How Alwan Technology handles personal data.

1. Who is responsible for your data

Alwan Technology ("Alwan Technology", "we") is the data controller for personal data processed through this website and in connection with our business relationships.

Address: Cloud Spaces, Circle Mall, Jumeirah Village Circle, Dubai, United Arab Emirates. Email: info@alwantechnology.com. Telephone: +971 4 837 8363.

Questions about this policy or about how we handle your personal data can be sent to the same address, marked for the attention of the Data Protection Officer.

2. Which personal data we process, and why

We process personal data in the following situations. In each case we collect only what is needed for the purpose described.

• Enquiries through the contact form or by email or telephone: name, business email address, organisation, country, job title and telephone number if provided, and the content of your message. Purpose: to answer your enquiry and follow up on it. Legal basis: your consent (GDPR art. 6(1)(a)) and our legitimate interest in responding to business enquiries (art. 6(1)(f)).
• Clients, suppliers and partners: contact details of the people we deal with, correspondence, contractual and invoicing information. Purpose: to enter into and perform agreements and to manage the relationship. Legal basis: performance of a contract (art. 6(1)(b)) and legitimate interest (art. 6(1)(f)).
• Marketing communication: name, organisation, email address and telephone number, where you have consented to receive information about our services. Legal basis: consent (art. 6(1)(a)). You can withdraw at any time, see section 7.
• Job applicants: the information in your application and CV, interview notes and, with your consent, references. Purpose: recruitment. Legal basis: legitimate interest and, for any references or background checks, consent. Unsuccessful applications are deleted within six months of the process ending unless you agree to us keeping them longer.
• Website visitors: technical data such as IP address, browser type and pages requested, held in server logs for security and operations. Legal basis: legitimate interest in running a secure website (art. 6(1)(f)). This website does not use analytics, advertising or tracking cookies.

3. Who we share your data with

We share personal data only where necessary for the purposes above, and only with parties bound by confidentiality and data-processing obligations:

• Our hosting and infrastructure provider (Cloudflare) for serving this website and receiving form submissions.
• Our transactional email provider for delivering contact-form enquiries to our team.
• IT, email and document-management providers used in our day-to-day operations.
• Professional advisers such as auditors and lawyers, where required.
• Public authorities, where we are legally obliged to do so.

4. Transfers outside the EU/EEA and the UAE

Alwan Technology operates from the United Arab Emirates and delivers services in Europe. Personal data may therefore be processed in both regions. Where personal data subject to the GDPR is transferred to a country without an EU adequacy decision, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, and we apply supplementary measures where needed. Where UAE law applies, transfers are made in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

5. How long we keep your data

We keep personal data no longer than necessary for the purpose it was collected for:

• Contact-form and general enquiries: up to 24 months after our last contact with you, unless a business relationship follows.
• Client, supplier and partner data: for the duration of the relationship and thereafter for as long as required by accounting and tax legislation (typically five years from the end of the relevant financial year).
• Marketing consents: until you withdraw consent, after which we keep a record of the withdrawal for two years.
• Job applications: six months after the recruitment process ends, unless you agree otherwise.
• Server logs: up to 90 days.

6. How we protect your data

Alwan Technology holds ISO/IEC 27001 certification for information security management and ISO 22301 certification for business continuity. Personal data is protected by technical and organisational measures appropriate to the risk, including encryption in transit and at rest, access control on a need-to-know basis, logging and monitoring, and regular review of suppliers and procedures.

7. Your rights

Under applicable data protection law you have the right to:

• Access the personal data we hold about you and receive a copy.
• Have inaccurate or incomplete data corrected.
• Have your data deleted, where there is no longer a lawful basis for us to keep it.
• Restrict or object to our processing, including objecting to direct marketing at any time.
• Receive the data you have provided to us in a structured, machine-readable format, and have it transferred to another controller where technically feasible.
• Withdraw a consent you have given at any time. Withdrawal does not affect processing carried out before it.

8. How to exercise your rights

Write to info@alwantechnology.com or to our postal address. We respond within one month; where a request is complex we may extend this by two further months and will tell you if so. We may need to verify your identity before acting on a request.

9. Complaints

If you believe we have processed your personal data unlawfully, we would like to hear from you first so that we can put it right. You also have the right to lodge a complaint with a supervisory authority. In Denmark this is Datatilsynet (www.datatilsynet.dk). In the UAE, complaints may be directed to the UAE Data Office. If you are located in another EU/EEA country, you may contact the authority in your country of residence.

10. Changes to this policy

We review this policy regularly and update it when our processing, our suppliers or the law change. The current version is always available on this page, with the date it was last updated shown at the top.