More
Choose
UAE - Dubai

Dubai, Media City - (DMC)
Office No. 246 - PO Box 0245
Phone: +971 50 807 8826
Landline: +971 4880 6058
Email: info@ahdafdigital.ae

Germany

Deutschland - Nordrhein Westfalen 44623 Herne
+49 15510 044010

Privacy Policy

1. Introduction

Ahdaf Digital (“we”, “us”, “our”) operates the website https://ahdafdigital.ae (the “Website”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data of visitors, leads, subscribers, and customers, in compliance with the General Data Protection Regulation (EU GDPR) and applicable laws.


2. Controller and Contact

The controller responsible for the processing of personal data via the Website is:

Ahdaf Digital
Dubai, Media City (DMC) – Office No. 246
P.O. Box 0245
United Arab Emirates
Email: info@ahdafdigital.ae

If you are resident in the EU or prefer to exercise your rights under EU law, you may use the same contact details above for any data-protection related requests.


3. Data We Collect

Depending on how you use the Website, we may collect the following categories of personal data:

  • Identification & contact data – e.g. name, email address, phone number, company name, job title (when you fill contact, quote, inquiry, or lead forms).
  • Communication data – content of messages you submit through forms and email correspondence.
  • Marketing data – newsletter subscription status, preferences, and campaign interactions.
  • Technical & usage data – IP address, device and browser information, access times, pages visited, referral URL, cookie identifiers.
  • Lead / customer data – service preferences, project details, invoicing-relevant information (for paying clients), where applicable.

4. Purposes & Legal Bases

We process personal data for the following purposes and on the following legal bases:

  • Responding to inquiries and contact requests
    To process and answer your contact, quote, inquiry, or lead requests.
    Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
  • Operating, securing, and improving the Website
    To ensure the Website functions properly, to maintain security, and to improve user experience.
    Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
  • Sending newsletters and marketing communications
    To send newsletters or other marketing content where you have opted in.
    Legal basis: Art. 6(1)(a) GDPR (consent).
  • Analytics, performance measurement, and marketing tracking
    To understand how the Website is used, measure performance, and support marketing activities, but only after consent has been given for non-essential cookies or tools.
    Legal basis: Art. 6(1)(a) GDPR (consent) or, for strictly necessary analytics, Art. 6(1)(f) GDPR (legitimate interest).
  • Compliance with legal obligations and defence of claims
    To comply with legal requirements (e.g. invoicing, tax) and to assert or defend legal claims.
    Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.

5. Contact Forms & Lead Capture

When you fill in a contact, quote, inquiry or lead form on the Website, we collect the data you provide (for example: name, email address, phone number, company name, and your message).

The form clearly states that the purpose of this data collection is to process your request and communicate with you.

The legal basis for this processing is typically pre-contractual measures (Art. 6(1)(b) GDPR) and/or our legitimate interest in handling inquiries (Art. 6(1)(f) GDPR).

If an optional marketing consent checkbox is present, it is never pre-ticked and is only valid if you actively select it.


6. Newsletter & Email Marketing

If you subscribe to a newsletter or otherwise opt in to receive marketing communications from us:

  • Processing is based on your explicit consent (Art. 6(1)(a) GDPR).
  • Every marketing email includes an easy-to-use unsubscribe link.
  • If you unsubscribe, we stop sending further marketing emails. We may delete or anonymise your data, or retain only minimal information in a suppression list to ensure your objection is respected.

7. Cookies and Tracking Technologies

We use cookies and similar technologies on the Website.

  • Essential cookies – required for basic site functionality and security; these are set without consent and are necessary for the Website to operate.
  • Analytics and marketing cookies – used for usage tracking, performance analysis, and advertising or remarketing purposes; these are only set after you have given explicit consent via our cookie banner or consent mechanism.

You can view detailed information about cookie categories, their purposes, retention periods, and providers in our Cookie Policy.

A persistent "Cookie Settings" link in the footer allows you to withdraw or change your consent at any time. You can also manage or delete cookies via your browser settings.


8. Third-Party Processors & Data Transfers

We may use third-party service providers (processors) to support our business operations, for example:

  • Hosting and infrastructure providers.
  • CRM and email-marketing platforms.
  • Analytics tools.
  • Booking or contact form tools.

We only work with trusted providers and, where required by GDPR (Art. 28), we have concluded Data Processing Agreements (DPAs) with them.

If personal data is transferred outside the European Economic Area (EEA), we ensure an adequate level of protection, for example through an EU adequacy decision or the use of Standard Contractual Clauses (SCCs).


9. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected or as required by law. Typical retention periods may include:

  • Contact and lead data: retained for up to 24 months after the last interaction, unless you request earlier deletion and no legal retention obligations apply.
  • Newsletter subscriber data: retained until you unsubscribe or withdraw your consent; suppression list entries may be kept for a longer period to respect your objection.
  • Analytics data: retained according to the configuration of the relevant analytics tools (for example, typically 14–24 months).
  • Contract and invoicing data: retained for the statutory retention period (e.g. 6–10 years) for tax and commercial law compliance.

After the applicable retention period expires, personal data is deleted or anonymised.


10. Your Rights

Under applicable data protection laws, including the GDPR, you have the following rights with respect to your personal data:

  • Right of access – to request a copy of the personal data we hold about you.
  • Right to rectification – to correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”) – to request deletion of your personal data, unless we are legally obliged to retain it (for example, for invoicing purposes).
  • Right to restriction of processing – to request that processing of your data be limited under certain conditions.
  • Right to data portability – to receive your personal data in a structured, commonly used and machine-readable format, or to have it transmitted to another controller.
  • Right to object – to object to the processing of your data, in particular for direct marketing or certain analytics based on legitimate interests.
  • Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing prior to withdrawal.

To exercise these rights, please contact us at: info@ahdafdigital.ae.

You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU Member State of your residence, place of work, or place of the alleged infringement.


11. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorized or unlawful access, loss, misuse, or disclosure. These measures include, for example, HTTPS encryption, access controls, and regular security reviews of our systems and infrastructure.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal obligations. The latest version will always be available on the Website. If changes are significant, we will highlight them in an appropriate way (for example via a notice on the Website).