This Privacy Policy sets out how and why GS1 Emirates Limited (“GS1 UAE”) collects, stores, and processes your personal data when you use its websites and services – as well as your rights with respect to your personal data. If you have any questions or feedback, please contact info@gs1ae.org. By using GS1’s websites and/or services, you hereby confirm that you have read the Privacy Policy contained herein.

The Controller that is responsible for collecting and processing your personal data when you use the Websites is:

GS1 Emirates Limited
24^th Floor
Al Sila Tower
ADGM Square
Abu Dhabi Global Market
Al Maryah Island
Emirate of Abu Dhabi
United Arab Emirates
Email: info@gs1ae.org
Website: www.gs1ae.org

“Controller” means GS1 Emirates Limited, also referred to as “we”, “us”, and “our”. 

“processor” means a natural or legal person that processes personal data on behalf of or pursuant to GS1’s instructions. 

“processing” refers to the ways your personal data is (among other things) collected, stored, used, disclosed, and erased. 

“personal data” means any information relating to an identified or identifiable natural person (a “Data Subject”). Examples of such personal data includes your name, email address, photograph, professional title, business phone number, and any other personal information you provide to us that is capable of identifying you. 

“services” includes GS1 UAE services such as GS1 Activate, GS1 Learning Zone, NumberBank, BrandSync, and other GS1 UAE services that are created and made available from time to time. 

“Website(s)” include https://www.gs1ae.org/ for services, as well as the GS1 events webpages as created from time to time. 

The GS1 UAE websites, including the services available on them, collect personal data that enables us to provide secure Website access and our services to you, as well as the effective administration of the services. When you interact with the Websites (i.e. to register your details and/or login), your personal data is collected for such purposes in order to be processed, including by third parties. Personal data is collected as input by you and from third party processing services that collect personal data via our Websites (such as event registrations). 

You hereby grant your express written consent to the extent deemed necessary for GS1 UAE to store, process, transfer and share your personal data with any third party in any number of jurisdictions, and for the use of such personal data for GS1 UAE’s reasonable business purposes, to provide the services to you, to send marketing and organisational communications to you, for legal compliance purposes, for implementing the applicable Cookie Policy, and for the purposes of giving effect to this Privacy Policy, and that such express written consent is given clearly and unambiguously with the full knowledge of how your personal data will be stored, processed, transferred and shared with any third party in any number of jurisdictions.  

Website Use 

The personal data GS1 UAE collects via its Websites allow us to provide secure Website access, our services to you, and to respond to your questions. 

This type of processing is done with your consent, which you may give when submitting your details via the electronic contact form, and otherwise for GS1’s legitimate interest of improving the Websites, our services and responding to your queries. 

Registration 

Our Websites, and the services they provide, may require users to register their personal data (for example name, email address, and password) and user consent is requested at the time of registration. 

This type of processing is done on the legal basis of your consent and otherwise, where consent is not legally required, for GS1 UAE’s legitimate interest of ensuring the security of our services and the people that access and use them. Where a user has entered into a contract with GS1 UAE (for example that relates to a service), then it may be necessary for us to process personal data in order to fulfil our obligations to perform the contract. 

Marketing & Organisation Communication 

Personal data may be processed for the purpose of sending communications about GS1 UAE news and events by post, fax, email or telephone. Personal data is also processed as our services reasonably require, to communicate updates, troubleshoot issues with the service, and to respond to and resolve user queries about the service.  

Processing personal data for marketing and organisational communication purposes is done on the legal basis of user consent and otherwise, for GS1 UAE’s legitimate interests of marketing its news and events to interested members and users. Processing personal data to communicate with users about services they use is done pursuant to GS1’s legitimate interest of providing ongoing services and related service support to its users. 

Services 

Personal data is processed to operationally provide our services to users and ensure that the services are protected, to the extent possible, from unauthorised access and use. Such processing also includes to: process business transactions; establish and maintain customer accounts; communicate with you about updates, maintenance, outages or other technical matters relating to the services; provide training; notify you about changes to our policies and procedures; verify the accuracy of account and technical contact information; and respond to user inquiries. 

The legal basis for such processing is GS1 UAE’s legitimate interest of providing and maintaining the services, and ensuring security of these systems. 

A GS1 Member Organization (“MO”) or other company submitting personal data when registering an individual for a GS1 Organised Group must ensure that it has obtained the express written consent of the said individual to the extent deemed necessary to store, process, transfer and share their personal data with any third party in any number of jurisdictions, and for the use of such personal data for GS1’s reasonable business purposes, and that such express written consent provided by the said individual was given clearly and unambiguously with the full knowledge of how their personal data would be stored, processed, transferred and shared with any third party in any number of jurisdictions.  

Social Media Integration & Plugins 

GS1 UAE integrates content from its YouTube channel, X (previously Twitter), LinkedIn and other accounts (“social media platform(s)”) to its Websites. These social media platforms can, if buttons are included on our Websites, automatically download information technology content. The pages viewed by a user can then automatically send data to these social media platforms. Through this technical process, the social media platform may receive personally identifiable information, such as an IP address and browsing habits, to optimise user-directed advertising. This information is stored by the social media platforms in the United States of America and possibly other jurisdictions, and may be shared with third parties where appropriate. If the user is logged in to a social media platform with their profile, the social media platform recognises the user at each activity. Personal data such as the IP address of the person concerned, clicks on pages, access time, access location, the frequency of visits, links of origin, follow-on links and data on the length of stay on the website are sent. The social media platforms may, if buttons are included on our Websites, monitor user activity. 

