking technologies to enhance your browsing experience, analyze site traffic, and personalize the content and advertisements provided to you. This section provides detailed information about these technologies and outlines how you can manage your preferences. Detailed Information on Cookies and Tracking Cookies: Cookies are small text files placed on your device that collect data about your device and your interactions with our site. This data can include identifying your browser, storing site preferences, and providing personalized content. Tracking Pixels: These are small graphic images, sometimes called web beacons or clear GIFs, that may be included on our site and in our emails. They are used to demonstrate patterns of interaction on our websites or measure the effectiveness of our communications. Local Storage Objects: We may use other kinds of local storage, such as HTML5, to store content information and preferences. The data in local storage is not deleted when you clear your cookies but can be deleted manually through your browser settings. Analytic Tools and Ad Networks: We use various analytic tools and ad networks to collect information about how you use our site and services, which helps us improve our service offerings and deliver tailored advertising to you. User Options for Managing These Technologies Browser Settings: You can set your browser to reject cookies or to notify you when a cookie is being set. Be aware that some parts of our services may be designed to work using cookies and that disabling cookies may affect your ability to use those services or certain parts of them. Opt-Out Tools: Various third parties provide opt-out tools that can help you manage the collection of information used for targeted advertising purposes. Tools like the Network Advertising Initiative (NAI) opt-out page or the Digital Advertising Alliance (DAA) Consumer Choice Page offer mechanisms to opt out of receiving targeted ads from member companies. Privacy Settings and Preferences: Our website may provide you with options to directly manage the cookies we use. We may offer tools that allow you to review and update your cookie preferences or privacy settings. Do Not Track: Some browsers have a 'Do Not Track' feature that signals to websites you visit that you do not want to have your online activity tracked. As there is no accepted standard on how companies should respond to these signals, we do not currently respond to them. By understanding and managing your cookie and tracking preferences, you can control how much information is collected about your browsing habits. ATED DMCC is committed to ensuring that your choices are respected and that any data collected is used responsibly to improve your overall experience with our services. 13. Children’s Privacy ATED DMCC is committed to protecting the privacy of young users. This section outlines our stance on children's privacy and the specific practices we have in place to safeguard their information. Statement on Whether Services are Directed to Children Target Audience: ATED DMCC's services are not directed at children under the age of 18. Our website and services are designed for adults and are intended for use by individuals who are at least 18 years old. Age Verification: We do not knowingly collect or solicit personal information from anyone under the age of 18. If we learn that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information as quickly as possible. Practices Regarding Children's Data Parental Consent: In instances where children’s data might be collected, such as through educational programs or partnerships that legally require us to engage with younger people, we will always seek verifiable parental consent prior to any data collection. This is in accordance with applicable law and is designed to ensure that parents are fully aware of the data collection and can control it. Limited Collection and Use: If we collect information from children under the age of 18, the data will be limited to what is necessary to participate in the program or activity. We will not use or share children’s data for any other purposes unless explicitly permitted by their parents or guardians. Security Measures: We take specific steps to protect the privacy and security of children's information. This includes implementing stringent data security measures and limiting access to the information to only those employees who need it to perform their job responsibilities. Parental Access and Control: Parents and guardians have the right to review the personal information collected from their children, request deletion, and refuse to allow any further collection or use of the child's information. We provide parents with clear instructions on how they can exercise these rights effectively. By clearly stating that our services are not intended for children under the age of 18 and outlining our practices for handling any children's data that might be collected, ATED DMCC ensures compliance with children’s privacy laws such as the Children's Online Privacy Protection Act (COPPA) in the United States and similar regulations globally. This commitment helps protect the most vulnerable users and provides peace of mind to their parents or guardians. 14. Governing Law The privacy policy of ATED DMCC is designed to comply with the legal frameworks of the jurisdictions in which we operate. This section outlines the jurisdiction and applicable laws under which our privacy policy is governed and discusses the impact of local laws on our data practices. Jurisdiction and Applicable Law Under Which the Privacy Policy is Governed Primary Jurisdiction: The privacy policy is primarily governed by the laws of Dubai, United Arab Emirates, where ATED DMCC is headquartered. This jurisdiction is chosen as it is the location of our central administration and the place where key business decisions regarding the management of personal data are made. Compliance with International Laws: While we operate primarily under UAE law, ATED DMCC is committed to complying with international privacy laws applicable to our operations in other countries. This includes adhering to the General Data Protection Regulation (GDPR) for our activities in the European Union and complying with specific local privacy laws in other regions where we have a significant business presence. Impact of Local Laws on Data Practices Local Compliance: In countries where local laws impose stricter standards than those of our primary jurisdiction, we tailor our data practices to meet these local requirements. This may involve implementing additional data protection measures, altering data retention practices, or providing enhanced rights to users based on local regulations. Legal Requirements: Our compliance with local laws may necessitate modifications to our privacy policy and practices, including but not limited to how we collect, use, and disclose personal data. For instance, some jurisdictions require explicit consent for certain data processing activities, while others may impose specific data localization requirements that necessitate storing and processing data within the country. User Rights: The rights afforded to users under our privacy policy are influenced by local laws. In jurisdictions with comprehensive data protection laws, users may have extensive rights regarding access, rectification, deletion, and portability of their data. We ensure that our policies clearly communicate these rights and provide straightforward mechanisms for users to exercise them. By establishing our privacy policy under the governance of both UAE law and in accordance with international legal standards, ATED DMCC ensures robust privacy protections for our clients worldwide. Our proactive approach to compliance helps to minimize risks and ensures that our data practices respect and uphold the legal rights of individuals across the different jurisdictions in which we operate.