Privacy Policy

IDELLA SOLAR ENERGY SYSTEMS RENTAL L.L.C S.O.C is the data controller for the personal data described in this notice. We are a company established in Dubai, United Arab Emirates, under trade licence no. 1560072, with our office at Office 905-22, 9th Floor, Iris Bay Tower, 145 Al Mustaqbal Street, Business Bay, Dubai, United Arab Emirates.

For anything to do with your personal data — a request, a question or a complaint — email info@idella.ae with “Data protection” in the subject line, or write to us at the address above.

We handle personal data in accordance with the UAE Personal Data Protection Law — Federal Decree-Law No. 45 of 2021 — which has been in force since 2 January 2022.

At the date of this notice the Executive Regulations to that law have not yet been issued. Where they set requirements that go beyond what is described here — for example fixed deadlines for answering requests, or a formal complaints procedure — we will follow them and update this notice.

We are established in the United Arab Emirates and this website is operated from Dubai, so it is UAE law that governs how we handle your personal data. Where we send data abroad — and we do, as the section on transfers explains — that does not change which law applies to us.

Information you give us. When you send a request through this website, or contact us by email or phone, we process your name and email address, your phone number and company name where you give them, the product you ask about, and the content of your message.

Technical information collected automatically. When you visit the site, our web server records standard technical data: your IP address, browser type and version, operating system, the pages you request, and the date and time of each request. This sits in server logs. Our request form also keeps a short-lived, pseudonymised record of the connections that have used it, so that it can limit repeated automated submissions.

Anti-spam check. Our request form is protected by Cloudflare Turnstile, which analyses browser and device signals to tell a person from an automated script. Cloudflare, Inc. processes your IP address and those signals for that purpose when the form loads.

We do not ask for sensitive personal data — such as data revealing health, race, ethnic origin, religious or political beliefs — and you should not send it to us through this website. This site is aimed at businesses and property owners, and we do not knowingly collect data about children.

We use your personal data only where the UAE Personal Data Protection Law allows it. The bases we rely on are:

• Steps taken at your request before entering into a contract, and performance of a contract — answering your request, preparing a quotation, and supplying and delivering equipment you go on to order.
• Our legitimate interests — keeping the website secure and available (server logs, the anti-spam check and limits on automated form submissions); keeping records of requests and quotations; and responding to a business approach made to us. We have considered whether these interests are outweighed by your rights, taking account of how little data we collect, the business nature of most requests, and the security measures we apply.
• Compliance with a legal obligation — where UAE law requires us to keep records, in particular tax records.

We do not sell your personal data. We do not use it for automated decision-making or profiling that produces legal effects for you or similarly significant effects.

Marketing. We do not use the details you send us to send you marketing unless you ask us to.

Your data is seen by our own staff who need it in order to respond to you. We do not sell, rent or trade personal data.

We use a small number of service providers who process data on our instructions:

• Our hosting infrastructure — servers in Germany, which host this website and carry the requests you send us.
• Cloudflare, Inc. — provides the Turnstile anti-spam check on our request form, and therefore processes your IP address and connection data when that form loads. See Cloudflare’s privacy policy.

If you buy equipment from us and later make a warranty claim, we pass the details needed for that claim to the manufacturer concerned.

We may also disclose personal data where we are required to do so by UAE law — for example to a court, a regulator or a law enforcement body — or where we need to establish, exercise or defend legal claims. If our business is sold or reorganised, personal data may transfer to the buyer, who would remain bound by this notice.

Please read this section carefully, because it is the most significant thing this notice has to tell you.

This website is hosted on servers in Germany. Requests you send us through the website are received and stored on that infrastructure. Cloudflare operates a global network, so the technical data processed for the anti-spam check may be handled in other countries, including the United States. This means that personal data you give us through this website is processed outside the United Arab Emirates.

