Scope of policy

Qudrat Group adheres to the Personal Data Protection Law, Federal Decree Law No. 45 of 2021 about Protection of Personal Data addressing confidentiality of information and protection of the privacy of individuals in the UAE and outside it.

The Policy applies to all Qudrat Group internal and external stakeholders including staff, clients, suppliers, visitors to Qudrat Group website anywhere in the world from the start of the relationship with Qudrat and after the end of the relationship.

This Policy applies to all data collected, stored and processed by Qudrat Group. Personal data is any information relating to a natural person who is or can be identified, directly or indirectly, by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity. This can include in particular:

• Name
• Physical address
• Email address
• Telephone number
• Passport or ID card
• Date of birth
• Fingerprints

Processing of personal data includes obtaining, recording, organisation, retention, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, deletion or destruction.

Personal data collection and processing

Qudrat Group shall only collect data to perform its duties before staff and partners. In accordance with legislation, Qudrat Group can process personal information, so long as there are grounds to do so and this must be disclosed to the data subject. The following processing conditions shall apply to personal data:

• Counterparty due diligence where procedures are required to be performed in order to evaluate the risks of engaging with a counterparty, performing services for the counterparty and receive services from a counterparty;
• Performance of a contract and fulfilment of obligations under a contract;
• In order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public body or law enforcement agency;
• As part of subscriptions to newsletters and news/update mailings;
• As part of submission of feedback, requests, queries and job applications via Qudrat Group website, email or in hard copy;
• For the purposes of processing incidents reported by internal and external stakeholders;
• Collection of research data through surveys, questionnaires and other forms of data collection for the purposes of developed an anonymised research output;
• Administration tasks such as talent recruitment, staff travel and visa arrangements;
• Personal data shall be processed where it is in Qudrat Group’s legitimate interest in running a lawful business to do so in order to further that business, so long as it doesn’t outweigh interests of the data subjects;
• Explicit consent given by the data subject. In such instances specific permission to process some personal information shall be requested and processed only if consent is given. The consent can be withdrawn by the data subject at any time by notifying the Qudrat Group staff who collected the information in writing.

Examples of the ‘legitimate interests’ referred to above are:

• To offer information and/or services to individuals who visit Qudrat Group's website or offer information about employment opportunities.
• To prevent fraud or criminal activity and to safeguard Qudrat Group's IT systems.
• To customise individuals’ online experience and improve the performance usability and effectiveness of Qudrat Group’s online presence.
• To conduct, and to analyse, Qudrat Group's marketing activities.
• To meet Qudrat Group’s corporate and social responsibility obligations.
• To exercise fundamental rights including the freedom to conduct a business and right to property.

All personal data collected and processed shall be collected and processed with the consent of the data subject on a voluntary basis in written and verbal format.

Any unauthorised collection, processing, storage of personal data is strictly prohibited. Any data collected, processed, stored by Qudrat Group staff that was not authorized as part of his/her duties or does not comply with the above principles of personal data processing shall be deemed unauthorized.

Qudrat Group staff are prohibited from using personal data for commercial and private purposes, disclose it to unauthorised individuals and third parties inside and outside Qudrat Group.
Qudrat Group does not publish personal data in the public domain without the consent of the individual concerned.

In some cases, the personal data that Qudrat Group collects will also include special categories of data, such as diversity related information (including data about racial and ethnic origin, political opinions, religious beliefs and other beliefs of a similar nature, trade union membership and data about sexual life and sexual orientation), or health data and data about alleged or proven criminal offences in each case where permitted by law.