PRIVACY NOTICE
PRIVACY NOTICE
V.1.0.
V.1.0.
Your Rights and How to Exercise Them
Under the DIFC Data Protection Law No. 5 of 2020, you have the following rights in relation to the personal data we hold about you. These rights are not absolute and may be subject to conditions or limitations under applicable law.
Right of Access — confirmation of whether we hold personal data about you, and a copy of that data together with information about how and why we process it. (Article 33, DP Law)
Right to Rectification — correction of inaccurate or incomplete personal data; where shared with third parties, we will endeavour to notify them of verified corrections. (Article 33 and 36, DP Law)
Right to Erasure — deletion of personal data where we no longer have a lawful basis to retain it, where you have withdrawn consent, or where it has been processed unlawfully, unless we are required to retain it under applicable law or for the establishment or defence of legal claims. (Article 33, DP Law)
Right to Restriction of Processing — limitation of processing in certain circumstances, such as while accuracy is contested or an objection is being assessed. (Article 35, DP Law)
Right to Data Portability — receipt of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance and carried out by automated means. (Article 37, DP Law)
Right to Object — objection to processing based on legitimate interests, with an unconditional right to object to direct marketing (including related profiling); we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. (Article 34, DP Law)
Rights in Relation to Automated Decision-Making — we do not make decisions based solely on automated processing that produce legal or similarly significant effects; should this change, you will be informed and offered human review. (Article 38, DP Law)
Right Not to be Discriminated Against — we will not deny services, apply differential pricing, or provide diminished service quality as a result of you exercising these rights. (Article 39, DP Law)
Right to Lodge a Complaint — with the DIFC Commissioner of Data Protection, the primary supervisory authority for DIFC-registered entities, at commissioner@dp.difc.ae.
How to Exercise Your Rights. You may submit a Data Subject Access Request ("DSAR") by email to dpo@mazewerk.com with the subject line "DSAR:", by telephone on +971 54 549 2791, or via the DSAR Request Form at mazewerk.com/privacy. DSARs are processed at no cost, save that we reserve the right to impose a reasonable fee where a request is manifestly unfounded, excessive, or repetitive, notified to you in advance. We will respond to all valid requests within one month of receipt and may request verification of your identity before processing your request. (Article 33(4), DP Law)
Your Rights and How to Exercise Them
Under the DIFC Data Protection Law No. 5 of 2020, you have the following rights in relation to the personal data we hold about you. These rights are not absolute and may be subject to conditions or limitations under applicable law.
Right of Access — confirmation of whether we hold personal data about you, and a copy of that data together with information about how and why we process it. (Article 33, DP Law)
Right to Rectification — correction of inaccurate or incomplete personal data; where shared with third parties, we will endeavour to notify them of verified corrections. (Article 33 and 36, DP Law)
Right to Erasure — deletion of personal data where we no longer have a lawful basis to retain it, where you have withdrawn consent, or where it has been processed unlawfully, unless we are required to retain it under applicable law or for the establishment or defence of legal claims. (Article 33, DP Law)
Right to Restriction of Processing — limitation of processing in certain circumstances, such as while accuracy is contested or an objection is being assessed. (Article 35, DP Law)
Right to Data Portability — receipt of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract performance and carried out by automated means. (Article 37, DP Law)
Right to Object — objection to processing based on legitimate interests, with an unconditional right to object to direct marketing (including related profiling); we will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests. (Article 34, DP Law)
Rights in Relation to Automated Decision-Making — we do not make decisions based solely on automated processing that produce legal or similarly significant effects; should this change, you will be informed and offered human review. (Article 38, DP Law)
Right Not to be Discriminated Against — we will not deny services, apply differential pricing, or provide diminished service quality as a result of you exercising these rights. (Article 39, DP Law)
Right to Lodge a Complaint — with the DIFC Commissioner of Data Protection, the primary supervisory authority for DIFC-registered entities, at commissioner@dp.difc.ae.
How to Exercise Your Rights.
You may submit a Data Subject Access Request ("DSAR") by email to dpo@mazewerk.com with the subject line "DSAR:", by telephone on +971 54 549 2791, or via the DSAR Request Form at mazewerk.com/privacy. DSARs are processed at no cost, save that we reserve the right to impose a reasonable fee where a request is manifestly unfounded, excessive, or repetitive, notified to you in advance. We will respond to all valid requests within one month of receipt and may request verification of your identity before processing your request. (Article 33(4), DP Law)