Data Controller

GET Group will be the Controller of the information you provide to us or that we collect from online or other sources. This means we decide the means and purpose for processing your personal data.

You can contact us;

GET Group Ltd

2nd Floor

EFT building – DIFC.

In the event of a complaint or to exercise your rights as a data subject, You may contact our Data Protection Officer on the following details:

Introduction

Data Protection Law hereafter referred to as the DPL. This policy reflects ongoing changes across the current global data protection landscape captured in the European General Data Protection Regulation (GDPR) and the Californian Consumer Privacy Act (CCPA). DPL 2020 will come into force on 1 July 2020.

This policy applies to all jurisdictions where the GET Group operates. It is not limited to GDPR, DPL-DIFC, Data protection Law -Egypt, but to all data privacy laws that apply.

What Is Personal Data?

Personal data means any information relating to an identified or identifiable natural person (‘data subject’).

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Sensitive Personal Data

• Biographical information or current living situation, including dates of birth, Social Security numbers, phone numbers, and email addresses, as well as IP address or user name.
• Looks, appearance, and behavior, including eye color, weight, and character traits.
• Workplace data and information about education, including salary, tax information, and Employee Id/ numbers.
• Private and subjective data, including religion, political opinions, and geo-tracking data.
• Health, sickness, and genetics, including medical history, Blood Group, genetic data, and information about sick leave. GET Group Holdings Process Sensitive Data only where permissible under applicable local law and to the extent necessary to serve the applicable Business Purpose.

How Do We Collect Personal Data?

We also collect data from you in person through the exchange of business cards, from exhibition organizers where you have agreed to share your data with us, search engines, social networking sites such as LinkedIn, publicly available resources and referrals, screening form required for compliance, third party compliance solution providers, seminars and if you visit our office.

We also collect data when you contact us via phone or email or when you visit our website or in the delivery of our contractually agreed services.

Should you choose to complete the website sales form we shall retain this data and use it to contact you as requested.

Purpose Of Processing Personal Data And Legal Basis

The data you provide to us will be processed for the following one or more Business purposes; (Business Purposes).

We have a legitimate interest in activities such as scheduling work, managing company and Employee assets (including the IT systems and infrastructure), risk management, conducting (internal) audits and investigations, finance and accounting, implementing business and IT security controls, provision of central processing facilities for efficiency purposes, management reporting and analysis, managing mergers, acquisitions, and divestitures; Archive and insurance purposes; legal or business consulting; and preventing, preparing for or engaging in dispute resolution.

• We are diligent in acquiring new clients who require our products and services and have a legitimate purpose in doing so.
• To perform the services requested by clients and individuals pursuant to a statement of work or similar (where the processing is necessary for establishing and fulfilling a contract with you).
• For complying with obligations provided by laws, current regulations, and European legislation (e.g. tax regulations) (where processing is based on a legal obligation).
• For legitimate business purposes to advise you through e-mail, phone call, or post, in the framework of our ordinary commercial relationship, about other products or services similar to the products or services we have provided to you and that we think will be of interest to you.
• For marketing purposes. We may use information you provide to personalize (i) our communications to you; (ii) our website; and (iii) products or services for you, in accordance with our legitimate interests. Where consent has been given you are allowed to withdraw your consent or opt-out of receiving our marketing communications at any time. You can manage your receipt of marketing and non-transactional communications by clicking on the link located at the bottom of GET Group Holdings marketing emails.
• To monitor the use of our websites and online services. We may use your information to help us check, improve and protect our products, content, services, and websites, both online and offline, in accordance with our legitimate interests;
• To respond to any comments or complaints we may receive from you, or to investigate any complaints received from you or others, about our website or our products or services, in accordance with our legitimate interest.
• For improving, GET Group Holdings communications with you. Emails sent to you by GET Group Holdings may include standard tracking, including open and click activities. GET Group Holdings may collect information about your activity as you interact with our email messages and related content in accordance with our legitimate interest.
• For security purposes. For example, we may use your data to protect GET Group Holdings and its third parties against security breaches and violations of GET Group Holdings applicable agreements (where the processing is necessary for our legitimate business interests or a legal obligation).
• We may monitor any client account to prevent, investigate, and/or report fraud, terrorism, misrepresentation, security incidents, or GET Holdings me, in accordance with applicable law and our legitimate interests.
• Assessment and acceptance of a client, conclusion, and execution of agreements with a Client. This purpose includes the processing of personal data that is necessary for the assessment and acceptance of Clients, including confirming and verifying the identity and credit status and creditworthiness of relevant Clients (this may involve the use of a credit reference agency or other Third Party), conducting due diligence, and screening against publicly available government and/or law enforcement agency sanctions lists and other third-party data sources, the use of and participation in GET Group Holdings incident registers and sector warning systems and/or third-party verification services.
• The processing of personal data in connection with the execution of agreements.

Whenever we process your data for our legitimate interests, we make sure to consider and balance any potential impact on you and your rights under data protection laws. Our legitimate business interests do not automatically override your interests – we will not use your data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). You have the right to object to this processing if you wish.