Under the UAE Personal Data Protection Law, transferring personal data outside the UAE is permitted where the receiving country provides an adequate level of protection, or where appropriate safeguards are in place — such as contractual terms binding the recipient to protections equivalent to those in the law, or your explicit consent, or where the transfer is necessary to perform a contract with you.

Our German hosting sits within the European Economic Area, which applies the EU General Data Protection Regulation, and our arrangements with our providers require them to protect personal data and to process it only on our instructions. You can ask us for details of the safeguards applying to a particular transfer by emailing info@idella.ae.

• Requests that do not lead to a sale — up to 2 years from your last contact with us, so we can pick up a conversation you return to. Then deleted.
• Records of quotations and sales — 7 years from the end of the financial year concerned, matching the period for which UAE corporate tax law requires businesses to keep their records. Some records must be kept longer where a specific legal obligation requires it.
• Server and security logs — normally up to 90 days.

When a retention period ends we delete the data, or anonymise it so that it can no longer be linked to you.

Under the UAE Personal Data Protection Law you have the right to:

• be informed about how your personal data is used — this notice;
• access the personal data we hold about you, and receive information about how and why it is processed and who it is shared with;
• have inaccurate or incomplete data corrected;
• have your data erased where there is no lawful reason for us to keep it;
• restrict processing in certain circumstances, for example while you contest the accuracy of the data;
• receive your personal data in a clear, usable format, and to have it transferred to another controller where that is technically feasible;
• object to processing based on our legitimate interests, and to object at any time to the use of your data for direct marketing;
• object to a decision made about you by automated means alone where it produces legal effects for you.

To exercise any of these rights, email info@idella.ae. We will respond within 30 days. If a request is unusually complex we may need longer, and we will tell you within those 30 days if that is the case. There is no charge. We may ask you for proof of identity so that we do not disclose your data to the wrong person.

If you are unhappy with how we have handled your personal data, please tell us first, so that we can try to put it right: info@idella.ae.

You also have the right to complain to the UAE Data Office, the federal data protection regulator established under Federal Decree-Law No. 44 of 2021. You do not have to contact us first. The Data Office's complaints procedure is being established under the Executive Regulations to the Personal Data Protection Law; we will update this notice with the route for making a complaint as soon as it is published.

We use appropriate technical and organisational measures to protect personal data against loss, misuse, alteration and unauthorised access, including:

• HTTPS/TLS encryption across the whole website;
• bot protection (Cloudflare Turnstile), limits on repeated submissions and server-side validation on the request form, with a hidden field that rejects automated submissions;
• access to request data limited to staff who need it;
• administrative access restricted and protected by authentication.

No transmission over the internet can be guaranteed completely secure.

If a personal data breach occurs that is likely to prejudice your privacy, confidentiality or security, we will notify the UAE Data Office and, where the risk to you is high, tell you directly. The Personal Data Protection Law requires this to be done without delay; the Executive Regulations are expected to set a specific deadline, and we will meet it.

This website does not set cookies of its own, and it does not use analytics, advertising or tracking cookies. It does not use Google Analytics, Google Tag Manager or any advertising pixel, and it does not build a profile of you.

The anti-spam check on our request form is run by Cloudflare Turnstile, which may set a short-lived cookie that is strictly necessary for that check. Under the UAE Personal Data Protection Law, a cookie that collects personal data needs a lawful basis and must be explained to you; we rely on our legitimate interest in keeping the form usable and free of automated abuse.

If we ever introduce analytics or marketing cookies, we will ask for your consent before setting them, and this section will list each one with its purpose and lifetime before it is used. You can block or delete cookies through your browser settings.

We review this notice regularly and may update it to reflect changes to the website, to our services, or to the law — in particular when the Executive Regulations to the UAE Personal Data Protection Law are issued. The date at the top of the page shows when it last changed.

Where a change materially affects your rights — for example if we begin using analytics cookies — we will make that clear on this page before the change takes effect.