01Who we are

OBSOLIX FZ-LLC (“Obsolix”, “we”, “us”) is the controller of the personal data described in this notice.

Address: Dubai Media City, Building 5, Dubai, United Arab Emirates · Email: info@obsolix.com

02Personal data we collect

Identity and contact data: name, email address, phone number, company name.
Request data: the type of request (demo, purchase, support) and the content of your message.
Technical data: IP address, browser and device information, and access times recorded in our server logs.
Customer and support data: correspondence relating to quotes, contracts, installation and support.
Preferences: your theme (light / dark) and cookie notice choice, stored only in your browser.

We do not ask for special categories of personal data. Please do not include such data in your messages.

03Purposes and legal bases

Purpose	Legal basis
Responding to demo, purchase and support requests	Steps prior to entering into a contract at your request (GDPR Art. 6(1)(b)) and our legitimate interest in responding to business enquiries (Art. 6(1)(f))
Providing installation, support and maintenance to customers	Performance of a contract (Art. 6(1)(b))
Securing our website and systems, detecting abuse and attacks	Legitimate interests (Art. 6(1)(f))
Complying with legal obligations and requests from competent authorities	Legal obligation (Art. 6(1)(c))
Establishing, exercising or defending legal claims	Legitimate interests (Art. 6(1)(f))
Newsletters and event invitations	Only with your consent (Art. 6(1)(a)), which you can withdraw at any time

Where the UAE PDPL applies, we process personal data on your consent or on the corresponding grounds provided by the PDPL, such as the performance of a contract or compliance with a legal obligation.

04Who we share data with

We share personal data only as needed for the purposes above, with: service providers acting on our behalf (website hosting, business email, maps and file-distribution infrastructure), authorised partners where your request is handled in your region, professional advisers, and public authorities where required by law. We do not sell personal data.

05International transfers

Our website, email and file-distribution infrastructure may be hosted outside your country, including outside the European Economic Area and the UAE. Where personal data is transferred to a country without an adequate level of protection, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or on the conditions for cross-border transfer permitted under the PDPL. You can request more information about these safeguards by contacting us.

06Data processed by the Obsolix product

Obsolix runs on our customers’ own servers. DNS queries, logs, user identities and analysis results stay within the customer’s infrastructure and are not sent to us; the customer organisation is the controller of that data. If we need access to such data while providing support, we act only on the customer’s documented instructions as a processor.

07How long we keep data

We keep personal data only for as long as necessary for the purposes described, and for any period required by applicable law (for example, commercial record-keeping and limitation periods). After that, data is deleted or anonymised.

08Your rights

Depending on the law that applies to you, you may have the right to:

access the personal data we hold about you and receive information about its processing,
have inaccurate data corrected,
have your data erased,
restrict or object to processing, including processing based on legitimate interests,
receive your data in a portable format,
withdraw consent at any time, without affecting processing carried out before the withdrawal,
not be subject to a decision based solely on automated processing that significantly affects you,
lodge a complaint with a data protection supervisory authority — for example the authority in your EU member state of residence, or the UAE Data Office.

To exercise your rights, email info@obsolix.com. We may need to verify your identity and will respond within one month, which may be extended where permitted by law.

09Security

We apply technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access control, logging and regular updates.

10Children

Our services are intended for organisations. We do not knowingly collect personal data from children.

11Changes to this notice

We may update this notice from time to time. The current version is always published on this page with its last updated date.

Privacy Notice