Privacy policy
About this Privacy Policy
This Privacy Policy is designed to help you understand how the UICCA (“us” or “we”) respects your privacy and protects your personal data. If you visit our website at www.uicca.ae (“Website”), engage our services, collaborate with us, attend our events, or otherwise interact with us via email, phone, or social media, then this Privacy Policy applies to you.
We’d like to ensure you’re always able to make informed decisions about the personal data you choose to share with us, so we encourage you to read our Privacy Policy carefully so that you are aware of how and why we collect, use, and share it.
We will not collect or use your personal data for any purpose other than as described in this Privacy Policy. If you have any questions about this Privacy Policy, don't hesitate to get in touch with us using the contact details below.
Our details
This Privacy Policy applies to the UICCA (“we,” “us,” “our”), as a data controller incorporated in Abu Dhabi Global Market. Our registered address is:
Abu Dhabi Global Market Authorities Building
32nd Floor, Unit 2, ADGM Square
Al Maryah Island, Abu Dhabi, UAE
When and how we collect personal data
We may collect personal data either directly from you, from third parties you have authorised, or from publicly available sources, including:
- when you communicate with us in person, by phone, or by email;
- when you engage our consulting services;
- when you take part in our programs;
- when you engage our consulting services;
- when you attend our events;
- when you take part in any surveys; questionnaires or research we conduct; ;
- when you apply for a job with us;
- when you interact with us via social media or interactive applications such as Facebook, Twitter, and Instagram; and
- from such other sources where you have given your consent for our collection of your personal data, and/or where otherwise lawfully permitted.
The types of personal data we collect
The types of personal data we collect about you will differ, depending on your relationship with us. Most of the information we collect is business information. In certain circumstances, we may also need to collect personal data, where necessary to manage business relationships, provide our services, recruit employees, and fulfil our legal obligations.
The data we collect from you may include:
- personal information used to identify you, including your first and last name; and your job title or function;
- contact information such as billing address, address of premises, telephone number, and email address;
- financial data such as banking and payment details (where necessary to fulfil transactions);
- your job title or function when you begin a business relationship with us;
- information included in your resume when you apply for a job with us; and
- any additional information you may include in your communications to us, whether via email, or via our Website contact form.
The data we collect automatically via our Website
We do not use any cookies on our Website, other than those that are strictly necessary to ensure its function and to keep it secure. These cookies allow you to view content in your preferred language and navigate through the different areas of the Website with ease. The cookies we use do not store any information that identifies you personally.
You can block cookies by activating a setting on your browser allowing you to refuse them. You can also delete cookies through your browser settings. Please note that the cookies used are essential for our Website to function, so if you block or delete all cookies, it may not work properly.
How and why we use your personal data
Data protection laws mandate that we only use your personal data for specific, and lawful purposes, and where we have a valid reason to do so.
Our purposes for processing your personal data
We process your personal data for the following purposes:
- to respond to any enquiries, complaints, comments, or feedback that you have submitted to us;
- to provide you with our services and to manage our business relationships;
- to facilitate your participation in any of our programs or events;
- to further develop and improve our services;
- to market and promote our services, programs and events;
- to keep our Website up and running and to ensure our content remains safe, secure, and available to you;
- To keep our systems, premises, and employees safe and secure;
- to contribute to research into climate change solutions, and to propel the advancement of climate change solutions and ideas; and
- to follow our legal obligations, and to protect against fraudulent or unauthorised activities.
Our legal bases for processing your personal data
We rely on the following legal bases to process your personal data:
Consent
Where you have given us your consent to process your personal data for a specific purpose.
Note that if you have previously given consent to our processing your data you can freely withdraw such consent at any time. You can do this by contacting us using the contact details below.
If you do withdraw your consent, and if we do not have another legal basis for processing your personal data, then we will stop processing it. If we do have another legal basis for processing your personal data, then we may continue to do so, subject to your rights.
Contract
When we need to process your personal data for the purposes of entering, or performing under, a contract to which you or your organisation are a party.
This may include processing personal data during procurement, when preparing quotes, when conducting background and reference checks, when processing payments, during debt recovery, enforcement, and other processes related to the performance of our contract with you.
We may also process personal data when necessary for the commencement or defence of legal claims, for the purposes of carrying out our employment and social security obligations, and to enable our compliance with other legal obligations to which we are subject.
Legitimate interests
Where our processing of your personal data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:
- Delivering, developing and improving our Website, services and programs;
- Gaining insights from information collected via our Website;
- Marketing and promoting our services and events;
- Keeping our Website and users safe; and
- Maintaining and improving our data security measures.
In each case, these legitimate interests are only valid if your rights and interests do not outweigh them.
Why and with whom do we share your personal data
We use third-party service providers to help us process your personal data when you engage with us. These third parties provide the hosting, functionality, and support services we need to provide you with our Website and our services. You can request a list of the third parties we use at any time, by contacting us using the contact details below.
