1. Who we are
The controller of your personal data is Tentaris Technologies L.L.C-FZ (“Tentaris”, “we”), a PC&C Group company, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates, Meydan Free Zone licence 2654648.01.
For any question about this notice or your data, write to privacy@tentaris.tech.
We apply the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”) and, when we handle data of people in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (“GDPR”) and its local equivalents.
When we deliver services to a client (for example service desk, field services or device data wiping), we act as a processor on that client’s behalf and follow its instructions under our contract. That processing is covered by the client’s own privacy notice, not by this one.
2. What we collect and why
Website contact form. Name, work email, company, phone number (optional) and your message, together with the page, language, referring website and campaign tag from which you wrote. The form goes to our CRM and to the team’s mailbox so that we can answer you and follow up. Legal basis: steps taken at your request before a contract, and our legitimate interest in answering business enquiries.
B2B prospecting. Business contact data such as name, job title, company, business email address, business phone number, professional profile URL and company location. We obtain it from public and professional sources (company websites, professional networks, trade events) and from B2B data providers such as Apollo.io and A-Leads. We use it to contact professionals about IT services relevant to their role. Legal basis: our legitimate interest in developing our business, balanced against your interests: we only contact you in your professional capacity, about our services, and you can object at any time. Every prospecting email contains an opt-out; once you object we stop and keep only what is needed to make sure we do not contact you again. Where local law requires prior consent for electronic marketing, we ask for it.
Clients, partners and suppliers. Names, roles and contact details of the people we work with, contract and order information, invoicing and payment details, and the identity data needed for site access by our engineers. Legal basis: performance of the contract, our legal obligations (accounting, tax) and our legitimate interest in managing the business relationship.
Documents shared by link. When we send you a document through a tracked link from our Company Hub (share.tentaris.tech), we record when it is opened: a random reader identifier, your browser type, the date and time of each opening, the pages viewed and the time spent on them. Your name and email are recorded only if you type them in when the link asks for them. We do not store your IP address. This tells us whether the document reached you and when to follow up. Legal basis: legitimate interest.
Meetings. When used, an AI meeting assistant (Read AI) produces a summary and action items of online meetings; transcripts are not kept. Participants are informed at the start and can ask us to switch it off.
Recruitment. Your CV, contact details, experience, qualifications and interview notes. Legal basis: steps taken at your request before an employment contract, and our legitimate interest in recruiting. With your consent we may keep your application for future openings.
3. Website analytics and cookies
This website sets no cookies and shows no cookie banner because it does not need one.
We measure visits with Cloudflare Web Analytics, which is cookieless: it does not place anything on your device, does not fingerprint you and gives us only aggregated figures such as page views, countries and referring sites.
If you choose a language with the language selector, your browser remembers that choice in its local storage (key “tentaris-lang”). It stays on your device, is never sent to us and only serves to show the site in your language.
Fonts and videos are hosted on our own server: no call is made to Google Fonts, YouTube or similar services.
4. Who receives your data
We do not sell personal data. We share it only with service providers that process it on our behalf under contract, and with others where the law requires it:
- Microsoft 365 (provided through a reseller, GoDaddy): email, calendars, documents and Teams, stored in Microsoft data centres in the United Arab Emirates.
- Hostinger: hosting of this website and of our Company Hub, including the CRM, on servers in France (EU).
- Cloudflare: cookieless website analytics.
- Apollo.io and A-Leads: B2B contact data and prospecting tools.
- Anthropic: AI processing inside our Company Hub (for example drafting and summarising), through a business API whose data is not used to train models.
- Read AI: meeting notes.
- Wio Bank: payments and banking.
- PC&C Group companies: for shared clients, group reporting and support.
- Professional advisers (auditors, lawyers), and courts or authorities when we are legally required to disclose data.
5. International transfers
We are based in the United Arab Emirates and several of our providers process data in other countries, including the European Union and the United States. Where the GDPR applies, data leaves the European Economic Area only to countries recognised as adequate (including, where relevant, providers certified under the EU-US Data Privacy Framework) or under the European Commission’s Standard Contractual Clauses. Under the PDPL, we transfer data abroad only to countries with an adequate level of protection or with appropriate contractual safeguards. You can ask us for a copy of the relevant safeguards at privacy@tentaris.tech.
6. How long we keep data
- Prospects: 24 months after our last interaction, unless you object earlier; after an objection we keep only a suppression entry so that we never contact you again.
- Contact form enquiries: 24 months after the last exchange, unless they lead to a contract.
- Clients and suppliers: for the duration of the contract, then as long as the law requires, for example at least 5 years for accounting records under UAE law, or longer when a claim is pending.
- Job applicants: 12 months after the recruitment ends, or longer if you agree.
- Tracked document links: as long as the related prospect or client record.
7. Your rights
Subject to the conditions of the applicable law, you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive the data you gave us in a portable format;
- object at any time to processing based on our legitimate interest, and always to direct marketing;
- withdraw your consent at any time, where we rely on consent, without affecting earlier processing.
To exercise a right, email privacy@tentaris.tech. We answer within one month (30 days under the PDPL) and may ask you to confirm your identity. You may also complain to a supervisory authority: in the EU, the data protection authority of your country of residence or work; in the UAE, the UAE Data Office. We would appreciate the chance to resolve your concern first.
8. Security
We protect personal data with measures set out in our Information Security Policy: access on a need-to-know basis, multi-factor authentication on our business systems and mandatory two-step sign-in for Company Hub administrators, encryption in transit, encrypted backups, confidentiality commitments for all staff and contractors, and a tested incident response procedure. If a breach is likely to put your rights at risk, we will inform you and the competent authority as the law requires.
9. Automated decisions
We do not take decisions about you based solely on automated processing that have legal or similarly significant effects.
10. Changes to this notice
We may update this notice when our activities or the law change. The date at the top shows the latest version; significant changes will be highlighted on this page.