Data Protection Policy

1. Introduction
Geoloc Star (hereinafter referred to as “the Company”) is committed to protecting the privacy and confidentiality of personal data collected, processed, and stored in the course of our business activities. This Data Protection Policy outlines our commitment to compliance with data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR).

2. Scope
This policy applies to all personal data collected, processed, and stored by the Company, regardless of the format or medium in which it is held. It applies to all employees, contractors, and third parties who may have access to personal data in the course of their duties.

3. Principles
The Company adheres to the following principles in relation to the processing of personal data:

Lawfulness, fairness, and transparency: Personal data is processed lawfully, fairly, and in a transparent manner.
Purpose limitation: Personal data is collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Data minimization: Personal data collected is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
Accuracy: Personal data is accurate and, where necessary, kept up to date. Reasonable steps are taken to ensure that inaccurate personal data is rectified or deleted without delay.
Storage limitation: Personal data is kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed. Integrity and confidentiality: Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
Accountability: The Company is responsible for and can demonstrate compliance with the principles outlined in this policy.

4. Data Collection and Processing
Personal data is collected and processed only for specified, explicit, and legitimate purposes.
Personal data is collected directly from data subjects whenever possible. Where personal data is obtained from third parties, appropriate measures are taken to ensure that the data was collected lawfully and with the data subject’s consent.
Personal data is processed only with the consent of the data subject or where otherwise permitted by applicable law.
Personal data is not transferred to third parties without the explicit consent of the data subject or where otherwise permitted by applicable law.

5. Data Subject RightsData subjects have the right to request access to and rectification or erasure of their personal data.
Data subjects have the right to restrict or object to the processing of their personal data.
Data subjects have the right to data portability, where applicable.
Data subjects have the right to withdraw their consent to the processing of their personal data at any time.

6. Data Security
The Company implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk of unauthorized or unlawful processing, accidental loss, destruction, or damage of personal data.
Employees, contractors, and third parties with access to personal data are trained on data protection principles and their responsibilities under this policy.

7. Data Breach Notification
In the event of a data breach involving personal data, the Company will notify the relevant supervisory authority and affected data subjects in accordance with applicable law.

8. Compliance and Review
Compliance with this policy is the responsibility of all employees, contractors, and third parties who have access to personal data.
This policy is reviewed regularly and updated as necessary to ensure compliance with applicable data protection laws and regulations.

9. Contact Information

Any questions or concerns about this Data Protection Policy or the Company’s data protection practices should be addressed to info@geolocstar.ae.

10. Enforcement
Violations of this Data Protection Policy may result in disciplinary action, up to and including termination of employment or contract.
This Data Protection Policy is effective as of 03/04/2024 and supersedes any previous policies on the subject matter.