GDPR COMPLIANCE STATEMENT

Last Updated: December 6, 2025

1. INTRODUCTION

This GDPR Compliance Statement explains how Aifel Labs FZ-LLC ("we," "us," or "our") processes personal data in accordance with the General Data Protection Regulation (GDPR). This statement applies to all personal data collected through our website and services.

2. DATA CONTROLLER

For the purposes of the GDPR, Aifel Labs FZ-LLC acts as a data controller for the personal information we collect and process. Our contact details are provided at the end of this statement.

3. LEGAL BASIS FOR PROCESSING

We process personal data on the following legal bases: (a) Consent: Where you have explicitly agreed to the processing; (b) Contract: Where processing is necessary for the performance of a contract; (c) Legal Obligation: Where we need to comply with a legal requirement; (d) Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party.

4. DATA SUBJECT RIGHTS

Under GDPR, you have the following rights: (a) Right to access; (b) Right to rectification; (c) Right to erasure; (d) Right to restrict processing; (e) Right to data portability; (f) Right to object; (g) Rights related to automated decision-making and profiling.

5. DATA PROTECTION MEASURES

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including: (a) Encryption of personal data; (b) Regular testing of security measures; (c) Access controls and authentication; (d) Staff training on data protection.

6. INTERNATIONAL TRANSFERS

When we transfer personal data outside the EEA, we ensure adequate safeguards are in place through: (a) Standard contractual clauses; (b) Adequacy decisions; (c) Binding corporate rules where applicable.

7. DATA BREACH PROCEDURES

In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay when required by GDPR.