Privacy and Cookie Policy
(UAE – Gulf Cement Company P.S.C.)

Gulf Cement Company P.S.C. (“Gulf Cement” or “We” or “Us” or “Our”) is committed to respecting and protecting your personal data.

This Privacy and Cookie Policy (“Policy”) explains how We collect, process, store, disclose and protect Your Personal Data when You:

  1. Visit Our website;
  2. Submit enquiries;
  3. Subscribe to communications;
  4. Interact with Us electronically; or
  5. Otherwise provide Personal Data through Our digital platforms.

This Policy is issued in compliance with UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations (“PDPL”).

By accessing or using our website, you (“You” or “Your”) acknowledge that You have read and understood this Policy.

  1. Data Controller
    1. For the purposes of the PDPL, the data controller is:

Gulf Cement Company P.S.C

Ras Al Khaimah, Khor KhuirP.O. Box: 5295

United Arab Emirates

    1. Gulf Cement determines the purposes and means of processing personal data collected via this website.

 

  1. Categories of personal data we collect
    1. For the purposes of this Policy “Personal Data” means any information, which allows Us to identify You directly or indirectly (together with information from other sources), that You have provided to Us or that We may have collected in connection with the access to Our website. We may collect and process the following categories of Personal Data:
  1. Information You provide directly: name, gender, date of birth, identity document number, photographs, nationality, telephone number, fax number, email address, Emirates ID, passport number, visa number and, more in general, any data relating to an identified natural person including sensitive personal data and biometric data as those terms are defined in the PDPL.
  2. Information collected automatically: Internet protocol (IP) address which We collect when You visit Our website and Your device details, the date and time of Your visit of Our websites, the type and version of browser used, the operating system and platform and the URL of any websites which You used to access Our websites. This information are collected through cookies and similar technologies.
    1. We do not intentionally collect sensitive Personal Data through this website unless legally required or voluntarily provided.
  1. Purpose Processing
    1. Personal data is processed for legitimate business purposes, including but not limited to:
  1. responding to enquiries submitted through the website;
  2. operating, administering and improving the website;
  3. managing investor communications;
  4. providing corporate information and updates;
  5. ensuring website security;
  6. analyse website usage, conduct analytics and performance monitoring;
  7. complying with legal and regulatory obligations;
  8. preventing fraud and misuse.
    1. Where applicable, processing may include internal administrative sharing within the corporate group.      

 

  1. Legal bases for processing
    1. We process Personal Data under one or more of the following legal bases under the PDPL:
  1. Your explicit consent;
  2. performance of a contract or pre-contractual steps;
  3. compliance with legal obligations;
  4. protections of public interest;
  5. legitimate interest of Our company (provided that such interest does not override Your rights).
    1. Where consent is required, You may withdraw it at any time.

 

  1. Disclosure and sharing of Personal Data
    1. You acknowledge and agree that We may share Your Personal Data and related technical information with the following categories of third parties, where necessary and proportionate for legitimate business purposes:
  1. Group Companies. Any member of Our corporate group, including Our parent company, subsidiaries, and affiliated entities, for internal administrative purposes, compliance, governance, reporting, and operational support.
  2. Professional advisers and consultants. Our professional advisers and service providers, including but not limited to external legal counsel, auditors, accountants, tax advisers, compliance consultants, insurers, IT consultants, and other professional service firms, to the extent necessary for the provision of advisory, compliance, risk management, litigation, audit, or insurance services.
  3. Recruitment and HR service providers. Third-party recruitment agencies, executive search firms, background verification providers, assessment platforms, payroll providers, and other human resources service providers, where Your Personal Data is processed in connection with employment opportunities, candidate evaluation, onboarding, workforce administration, or talent management.
  4. Corporate transaction advisers. Advisers and counterparties involved in potential or actual mergers, acquisitions, investments, restructuring, financing transactions, or other corporate reorganizations, subject to appropriate confidentiality obligations.
    1. We may also disclose Your Personal Data to third parties in the following circumstances:
  1. Legal and regulatory compliance. Where disclosure is required to comply with applicable laws, regulations, court orders, regulatory authorities, or lawful governmental requests.
  2. Enforcement and protection of rights. Where disclosure is necessary to enforce or apply contractual terms, to establish, exercise, or defend legal claims, or to protect our rights, property, security, or those of our employees, clients, or other stakeholders.
  3. Business transfers. In the event of a proposed or completed sale, merger, acquisition, or transfer of all or part of Our business or assets, in which case Personal Data may form part of the transferred assets, subject to appropriate safeguards.
  1. Cookies and tracking technologies
    1. A cookie is a small text file stored on Your computer or mobile device that enables functionality and analytics. Cookies do not typically store direct identifiers such as Your name or email address.

 

    1. Types of cookies we use:
  2. Strictly Necessary Cookies. These cookies are essential for the website functionality and cannot be disabled.
  3. Analytics Cookies. These cookies are used to understand how visitors interact with the website and improve performance. They are activated only upon consent.
  4. Marketing Cookies. Used for advertising and campaign measurement and are only activated after explicit consent.
    1. You can manage or withdraw Your cookie preferences at any time through the cookie settings available on the website. You may:
  1. Adjust preferences;
  2. Withdraw consent at any time;
  3. Configure browser setting to block or delete cookies;
  4. Disabling cookies may affect website functionality.

 

 

  1. International data transfers
    1. Personal data may be transferred outside the United Arab Emirates, including within the European Union, provided that:
  1. The receiving jurisdiction provides adequate data protection safeguards; or
  2. Appropriate contractual safeguards are implemented; or
  3. The transfer is permitted under the PDPL exceptions.
    1. We take reasonable steps to ensure adequate protection of transferred data and You may object to such transfer at any time.

 

  1. Data Retention
    1. Personal Data is retained only for as long as necessary for:
  1. the purposes for which it was collected;
  2. compliance with legal obligations;
  3. resolution of disputes;
  4. enforcement of agreements.
    1. Retention periods vary depending on Persona Data category and legal requirements.

 

  1. Your Rights
    1. Under the PDPL, you have the right to:
  1. access Your Personal Data;
  2. request correction of inaccurate data;
  3. request deletion;
  4. withdraw consent at any time;
  5. object to certain processing activities;
  6. lodge a complaint with the UAE Data Office.
    1. Requests may be submitted using the contact details below.

 

  1. Data security
    1. We implement appropriate technical and organizational security measures, including access control mechanism, encryption where appropriate, secure hosting environments, confidentiality obligations for employees and processors, monitoring against unauthorized access.

 

    1. While we take reasonable steps to protect Personal Data, no internet transmission is entirely secure.

 

  1. Children’s privacy
    1. We do not knowingly collect personal data from minors without parental or guardian consent.

 

  1. Third party websites
    1. Our website may contain links to third party websites. We are not responsible for the privacy practices or consent of external websites. Users should review third-party privacy policies separately.

 

  1. Updates to this policy
    1. This Policy may be amended from time to time to reflect changes in legal requirements, operational updates or website functionality changes.

 

  1. Contact Information
    1. For privacy related enquiries or to exercise your rights, please contact:

Gulf Cement Company P.S.C

Ras Al Khaimah, Khor Khuir

P.O. Box: 5295

United Arab Emirates

Email: moises.moya@gulfcement.ae