Privacy Policy

1. Controller

Data protection officer: [to be confirmed: name and contact details, or a statement that no DPO is required]

2. Visiting this website

This website is delivered as static pages. Our hosting provider processes technical connection data (IP address, time of request, requested page, browser and operating system) in server log files in order to deliver the site and keep it secure. The legal basis is our legitimate interest in the secure and reliable operation of the site (Art. 6(1)(f) GDPR).

Hosting provider: [to be confirmed: Railway operating entity, server location, and whether a data processing agreement is in place]

Editorial content is managed in a content management system (Sanity). Content is fetched when the site is built, not when you visit it, so visiting these pages does not transmit your data to that provider. [to be confirmed: Sanity operating entity and data processing agreement]

We do not set tracking cookies and do not use analytics or advertising services on this website. [to be confirmed: still accurate at go-live — fonts, maps, embedded videos or analytics added later would change this]

3. Demo requests

When you submit the form on our demo page, we process the data you enter: first and last name, company, work email address, phone number, the subscription packs you selected, your optional message, and both consent confirmations together with the time of submission and the version of the consent wording.

We use this data to contact you about your request, to arrange and run the demo, and to document your consent. The legal basis is your consent (Art. 6(1)(a) GDPR) and, for steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR.

The form transmits your entries directly to our customer relationship management system, Zoho CRM, operated by [to be confirmed: Zoho operating entity and data centre region applicable to our account]. We have concluded a data processing agreement with this provider. [to be confirmed: agreement in place; if data is processed outside the EU, name the transfer safeguard]

Providing this data is voluntary, but without it we cannot arrange a demo.

4. Retention

We keep the data from your request for as long as we need it to handle your enquiry and the business relationship that may follow from it, and thereafter for [to be confirmed: retention period, e.g. 24 months after the last contact], unless statutory retention obligations under commercial or tax law require a longer period. Documentation of your consent is kept for as long as it may be needed as evidence.

5. Withdrawing your consent

You can withdraw your consent at any time with effect for the future, informally by email to info@qamaas.com. Withdrawal does not affect the lawfulness of processing carried out before it. After withdrawal we will no longer contact you by phone about your request.

6. Your rights

Under the GDPR you have the right to obtain information about the personal data we hold about you (Art. 15), to have inaccurate data corrected (Art. 16), to have your data erased (Art. 17), to restrict processing (Art. 18), to receive your data in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). To exercise these rights, please contact us using the details in section 1.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is [to be confirmed: competent supervisory authority and its address].

7. Changes to this policy

We update this privacy policy when changes to our services or to the law make it necessary. The current version always applies, and the date above shows when it was last revised.