Draft document — to be completed with the confirmed company details and reviewed by a legal advisor before publication.
1. Data controller
The data controller is [Company legal name], [registered address], [registration number]. Contact: [privacy email].
2. Data we collect
When you submit a quotation, demonstration, catalogue, distributor or contact request we collect the data you enter: name, company, country, email, phone, business sector, machines of interest, quantity, purchase type and message.
We also record the language and the page from which the request was sent.
3. Purposes and legal bases
To answer your request and prepare commercial offers (pre-contractual measures).
To send B2B updates, only if you have given your consent, which you can withdraw at any time.
To comply with legal obligations applicable to our business.
4. Retention
Data is kept for the time needed to manage the commercial relationship and as required by law. [Retention periods to be defined].
5. Recipients and transfers
Data is processed by authorised LAURA MEDTECH staff and by technical providers acting on our behalf. Because we operate between the United Arab Emirates and the European Union, transfers outside the EU may occur with appropriate safeguards. [List of processors and safeguards to be completed]
6. Your rights
Depending on applicable law (including the EU GDPR and the UAE Personal Data Protection Law), you may request access, rectification, erasure, restriction, portability and object to processing, and lodge a complaint with the competent supervisory authority. Contact: [privacy email].