Scope and roles
This policy describes the privacy practices of Transaction Advisory Services of Al Asmakh Real Estate (AREDC) for data relating to client directors, officers, employees and customers. AREDC acts as Processor and the client as Controller.
Processing
AREDC processes personal data only on the client's instructions or where required by law. Aggregated, non-identifiable data may be used for analysis and service improvement.
Sub-processors
AREDC may appoint third parties to provide part of the services, with client authorisation. Clients are notified of changes and have five days to object.
Security
AREDC implements appropriate technical and organisational measures to ensure a level of security consistent with data protection law.
Client rights and audits
We cooperate with requests regarding data subject rights, impact assessments and compliance audits, limited to one audit per 12 months unless following a breach.
Breaches
AREDC notifies clients without undue delay on discovering unauthorised access to, or loss of, personal data.
Liability
Clients warrant that their processing complies with applicable law. AREDC is liable only for breach of its processor obligations or for acting contrary to lawful instructions.