1. General Information

Faturalab Elektronik Ticaret ve Bilişim Hizmetleri Anonim Şirketi (“Faturalab” or “Company”) is committed to protecting your personal data in compliance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations in the United Arab Emirates (UAE).

As a Data Controller, Faturalab may collect, store, update, disclose, transfer, classify, and process your personal data under the conditions set out below and in accordance with PDPL and relevant UAE laws.

2. Methods of Personal Data Collection

Personal data may vary depending on the services provided and can be collected through automated or non-automated methods such as:

• Our website, social media channels, mobile applications, and other digital platforms.
• Verbal, written, or electronic means during service use.
• Through interactions with customer service centers, office visits, or participation in events, training, or seminars.

Faturalab may process your personal data without requiring additional consent if the processing is necessary for the nature of the business relationship.

3. Purposes and Legal Basis for Processing Personal Data

Your personal data is processed for the following purposes based on legal grounds as per PDPL Article 4 and Article 5:

• Providing products and services offered by Faturalab.
• Customizing services based on user preferences and creating customer portfolios.
• Ensuring the legal and commercial security of individuals engaged in business relationships with Faturalab.
• Conducting internal administrative operations, ensuring physical security at company locations.
• Managing customer feedback and complaint handling, legal compliance, audits, and other processes.
• Developing business and commercial strategies.

4. Processing of Personal Data Without Direct Engagement

Even if you do not actively use our services after signing an agreement, your personal data may still be processed without requiring additional consent, provided it is necessary to fulfill contractual obligations.

5. Transfer of Personal Data to Third Parties and International Transfers

Under PDPL Articles 22 & 23, personal data may be transferred to third parties or entities located within or outside the UAE, provided that:

• The recipient ensures an adequate level of data protection.
• The data transfer is necessary for fulfilling contractual obligations or other legally permitted purposes.

Your data may be shared with:

• Cloud service providers, IT support, storage, archiving, security, and call center services.
• Business partners, financial institutions, legal and tax consultants, and marketing agencies.
• Governmental and regulatory authorities, where required.

Cross-border data transfers are only conducted if the recipient country ensures adequate protection or appropriate safeguards are in place (e.g., contractual agreements or regulatory approvals).

6. Data Subject Rights

Under PDPL Article 19, you have the following rights:

• Right to access: Inquire whether your personal data is being processed.
• Right to rectification: Request corrections for inaccurate data.
• Right to erasure: Request deletion of personal data under specific conditions.
• Right to object: Challenge automated decision-making affecting you.
• Right to restriction: Limit processing under certain circumstances.
• Right to data portability: Request data in a structured, machine-readable format.
• Right to lodge a complaint: File complaints with the UAE Data Office if your rights are violated.

To exercise your rights, you can submit a request using our Personal Data Request Form (linked below) and send it via email or physical mail.

Acknowledgment:

By accepting this Privacy Notice, you confirm that you have read and understood how your personal data will be processed.