Data Transfer & International Hosting Clause
International Data Transfers and Hosting
To provide our services, Superchute processes and stores your personal data on secure servers located in Germany.
- Cross-Border Transfer: By using this website, you acknowledge that your personal data will be transferred from the United Arab Emirates (UAE) to Germany and accessed by our team in Canada.
- Legal Basis for Transfer: While the UAE Data Office has not yet issued a formal list of “Adequate Jurisdictions,” we ensure a level of protection for your personal data that is equivalent to the UAE Protection of Personal Data Law (PDPL) through the following safeguards:
Standard Contractual Clauses: We utilize robust data processing agreements with our hosting providers that mirror the protections required by the GDPR and the UAE PDPL.
Technical Security: Your data is encrypted in transit and at rest within our German hosting environment, which adheres to strict EU privacy standards.
- Explicit Consent: By submitting any personal information through this website, you provide your explicit and unambiguous consent to the transfer and storage of your data in Germany and its processing by Superchute in Canada for the purposes outlined in this policy. You have the right to withdraw this consent at any time by contacting us at [email protected].
Your Rights Under the UAE PDPL
As a resident of the United Arab Emirates, you have specific rights regarding how we handle your personal data. We are committed to facilitating these rights without undue delay:
- Right to Access Information: You have the right to request confirmation of whether we are processing your personal data and to receive a copy of that data, along with information on the purposes of processing and any third parties with whom it is shared.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, have that data transferred to another controller.
- Right to Correction (Rectification): If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal ground for processing.
- Right to Restrict Processing: You have the right to request that we limit the processing of your data in specific circumstances, such as if you contest the accuracy of the data or object to the way it is being used.
- Right to Stop Processing (Right to Object): You have the right to object to the processing of your personal data for direct marketing purposes or where the processing is based on our “legitimate interests.”
- Right to Object to Automated Processing: You have the right to object to decisions made about you based solely on automated processing, including profiling, which produce legal effects or significantly affect you.
- Right to Withdraw Consent: Since our processing is based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before the withdrawal.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact our Data Privacy Team at [email protected] / [email protected]. We will respond to your request within the timelines mandated by the UAE Data Office.