When we do this, sometimes we need to share your data with them, to ensure the Website can run and function as needed, and that we are able to continue providing our services. We will only share your personal data with these third parties when strictly necessary, and according to the safeguards and good practices set out in this Privacy Policy. We do not sell your personal data.
From time to time, we may also need to share personal data we hold with other third parties, such as professional advisors, relevant regulators, or other authorities, to protect the rights, and privacy, of our organisation, employees, and Website users, or to comply with our legal or regulatory requirements.
We want to make sure our Website is available to people all over the world. To allow for this, the personal data we collect via the Website will need to be transferred across international borders, to our third-party processors located in different jurisdictions, including the USA.
To safeguard these transfers of personal data, we assess all our third-party processors from a risk perspective and ensure that we have appropriate binding contracts in place that warrant the protection of all personal data that we share with them.
How do we protect your personal data?
We have technical measures (e.g., encryption), and organisational procedures (e.g., internal policies and controls) in place to safeguard and secure the personal data we collect. Despite these measures, no transmission of data is guaranteed to be 100% secure. You provide personal data to us at your own risk, so we urge you to keep your passwords secure, change them frequently, and never share them with others.
If you believe the privacy of your personal data has been breached, please contact us immediately, using the contact details below.
How long do we store your personal data?
We retain your personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy. If you would like more information about specific retention periods, please contact us using the contact details below.
Your privacy rights
Depending on where you live (and the data protection and privacy laws that apply in your jurisdiction), you may have certain rights available to you regarding the privacy of your personal data. These rights include but are not limited to those listed below.
We want to ensure that you retain control over your personal data and that you are always able to exercise your choices and rights about the personal data that we hold about you. If you wish to exercise your privacy rights, you may do so at any time, by contacting us using the contact details below.
You can choose not to provide us with personal data
If you choose to do this, you can still access our Website, but certain features will not be available to you.
You can control the communications you receive from us
You can easily unsubscribe from our communications, by managing notifications from your profile settings page on the Platform.
You have the right to access the personal data we hold about you
This includes the right to ask us for supplementary information about:
- The categories of data we are processing
- The purposes of data processing
- The categories of third parties to whom the data may be disclosed
- How long the data will be stored (or the criteria used to determine that period)
- Your other rights regarding our use of your data
We will provide you with the requested information within one month of your request unless doing so would adversely affect the rights and freedoms of others (e.g., another person’s confidentiality or intellectual property rights), or your request is complicated in nature. We’ll tell you if we can’t meet your request, and we will always explain why.
You can also download a copy of your data at any time, via your profile settings page on the Platform.
You have the right to make us correct any inaccurate personal data about you
You can ask us to correct and update any personal data you have provided to us at any time, by contacting us using the contact details below.
You can object to us using your personal data for profiling you or making automated decisions about you
We do not use your personal data for profiling, or to make any automated decisions about you.
You have the right to port your data to another data controller
We will give you a copy of your data in CSV or JSON so that you can provide it to another data controller. If you ask us and it is technically possible, we will directly transfer the data to the other data controller for you. We will not do so to the extent that this involves disclosing data about any other individual.
You have the right to be ‘forgotten’ by us
You can do this by asking us to erase any personal data we hold about you if it is no longer necessary for the purposes for which we collected it. This right doesn’t always apply (for example, if we have another legal basis for processing your data), but we’ll tell you if this is the case when you ask us to erase your data.
You have the right to complain about our use of your data
Please tell us first, so we have a chance to address your concerns. If we fail in this, you can address any complaint to the data protection authority that supervises our processing of your personal data, in your jurisdiction of residence. For the UICCA, that’s the Office of Data Protection in ADGM. You can contact them by email at Data.Protection@adgm.com, by phone at 971 (2) 333 8888, or as otherwise directed on their website at www.adgm.com/operating-in-adgm/office-of-data-protection.
Protecting the privacy of minors
Our Platform is not intended for use by anyone under the age of 16. UICCA does not knowingly collect personal data from anyone under the age of 16. If you are under 16, you may not attempt to register for our Platform or send any information about yourself to us, including your email address.
If we become aware that we have collected personal data from someone under the age of 16 without verification of parental consent, we will delete that data promptly. If you are a parent or legal guardian of a child under 16 and believe that a child has provided us with their personal data, please get in touch with us using the contact details below.
Changes to this Privacy Policy
We may amend this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update it, we will take appropriate measures to inform you, consistent with the significance of the changes we make. If we make material updates to this Privacy Policy, we will update the effective date at the top of the Privacy Policy.
If you have any questions, comments, or concerns about the way your personal data is being used or processed by UICCA, or wish to exercise any of your privacy rights, please contact our Data Protection Officer at dpo@uicca.ae.