Information on the Processing of Personal Data

Dear Customer,

In compliance with the UAE Federal Law No. 2 of 2019 on the Protection of Personal Data ('Data Protection Law'), Sea Zone Ship & Boats Spare Parts Trading LLC, as the data controller, hereby informs you about the processing of your personal data and requests your consent for the processing activities described below.

1 – Data Controller

Sea Zone Ship & Boats Spare Parts Trading LLC

136, Jadaf, Dubai, UAE.

General Email: info@seazoneuae.com

Owner's Email: Mr. Jamil J. Al Karah - jamil@seazoneuae.com

Website: https://seazoneuae.com

2 – Processing Methods

Your personal data may be processed verbally and/or in written form, electronically or on paper, as necessary to achieve the purposes outlined below. We adhere to the principles of the Data Protection Law, including:

- Lawfulness, fairness, and transparency

- Purpose limitation

- Data minimization

- Accuracy of data

- Storage limitation

- Integrity and confidentiality

- Accountability of the data controller

The types of data processed and purposes include:

- Navigation Data: Our website may collect certain personal data, such as IP addresses, for statistical purposes and to ensure website functionality and security.

- Voluntarily Provided Data: Personal data voluntarily provided by you (e.g., name, email address) through our website or other means, for purposes such as responding to inquiries or receiving newsletters.

Personal data is processed only for the time necessary to achieve the purposes for which it was collected or as required by law. Processing is conducted exclusively by authorized personnel in compliance with our data protection policies.

3 – Rights of the Data Subject

As an individual whose personal data is processed by Sea Zone Ship & Boats Spare Parts Trading LLC, you have the following rights under the Data Protection Law

- Access to personal data

- Correction of inaccurate or incomplete data

- Erasure of personal data ('right to be forgotten')

- Restriction of processing

- Data portability

- Objection to processing

- Non-participation in automated decision-making processes

Additionally, you have the right to:

- Lodge a complaint with the relevant authority

- Withdraw your consent at any time (where applicable)

You may exercise these rights by contacting us at the contact details provided below.

For any inquiries regarding the processing of your personal data or to exercise your rights, please contact:

Sea Zone Ship & Boats Spare Parts Trading LLC

Attention: Data Protection Officer

136, Jadaf, Dubai, UAE

Email: info@seazoneuae.com

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with the Data Protection Law.

We may update this privacy control from time to time to reflect changes in our practices or legal requirements. We encourage you to review this notice periodically.

______

UAE Federal Law No. 2 of 2019 on the Protection of Personal Data, commonly known as the Data Protection Law, aims to regulate the processing of personal data in the United Arab Emirates. Here are some key aspects and provisions of the law:

1. Scope and Definitions:

- The law applies to the processing of personal data carried out by controllers and processors within the UAE, regardless of whether the processing occurs electronically or manually.

- Personal data is broadly defined to include any information relating to an identified or identifiable natural person.

2. Data Processing Principles:

- The law mandates that personal data must be processed lawfully, fairly, and transparently.

- Data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

- Data collected should be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.

- Data should be accurate and kept up to date. Reasonable steps must be taken to ensure that inaccurate data is rectified or erased without delay.

- Data should be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.

3. Lawful Basis for Processing:

- Personal data may be processed only with the consent of the data subject, unless processing is necessary for the performance of a contract, compliance with a legal obligation, protection of vital interests of the data subject, performance of a task carried out in the public interest, or for the purposes of legitimate interests pursued by the controller or a third party.

4. Data Subject Rights:

- The law grants data subjects several rights, including the right to access their personal data,rectify inaccurate data, erase data (the right to be forgotten), restrict processing, object to processing, and data portability.

- Data subjects also have the right not to be subject to automated decision-making processes that produce legal effects concerning them or similarly significantly affect them.

5. Cross-Border Data Transfers:

- The law regulates cross-border transfers of personal data, requiring that such transfers occur to countries that provide an adequate level of protection for personal data. In the absence of an adequacy decision, controllers must provide appropriate safeguards or obtain data subject consent.

6. Security Measures:

- Controllers and processors are required to implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data.

7. Data Protection Officer (DPO):

- Controllers and processors may be required to appoint a Data Protection Officer to oversee compliance with the law, particularly if they engage in large-scale processing of sensitive personal data.

8. Enforcement and Penalties:

- The law provides for penalties for violations, including fines and potential imprisonment for serious offenses. - The UAE's Data Protection Authority (DPA) is responsible for overseeing compliance with the law and investigating complaints related to personal data processing.