Legal / data rights
GDPR information
Effective 7 September 2026
This page summarises how Aifel Labs handles website requests when the EU General Data Protection Regulation applies. The Privacy Policy contains the full website data-flow description.
1. Controller and scope
Aifel Labs FZ-LLC, Dubai, United Arab Emirates, acts as controller for personal data it collects directly through this website. A client engagement can assign different controller or processor roles and is documented separately.
2. Processing and legal basis
Website processing is limited to responding to inquiries, running an assessment or AI-assisted demonstration you request, protecting the service, optional consent-based page-view measurement, and necessary business or legal records. Depending on the activity, the basis may be consent, steps requested before a contract, legitimate interests that do not override your rights, or a legal obligation.
3. Processors and international transfers
Hosting, automation, communications, and AI providers may process data on our behalf. Data can be processed outside the European Economic Area. Where GDPR requires transfer safeguards, the applicable arrangement must use a recognised mechanism and provide enforceable protections. You may request information about the mechanism relevant to your data.
4. Your rights
Subject to applicable conditions and exceptions, you may ask to be informed, access your data, correct it, erase it, restrict processing, receive portable data, object, or withdraw consent for future processing. You may also complain to a competent supervisory authority. We may need to verify identity and clarify the request before responding.
5. Automated decisions and retention
The public process assessment and interactive AI demonstrations are preliminary or synthetic and are not designed to make a solely automated decision that produces legal or similarly significant effects about a person. We retain personal data only for the relevant purpose, relationship, dispute, security, or legal obligation, then delete or anonymise it where reasonably possible.
6. Requests
Use the inquiry form and identify the request as a privacy or GDPR request. If you disagree with our response, you may contact the supervisory authority available to you under applicable law.