AIOn this page
- Who we are
- What this policy covers
- Personal data we collect
- How we use personal data
- Cookies, analytics and spam protection
- Who we share personal data with
- International transfers
- How long we keep personal data
- How we protect personal data
- Your rights
- The laws we follow
- Children
- Changes to this policy
In short
- Groupe Arcsen FZCO, or the Arcsen entity that collects your data, is responsible for it.
- We collect what you give us, such as enquiries and job applications, and limited technical data when you visit the website.
- We use it to reply to you, work with clients, recruit, run and secure the website, and send you updates, which you can opt out of at any time.
- We do not sell personal data.
- To access, correct or delete your data, email compliance@arcsen.com.
1Who we are
This policy explains how Groupe Arcsen FZCO (“Arcsen”, “we”, “us” or “our”) handles personal data. We are responsible for the personal data described here. In data protection terms, we are its controller. We are a free zone company licensed by the Dubai Multi Commodities Centre Authority (DMCC) under licence number DMCC-785291, with our registered office at Unit 5445, Almas Tower, Jumeirah Lakes Towers, Dubai, United Arab Emirates.
We work through Arcsen entities in the United Arab Emirates, Saudi Arabia, Qatar and Egypt. If another Arcsen entity collects your personal data, for example because it contracts with your organization or considers your job application, that entity is responsible for it and handles it as this policy describes.
2What this policy covers
This policy applies to personal data about:
- visitors to arcsen.com;
- people who contact us, attend our events or receive our updates;
- contacts at our clients, prospective clients, partners and suppliers;
- people who apply to work with us.
It does not cover personal data that we process on behalf of clients inside their own systems, such as their Salesforce or Sitecore environments. In that work we act on the client’s instructions under our contract with them, and the client’s own privacy notice applies. Our Data Privacy Policy explains how we protect that data.
3Personal data we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact and identity details | Name, email address, phone number, company and job title | You, your organization, or public professional sources |
| Enquiry details | What you need, company size, industry and your message | You, through our contact form or by email |
| Recruitment data | CV, cover letter, employment history, qualifications and certifications, interview notes, references, and right-to-work details where required | You, recruiters, referees and public professional profiles |
| Relationship data | Meetings, correspondence, contracts, invoices and preferences | You and your organization |
| Website and device data | IP address, browser and device type, pages viewed, referring website, approximate location based on IP address, and cookie identifiers | Your device, our website and our service providers |
| Security data | Firewall and access logs, including IP addresses and requests | Our website security tools |
We do not ask for special categories of personal data, such as health information, unless a law requires it during recruitment and we are permitted to collect it.
4How we use personal data
| Purpose | Legal basis (depends on the applicable law) |
|---|---|
| Reply to your enquiry and give you the information you ask for | Steps you ask us to take before a contract, and our legitimate interest in responding to business enquiries |
| Deliver services and manage our relationships with clients, partners and suppliers | Performance of a contract, and our legitimate interest in running our business |
| Consider your job application and manage recruitment | Steps before entering into a contract with you, our legitimate interest in hiring, and legal obligations such as right-to-work checks |
| Send updates, insights and event invitations | Your consent where the law requires it, otherwise our legitimate interest in telling business contacts about relevant services. You can opt out at any time |
| Run, secure and improve the website, including measuring how it is used | Our legitimate interest in a secure and working website. The section on cookies, analytics and spam protection explains how we use analytics cookies and how you can stop them |
| Meet legal and regulatory obligations, and establish or defend legal claims | Legal obligation, and our legitimate interest in protecting our rights |
Where a law, such as the UAE Personal Data Protection Law, does not recognize legitimate interests as a legal basis, we rely on another basis that it allows.
Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.
Hiring decisions are made by people. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
7International transfers
We operate in several countries, and our service providers may process personal data outside the country where it was collected, including in the European Union and the United States. When we transfer personal data across borders, we do so in line with the data protection laws that apply, using safeguards such as contractual commitments, including the EU standard contractual clauses or their UK equivalents where the EU or UK GDPR applies, and the other measures that local law requires.
8How long we keep personal data
We keep personal data only for as long as we need it for the purposes in this policy, or for as long as the law requires. The period depends on the type of data and why we hold it. For example:
- enquiries: while we are in contact with you about them, and for a reasonable period afterwards in case you come back to us;
- client and supplier records: for the duration of the relationship, and afterwards for the periods that commercial, tax and accounting laws require;
- job applications: for the recruitment process and a limited period afterwards, so that we can answer questions about the process and, where you agree, consider you for future roles;
- website analytics and security logs: for limited periods set in the tools we use.
When we no longer need personal data, we delete it or anonymize it.
9How we protect personal data
We use technical and organizational measures to protect personal data, including access controls, multi-factor authentication for key systems, encryption in transit and staff awareness training. Our Information Security Policy describes our approach. No system is completely secure, so please contact us straight away if you believe your data has been put at risk.
10Your rights
Depending on the law that applies to you, you may have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- ask us to delete your data;
- object to, or ask us to restrict, how we use your data, including for direct marketing;
- receive data you gave us in a portable format;
- withdraw your consent where we rely on it;
- not be subject to decisions based solely on automated processing that significantly affect you.
To use these rights, email compliance@arcsen.com. We may need to confirm your identity before we respond, and we will respond within the time the applicable law requires. You can also unsubscribe from our emails at any time using the link in each email.
If you are not satisfied with our response, you can complain to the data protection authority in your country, such as the UAE Data Office or the Saudi Data and Artificial Intelligence Authority (SDAIA), or to your local supervisory authority if you are in the European Union or the United Kingdom.
11The laws we follow
We handle personal data in line with the data protection laws that apply to our activities. These include the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), the Saudi Personal Data Protection Law (Royal Decree No. M/19 of 1443H, as amended), Qatar’s Law No. 13 of 2016 on Personal Data Privacy Protection, Egypt’s Personal Data Protection Law (Law No. 151 of 2020) and, where they apply, the EU and UK General Data Protection Regulations.
12Children
Our website and services are for businesses and professionals. They are not directed at children, and we do not knowingly collect personal data from anyone under 18.
13Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it last changed. If we make significant changes, we will tell you through the website or, where appropriate, by email.
Questions about this document?
Email our compliance team at compliance@arcsen.com, or write to Groupe Arcsen FZCO, Level 54, Almas Tower, Jumeirah Lakes Towers, Dubai, United Arab Emirates.