GS1 UAE Websites embed content and uses social plugins (“plugins”) from social media platforms. If you visit a page of our Websites that contains such plugin, your browser connects directly to the servers of the social media platform. The content of the plugin is transmitted by the social media platform directly to your browser and integrated into the webpage. By integrating the plugin, the social media provider receives the information that your browser has accessed the corresponding page of our Website. This also applies if you do not have a profile or are currently not logged in to the respective social media platform. This information (including your IP address) is transmitted by your browser directly to a server of the social media platform (possibly in the US or otherwise) and stored at that location. If you are logged in to one of the social media platforms, the provider can directly allocate the visit to our Website to your profile in the respective social media platform. If you interact with the plugins (for example by clicking the “Like” or “Share” buttons), the corresponding information is also transmitted directly to a social media platform server and stored at that location. The information may also be posted on the social media platform and displayed to your contacts. This type of processing is necessary for the optimal marketing of our services, which is a legitimate interest of GS1 UAE. 

If you do not want social media platforms to assign the data collected via our Websites directly to your profile in the corresponding social media platform, you must log out of the corresponding service before you visit our Websites. You can prevent the plugins from being loaded, even with add-ons for your browser, using the script blocker “NoScript” (http://noscript.net/). 

Otherwise, you hereby grant your express written consent to social media platforms assigning the data collected via our Websites directly to your profile in the corresponding social media platform to the extent deemed necessary in any number of jurisdictions, and that such express written consent is given clearly and unambiguously with your full knowledge accordingly. 

Legal Compliance 

GS1 UAE must comply with its legal obligations (for example as directed by regulatory authorities or under a Court order) and in such circumstances, it may be necessary for us to process personal data for these reasons. 

Cookies 

Cookies are small files stored on your computer when you access our Website. They have various functions including: allowing you to navigate smoothly between pages on the Website, remembering your preferences and improving the overall experience of the Website. 

GS1 UAE will store and process your personal data for the purposes stated in this Privacy Policy. GS1 UAE retains your personal data for the period of time necessary to achieve the purposes described in this Privacy Policy, subject to extension as permitted by law. You hereby grant your express written consent to GS1 UAE storing your personal data accordingly, and such express written consent is given clearly and unambiguously with your full knowledge. 

Disclosure to Third Parties 

GS1 UAE may disclose your personal data to third party processors for the purposes stipulated in this Privacy Policy. If required by law, GS1 UAE may disclose personal data upon request of a public authority and upon receipt of a Court order, or similar, to disclose personal data. In some cases, it may be necessary to transfer personal data to international businesses and/or organisations (that is, outside of the Abu Dhabi Global Market and the United Arab Emirates). In such instances, personal data will be transferred subject to the legislative and contractual safeguards. When personal data is shared with third party recipients for such purposes, it is shared in accordance with this Privacy Policy and as authorised and instructed by GS1 UAE. 

You hereby grant your express written consent to the extent deemed necessary for GS1 UAE to share your personal data with any third party in any number of jurisdictions for the purposes stipulated in this Privacy Policy, and that such express written consent is given clearly and unambiguously with the full knowledge of how your personal data will be shared with any third party in any number of jurisdictions. 

All information collected via the Websites and services are saved and stored in secure operating environments and is only accessible by authorised personnel. The Website is monitored regularly to ensure that it is secure and data is not being accessed or used improperly. The Website is protected by appropriate security measures to safeguard, prevent loss, unlawful use and unauthorised access to personal data to the maximum reasonable extent. 

Accessing your Personal Data 

When you request access to your personal data, and such request is reasonable and proportionate, GS1 UAE will provide such service free of charge; however, if your request requires disproportionate technical or administrative effort, GS1 UAE may charge a fee. 

If you request access to your personal data, GS1 UAE may request verification of your identity to ensure to the fullest extent possible that personal data is not unlawfully disclosed – failure to adequately validate your identity may result in GS1 UAE’s refusal to allow access to the requested personal data. You agree that a refusal under such circumstances shall be deemed lawful. 

Data Accuracy 

You are responsible for maintaining the accuracy of your personal data by contacting GS1 UAE to notify us of any changes to or errors in your personal data. You have the right to access your personal data stored by the Websites and services to update, amend and rectify your personal data record. 

Erasure 

You have the right to have your personal data erased, noting that without the retention of your personal data, access to the Websites and services may be limited. 

Withdrawing Consent 

You have the right to withdraw your consent to your data being processed at any time expressly in writing, without affecting the lawful processing of your personal data before such withdrawal. 

Objection

You have the right to object, in whole or in part, to your personal data being collected and processed. In such case, we will no longer process personal data subject to the rights of GS1 UAE. 

If you have a complaint about the way GS1 UAE handles or processes your personal data, you may lodge a complaint with the relevant supervisory authority, which for GS1 is the Office of Data Protection of the Abu Dhabi Global Market. At first instance, we recommend that you direct any concerns or complaints to info@gs1ae.org.  

This Privacy Policy may change from time to time when reviewed and to comply with applicable laws and regulations. Your rights under this Privacy Policy will not be reduced without your express written consent. Where proposed changes are significant, you will be notified by email and/or by notice via the Website. 

If you would like further information about this Privacy Policy or your privacy rights in relation to the Website, please contact info@gs1ae.org 

Published 01 January 2019 and revised [●] December 2023.