LYA embraces the best in emerging tech. Our endeavor is to bring the latest, most advanced tech solutions to make impactful changes across retail, healthcare, eCommerce, fintech, logistics and customer care. We are starting our jo...Read More
For that reason, LYA has implemented a set of Binding Corporate Rules (BCRs), introducing a global standard of data protection requirements to be complied with by all LYA entities. The BCRs have been approved by global data protection agencies and establish the foundation for LYA' processing of personal data.
In order to ensure that your personal data is processed correctly and with a suitable level of data protection, LYA has adopted the following processing principles:
LYA will always inform you of the collection and processing of your personal data unless we have a legitimate reason not to do so.
We will collect and process your personal data in a number of ways when you engage with us via the various existing channels.
Some of the personal data is necessary to process in order for us to provide you with the services you have requested and some personal data you can choose to provide voluntarily. We will always let you know which personal data is necessary (e.g. via the use of an asterisk (*)) and the consequences of not providing such data to us, for instance that we will not be able to (fully) satisfy your request.
The personal data that we collect and process can generally be divided into the following categories:
As a general rule we will not process any special categories of personal data (special personal data) about you unless you have provided your explicit consent thereto or we are required to do in order to comply with applicable regulation.
We only process your personal in order to pursue a legitimate purpose and generally we will only process your personal data if:
We process your personal data for the following purposes:
LYA is an UAE based Technology Company. As a general rule, the data controller with respect to the personal data processed about you will be the local LYA entity in which you are a customer, with whom you engage in contact or enter into an agreement with. However, in order to pursue the purposes listed above in section 3, we may share your personal data with other LYA group entities either to carry out a task as instructed by the data controller (recipient acting as data processor) or to pursue a legitimate purpose of its own (recipient acting as individual data controller) provided that such making available or disclosure of your personal data is not restricted by law.
With respect to LYA entities established in countries outside the EEA not considered a safe third country (i.e. not ensuring an adequate level of data protection), the LYA BCRs serve as the legitimate basis for the transfer of your personal data.
Our disclosure and transfer of your personal data to recipients (natural or legal persons, public authorities, agencies or another body, to which the personal data is disclosed) is kept to a minimum and is subject to the existence of an adequate level of data protection.
We may disclose or make personal data available to recipients under the following circumstances:
If the recipient of the personal data is located in a country outside the United Arab Emirates (UAE) not ensuring an adequate level of data protection, we will only transfer your personal data to such recipient following execution of a written transfer agreement based on the EU Commissions Standard Contractual Clauses.
We may use automated decision making based on your personal data. Automated decision making will only take place if the decision is:
In case we use automated decision making, we will ensure that suitable security measures are implemented.
Special personal data will in no event be subject to automated decision making unless you have provided your explicit consent or the processing is necessary for reasons of substantial public interest, on the basis of applicable law.
As stated above some of our processing activities will be based on your consent. In such case, you will have the right to withdraw your consent at any time.
If you withdraw your consent, we will cease to process your personal data, unless and to the extent the continued processing or storage is permitted or required according to the applicable personal data legislation or other applicable laws and regulations.
Please note that the withdrawal of your consent will not affect the lawfulness of processing conducted prior to the withdrawal. Further, as a consequence of your withdrawal of your consent, we may not be able to satisfy your requests or provide you with our services.
In order to safeguard your personal data, LYA has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risks represented by the processing and the nature of the personal data to be protected, having regard to the state of art and the costs of their implementation.
Following the evaluation of the risk, LYA has taken measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, in particular where the processing involves the transmission of personal data over a network, and against all other unlawful forms of processing.
In order to ensure that we always comply with applicable data protection legislation and the requirements laid down in the LYA BCRs and to ensure that our employees are familiar with such regulation, we have established an internal privacy training and education program that our employees with permanent or regular access to personal data undertake.
LYA carries out regular audits of the ongoing processing of personal data to ensure that all LYA entities abide to the LYA BCRs and process personal data accordingly.
The audits cover all aspects of the BCRs including all IT systems, databases, security policies/standards, training programmes, privacy policies and manuals in place within LYA in respect of the BCRs.
You have the right to access to the data processed about you, subject to certain statutory exceptions. Furthermore, you can object to the collection and further processing of your personal data. In addition, you have the right to correct your personal data, if necessary. You may also choose to request us to restrict the processing.
We will delete or correct any information, which is inaccurate or out of date by reason of the time elapsed since it was collected or by reason of any other information in our possession.
If you provide us with a written request, we will also delete your personal data without undue delay, unless we have a legal basis to continue the processing, e.g. if the processing is necessary to establish, exercise or defeat a legal claim or necessary to the performance of a contract with you.
In order to make use of any of the rights mentioned above, please contact us via the points of contacts listed in section 16.
With regard to such requests, kindly provide us with relevant information to take care of your request, including your full name and email address so that we can identify you. We will respond to your request as soon as possible and within one month.
If you disagree with our processing of your personal data please be informed that you can lodge a complaint with your local data protection agency.
If you have any complaints about the processing of personal data carried out by LYA, please feel free to contact us at any time.
You may also submit a complaint directly with your local LYA entity or with the parent company
LYA D Technologies LLC
1101, Building # 1, Bay Square
Business Bay, Dubai, UAE
We will review and assess your complaint and if necessary we may contact you in order to obtain further information.
We strive at processing any complaint or objection within one month. If it is not possible to make a decision within one month, we will inform you grounds for the delay and of the time (not exceeding 6 months from receipt) at which the decision can be expected to be provided.
Our websites may contain links to other websites or to integrated sites. We are not responsible for the contents of the websites of other companies (third-party websites) or for the practices of such companies regarding the collection of personal data. When you visit third-party websites, you should read the owners' policies on the protection of personal data and other relevant policies.
LYA D Technologies LLC
1101, Building # 1, Bay Square
Business Bay, Dubai, UAE
email : email@example.com