In accordance with its obligation as a data controller, IDEA DIVISIONS LLC, with its registered office at Sharjah Media City Free Zone, Al Messaned, Sharjah, UAE, Formation Number: 2537195, provides this Personal Data Protection Information based on Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the „EU Regulation“), and Act No. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts (hereinafter referred to as the „Act“), regarding the processing of personal data of the data subject by the controller. The data subject is understood as any natural person whose personal data are being processed.

Website: www.ideadivisions.ae

Business name: IDEA DIVISIONS LLC
Registered office: Sharjah Media City Free Zone, Al Messaned, Sharjah, UAE
Formation Number: 2537195
Email: hello@ideadivisions.com

The controller processes your personal data in accordance with the principle of lawfulness and based on the legal grounds for personal data processing. The provision of personal data is voluntary. However, failure to provide such data may result in the inability to conclude or fulfil a contract by the Controller.

IDEA DIVISIONS LLC is a business entity providing services in the field of information technologies, and it processes personal data based on one of the following legal bases:

• Article 6(1)(a) of the EU Regulation: if the data subject has given consent to the processing of their personal data for one or more specific purposes.

• Article 6(1)(b) of the EU Regulation: if the processing is necessary for the performance of a contract to which the data subject is a party (e.g., a contract for work, employment contract, purchase order, etc.).

• Article 6(1)(c) of the EU Regulation: if the processing is necessary for compliance with a legal obligation to which the controller is subject (e.g., processing within invoicing obligations). This refers to statutory duties of the controller.

• Article 6(1)(f) of the EU Regulation: if the processing is necessary for the purposes of the legitimate interests pursued by the controller, particularly the need to maintain business relationships with clients.

• Article 6(1)(f) in conjunction with Article 9(2)(f) of the EU Regulation: IDEA DIVISIONS LLC considers the demonstration or exercise of its legal claims in court, out-of-court proceedings, or before public authorities as its legitimate interest. This also includes communication or cooperation with public authorities.

When you log in to the website www.ideadivisions.ae, including its subdomains, we store temporary cookies to determine whether your browser accepts cookies. These cookies do not contain any personal data and are deleted when you close your browser.

Upon login, we set several cookies to save your login information and display preferences. Login cookies are valid for two days, and display preferences for one year. If you select the „remember me“ option, your login will remain valid for two weeks. When you log out of your account, the cookies are deleted.

All cookies are stored on your device and are used to enhance your experience while visiting the website.

If you do not want your browser to store cookies, you can disable this feature in your browser settings. You can also configure alerts for new cookies or delete cookies already stored.

For the purpose of analyzing and optimizing the website www.ideadivisions.ae and its subdomains, we use the service Google Analytics based on Article 6(1)(f) of the GDPR. This web analytics service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies which generate pseudonymized user profiles.

Information generated by these cookies about the use of the website may include:

• Browser type/version,

• Operating system used,

• Referrer URL (previously visited website),

• Time of server request.

At IDEA DIVISIONS LLC, the rights of data subjects are of primary importance. Your rights are regulated by the EU Regulation, national law, and other applicable legal regulations. Upon request, the data controller shall provide a response, especially regarding the following rights:

• Right of access to confirm whether or not personal data concerning you are being processed and, if so, access to such personal data and related information (Article 15 GDPR).

• Right to rectification of inaccurate personal data concerning you without undue delay (Article 16 GDPR).

• Right to erasure of personal data concerning you without undue delay (“right to be forgotten”) (Article 17 GDPR).

• Right to data portability, meaning the right to receive the personal data you provided to the controller and transmit those data to another controller (Article 20 GDPR).

• Right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you (Article 21 GDPR).

• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).

• Right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data is in breach of the GDPR (Article 77 GDPR).

The controller does not generally transfer personal data to third countries or international organizations. There are no current plans to transfer personal data to a third country or international organization. If the controller intends to transfer personal data in the future, the data subjects will be duly informed in advance.

We retain personal data as follows:

• If the basis is a pre-contractual or contractual relationship, data are retained for the duration of that relationship.

• If the basis is the fulfillment of a legal obligation of the controller, data are retained until the purpose of processing ceases, but at least for the period required by binding legal regulations (e.g., income tax, health insurance, social insurance, archiving, commercial code, and others).

• If the processing is based on consent, personal data are retained for the duration specified in the consent.

After the expiration of the defined retention periods, the controller may process personal data solely for specific purposes, such as archiving and statistics.

Any person entitled to exercise rights under the EU Regulation or applicable laws may do so in writing, either in paper form or by email to the controller. The request must clearly indicate the identity of the requester (name and surname), permanent address, date of birth, email address, and the right being exercised. The controller will provide all information requested under legal rights.

The controller notifies data subjects that if a request is manifestly unfounded or excessive—particularly if it is repetitive—it may charge a reasonable fee for administrative costs. The request will be processed within one month from receipt. In justified cases, this period may be extended by up to two additional months.