Categories Of Personal Data We Collect

During the pre-sales and sales process, we will ask you to give us where necessary your generic details. (Name, Surname, date of birth, etc ), your contact details ( address, email address, phone number), proof of identification ( passport, National ID, driver’s license), financial details ( bank account statement (s)).

We track your IP address when you visit our website and complete our Sales request form.

Information Collected From Others

We may supplement the information that we collect from you as described above, with information that we receive from third parties.

This may include:

• Credit bureau report
• Compliance background screening reports
• Data we receive when someone refers to you for our products and services.
• Data from other organizations, who have obtained your permission to share information about you with us.

Storage Of Personal Data

GET Group Holdings will retain personal data for a reasonable period, considering legitimate business needs to capture and retain such information. Information will also be retained for a period necessary to comply with state, local, federal regulations, or country-specific regulations and requirements, and in accordance with GET Group Holdings Records Retention Policy.

Third-Party Organization That Provide Applications / Functionality, Data Processing

Get Group also uses Third-party applications to

Your Rights

You may contact us to determine whether we hold personal data about you and to access personal data about you, at any time for purposes of reviewing or correcting your personal data, you will not have to pay a fee for these requests.

GET Group Holdings to ensure to fulfill this request within one month if extended not more than 2 months.

You have the following rights concerning your data processed by GET Group Holdings:

• Access: You have the right to access personal information without charge that GET Group Holdings holds about you.
• Rectification: You have the right to ask us to rectify information GET Group Holdings holds about you if it is inaccurate or not complete.
• Erasure: You can request that GET Group Holdings erase your personal data. We will keep basic data to identify you and retain it solely for preventing further unwanted processing.
• Restrict Processing: You have the right to ask GET Group Holdings to restrict how we process your data. This means we are permitted to store the data but not further process it. We keep just enough data to make sure we respect your request in the future.
• Object to processing: Where the processing is based on legitimate interests, you have the right to object to GET Group Holdings processing your data. GET Group Holdings will discontinue processing your data, unless we can demonstrate compelling legitimate grounds for the processing. We will keep basic data to identify you and retain it solely for preventing further unwanted processing.
• Portability: Where the processing is based on consent or performance of a contract, you have the right to data portability. GET Group Holdings must allow you to obtain and reuse your personal data for your own purposes safely and securely without this affecting the usability of your data. This right only applies to personal data that you have provided to GET Group Holdings as the Data Controller.
• Withdraw: Where the processing is based on consents and it is related to the Personal data of the data subject, the Data Subject has the right to withdraw the consent at any time by notifying the controller. The data controller must cease processing the personal data as soon as reasonably practicable and ensure that the processor does the same.

Cookies

Our website https://www.getgroup.com/ uses small text files called “cookies” that contain information about the user and are stored on your computer. Cookies are used for technical purposes, to facilitate the use of the web page and to improve the overall Site experience.

One type of cookie saves a file permanently on your computer. It may then be used to personalize a web page according to the user’s choices and interests. The other type of cookie is called a “session cookie”. While you are visiting a web page on our site, cookies are sent between your computer and the server to access information about the user. Session cookies usually disappear when you turn off your web browser. If you do not wish to accept cookies, your web browser can be set so that you automatically deny the storage of cookies or are informed every time a website requests to be allowed to store a cookie. Previously stored cookies can also be deleted through the web browser. Cookies generally do not permit us to personally identify you.

Google Analytics is a web analysis service provided by Google Inc; we are not responsible for the privacy practices of any non-operated websites by us; Furthermore, you can prevent Google's collection and use of data by using https://tools.google.com/dlpage/gaoptout?hl=en-GB.

For more information about Google Analytics cookies, please see Google's help pages and website privacy policy.

Third-Party Websites Or Other Services

Occasionally our site may provide access to other websites by linking to them. We are not responsible for the privacy practices of any non-GET Group Holdings operated websites, mobile apps, or other digital services, including those that may be linked through GET Group Holdings websites or services, and we encourage you to review the privacy policies or policies published thereon.

Automated Decision Making

Automated decisions are defined as decisions about individuals that are based solely on the automated processing of data and that produce legal effects that significantly affect the individuals involved.

GET Group Holdings does not make automated decisions using personal data. If automated decisions are to be made, affected persons will be given an opportunity to express their views on the automated decision in question and object to it.

Security / Transmissions Over The Internet

We at GET Group Holdings take the security of all the data we hold very seriously. Any information sent to us is protected using robust security methods. We adhere to internationally recognized security standards and our information security management system is independently certified by MSECB as complying with the requirements of ISO/IEC 27001:2013.

We have a framework of policies, procedures, and training in place covering data protection and data security and review the measures we have in place regularly to keep the data we hold secure.

Although we safeguard your personal data, once received we cannot guarantee the safety of any personal data you transmit to us using online methods.

For Data Subjects Located In The DIFC

If we are not able to satisfactorily resolve your questions, concerns, or complaints, or if you believe that the processing of your personal data infringes on your rights under applicable data protection laws, you have the right, without prejudice to any other administrative or judicial remedies, to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement.

Contact information for the supervisory authorities may be found here:

Contact