Legal
UAE Data Protection Notice
Last updated: October 15, 2026
1Controller
PHD PHYSICAL DATA ARTIFICIAL INTELLIGENCE DEVELOPING SERVICES – FZCO, IFZA Business Park, DDP, PO Box 342001, Dubai Silicon Oasis, Dubai, UAE – trade licence no. 78001 (DIEZA).
Contact: dpo@xxii.fr (Data Protection Officer, function outsourced to XXII GROUP SAS)
2Data we process and why
Same data as in our Privacy Policy. We process it:
- to respond to your request, send a quote or a sample (steps taken at your request before concluding a contract, PDPL Art. 4)
- to send you marketing communications, only with your consent (optional checkbox), which you can withdraw at any time
- for audience measurement, only with your consent via the cookie banner
Your consent is specific, clear and freely given, and you can withdraw it at any time without affecting processing carried out before withdrawal.
3Where your data is stored
Your data is stored outside the UAE, in the European Union: in our CRM (HubSpot, EU data centre in Germany), operated on our behalf by XXII GROUP SAS in France. Free samples are delivered via Google Drive.
This transfer is permitted under Articles 22 and 23 of the PDPL for the following reasons:
- Equivalent level of protection
- In the EU, your data is protected by the General Data Protection Regulation (GDPR), one of the most protective data protection laws in the world, which provides rights and safeguards at least equivalent to those of the PDPL.
- Contractual safeguards
- Our service providers are bound by data processing agreements that require them to protect your data to GDPR standards, to process it only on our instructions, to keep it confidential and secure, and to notify us of any breach.
- Necessity
- The transfer is necessary to respond to your request, prepare a quote or send you a sample, i.e. to take steps you have asked for before entering into a contract with us.
We do not transfer your data to any other country or third party for their own purposes.
4Your rights under the PDPL
| Right | What it means |
|---|---|
| Information and access (Art. 13) | Know what data we hold, why, who receives it, how long we keep it |
| Data portability (Art. 14) | Receive your data in a structured, machine-readable format |
| Correction and erasure (Art. 15) | Correct inaccurate data or ask us to delete it |
| Restriction (Art. 16) | Ask us to limit processing, e.g. while accuracy is checked |
| Objection (Art. 17) | Stop direct marketing and related profiling at any time |
| Automated decisions (Art. 18) | We do not make decisions about you based solely on automated processing |
Email dpo@xxii.fr (Data Protection Officer, function outsourced to XXII GROUP SAS).
We will respond within one month (extendable by two months for complex requests, in which case we will tell you why).
5Security and breaches
We apply appropriate technical and organisational measures.
In the event of a breach affecting your personal data, we will notify the competent UAE authority and, where required, inform you.
6Complaints
If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.