Legal

Privacy Policy

Information about the collection, processing and use of personal data in accordance with the General Data Protection Regulation (GDPR).

1. Introduction

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Data Controller

aqwa Group GmbH, IFZA Business Park, DDP A2, Silicon Oasis, Dubai – United Arab Emirates

Data Protection Officer

You can reach our data protection officer at: dataprotection@aqwa-group.com

2. Data Collection

We collect various types of data when you use our website:

Website Usage Data

IP address, browser type, operating system, access times, pages visited

Contact Form Data

Name, email address, phone number, company, message content

Cookies and Tracking

Session cookies, analytics cookies, preference cookies

3. Purpose of Processing

We process your personal data for the following purposes:

Website Operation

Ensuring smooth connection, user-friendly experience, system security

Communication

Processing contact inquiries, customer support, newsletter distribution

Analytics & Improvement

Website optimization, user behavior analysis, service improvement

Marketing

Personalized offers, advertising measures (with consent)

4. Legal Basis

Processing of personal data is based on the following legal grounds:

Consent (Art. 6 para. 1 lit. a GDPR)

For newsletter subscriptions, marketing cookies, specific processing purposes

Contract Performance (Art. 6 para. 1 lit. b GDPR)

For pre-contractual measures and fulfillment of contractual obligations

Legal Obligation (Art. 6 para. 1 lit. c GDPR)

For tax law, commercial law and other legal retention obligations

Legitimate Interest (Art. 6 para. 1 lit. f GDPR)

For website security, fraud prevention, direct marketing

5. Data Sharing

We only share your data with third parties in the following cases:

Service Providers

IT service providers, hosting providers, analytics services (as processors)

Authorities

Only if required by law (e.g., tax authorities, law enforcement)

Business Transfers

In case of mergers, acquisitions or sale of business assets

6. Data Transfer to Third Countries

Data may be transferred to countries outside the EU/EEA with appropriate safeguards:

EU Adequacy Decisions

Countries with adequate data protection level recognized by EU Commission

Standard Contractual Clauses

EU standard contractual clauses with additional protective measures

7. Data Retention Periods

We store your data only as long as necessary:

Website Logs

7 days for security purposes, then anonymization

Contact Inquiries

3 years from last contact for customer service purposes

Analytics Data

14 months for website optimization, then anonymization

Legal Retention

10 years for tax-relevant documents according to legal requirements

8. Your Rights

You have the following rights regarding your personal data:

Right of Access

Information about processed data and copies of data

Right to Rectification

Correction of inaccurate or incomplete data

Right to Erasure

Deletion of data under certain conditions

Right to Restriction

Temporary restriction of processing

Right to Data Portability

Receipt of data in structured, commonly used format

Right to Object

Objection to processing based on legitimate interest

Right to Complain

Lodge complaint with supervisory authority

9. Cookies & Tracking

We use different types of cookies:

Essential Cookies

Required for website functionality, cannot be disabled

Analytics Cookies

Help us understand how visitors interact with our website

Marketing Cookies

Used to track visitors across websites for advertising

Cookie Management

You can manage cookie preferences in your browser settings

10. Data Security

We implement appropriate technical and organizational measures:

Technical Measures

SSL encryption, firewalls, access controls, regular security updates

Organizational Measures

Employee training, data protection policies, access restrictions

11. Third-Party Services

We use the following third-party services:

Social Media

LinkedIn, XING for recruitment and networking (when you interact with plugins)

Analytics

Google Analytics (with IP anonymization) for website optimization

Hosting

Vercel for website hosting and content delivery

12. Children's Data

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information.

13. Changes to Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last Updated" date.

14. Contact

For questions about data protection, please contact:

Data Protection Officer

dataprotection@aqwa-group.com

Supervisory Authority

Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany

Last updated: January 15, 2026