Other legal pages
This policy explains what personal data we collect when you visit www.evolurise.com or www.evolurise.ae, why we collect them, how long we keep them, and how you can regain control of them.
It covers data collected by this website. Data that we process on behalf of our clients, as part of hosting or maintenance services for their own websites, is governed by a data processing agreement entered into directly with them and is not covered here.
Data controller
The data controller is [[TO BE COMPLETED: exact company name]], a company based in the Dubai Free Zone, United Arab Emirates, whose full contact details are set out in our legal notices.
If you have any questions regarding your data: [email protected].
Applicable framework
Although our company is based outside the European Union, this website is aimed at a European audience and offers services to individuals residing in the EU. The General Data Protection Regulation therefore applies to our data processing activities, pursuant to Article 3(2) thereof.
Our processing activities are also subject to UAE Federal Law No. 45 of 2021 on the protection of personal data. Where the two pieces of legislation differ, we apply the provision that affords you the greatest protection.
Data we collect
Data that you provide to us
When you complete the contact form, we collect:
- your name (required); ;
- your email address (compulsory); ;
- your telephone number (optional); ;
- the type of project envisaged (optional); ;
- the indicative budget (optional); ;
- the content of your message (required).
We do not ask you to provide any sensitive data as defined in Article 9 of the Regulation. Please do not include any such data in your message.
Data collected automatically
For every request, our server and our content delivery network record your IP address, the date and time, the page requested, the response code, the browser type and, where applicable, the referring page. These logs are used to operate the website, diagnose faults and fend off attacks.
We do not use any audience measurement tools, advertising tools or behavioural trackers.
Purposes and legal bases
| Treatment | Purpose | Legal basis |
|---|---|---|
| Contact form | To respond to your enquiry, provide a quote, and prepare for a potential contractual relationship | Pre-contractual measures taken at your request (Article 6.1(b)) |
| Sales follow-up | To follow up on an exchange we have already had with you | Legitimate interest in developing our business (Article 6(1)(f)) |
| Technical journals | Ensure the site’s operation, availability and fault diagnosis | Legitimate interest in maintaining an operational service (Article 6(1)(f)) |
| Anti-bot protection (Cloudflare Turnstile) | Prevent automated form submissions and abuse | Legitimate interest in protecting our systems (Article 6(1)(f)) |
| Loading fonts | Display the website using its own typeface | Legitimate interest in ensuring consistent formatting (Article 6(1)(f)) |
Retention periods
| Data | Duration |
|---|---|
| Enquiry that did not result in any business follow-up | 3 years from the date of your last contact |
| File for a client under contract | Duration of the relationship, followed by a five-year limitation period |
| Related accounting documents | 10 years, in accordance with accounting requirements |
| Server technical logs | 12 months |
At the end of these periods, the data is permanently deleted or anonymised.
Recipients of your data
Your data is accessible to members of our team who need it to process your enquiry. We do not sell, rent out or exchange it.
We use the following service providers, who act on our instructions:
| Service provider | Role | Location of treatment centres |
|---|---|---|
| OVH Srl | Website and database hosting | Milan, Italy (European Union) |
| Cloudflare, Inc. | Website distribution, security, Turnstile anti-bot protection | The United States and the global network |
| Resend, Inc. | Delivery of transactional and confirmation emails | United States |
| Google LLC | Provision of the website’s fonts | United States |
We may also disclose data where a competent authority legally requires us to do so.
Transfers outside the European Union
As our company is based in the United Arab Emirates, your data is accessed and processed there by our team. The United Arab Emirates is not covered by an adequacy decision from the European Commission.
Our service providers based in the United States also process data from that country. These transfers are based on the standard contractual clauses adopted by the European Commission and, where the service provider is certified under the scheme, on the EU-US Privacy Shield.
We limit these transfers to what is necessary for the operation of the website and for processing your enquiry.
Cookies and trackers
This website does not file no cookies during normal browsing. We have checked this: an anonymous visit to the home page or the contact page does not generate any cookies.
Three technical cookies may appear in specific situations:
- when you change the language, a cookie remembers your choice for subsequent pages; ;
- when you interact with the contact form, Cloudflare’s Turnstile service sets a temporary identifier designed to distinguish a human from a bot; ;
- When an administrator logs in to the admin interface, WordPress sets a session cookie.
These three cookies are strictly necessary for the service you have requested and do not require prior consent. This is why this website does not display a consent banner: there is nothing for you to agree to.
Your rights
You have the following rights in relation to your data:
- Access : to obtain a copy of the data we hold about you; ;
- Correction : to have inaccurate or incomplete information corrected; ;
- Deletion : to request the erasure of your data, subject to our legal obligations regarding data retention; ;
- Limitation : request that a decision be suspended whilst an appeal is being considered; ;
- Opposition : to object to processing based on our legitimate interests, in particular for marketing purposes; ;
- Portability : to receive the data you have provided to us in a machine-readable format; ;
- Post-mortem guidelines : Decide what should happen to your data after your death.
To exercise any of these rights, please write to [email protected]. We will respond within one month of receiving your request. This period may be extended to three months if the request is complex, in which case we will inform you of this within the first month.
We may ask you to provide proof of identity if there is reasonable doubt as to the applicant’s identity. This proof of identity will be destroyed once the verification has been carried out.
Complaint
If you are not satisfied with our response, you may lodge a complaint with the supervisory authority in your country of residence. In France, this is the Commission nationale de l’informatique et des libertés:
- CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
- www.cnil.fr
Safety
The website is accessible exclusively via HTTPS. Access to the infrastructure is restricted and authenticated using a key. Form data is stored in a database that is not publicly accessible. The website’s components are kept up to date and monitored.
No measure can make a system completely secure. In the event of a data breach that could pose a high risk to your rights, we will inform you as soon as possible.
Changes
This policy may change, particularly if we add a new tool or change service providers. The date of the last update is shown at the top of this page. In the event of any substantial changes, we will notify those affected by appropriate means.
The French version of this document is the authoritative version. Versions in other languages are produced by machine translation and are provided for convenience only.
If you have any questions regarding this document, please contact us at [email protected].
Document updated on 30 August 2026.