Information Notice on the Protection of Personal Data for Suppliers and/or Customers
MARMARA METAL REFINERY FZE
Marmara Metal Refinery FZE (“Marmara” or the “Company”), acting in the capacity of the Data Controller, is committed to processing, storing, and deleting personal data with the highest level of care, in accordance with UAE Federal Decree‑Law No. 45 of 2021 on Personal Data Protection (PDPL), Cabinet Decision No. 34 of 2022, SAIF Zone regulations, and all applicable UAE federal laws.
This privacy notice has been prepared to inform you that Marmara will process your personal data as outlined below and within the boundaries established by the applicable legislation.
Information Regarding the Data Controller
MARMARA METAL REFINERY FZE
Sharjah Airport International Free Zone (SAIF Zone)
License No.: 25745
Legal Status: Free Zone Establishment with Limited Liability (FZE)
Registered Address: 600 M2 Warehouse U2‑125, SAIF Zone, Sharjah – United Arab Emirates
Marmara is the Data Controller within the scope of UAE PDPL.
Purposes of Processing Personal Data
Your personal data is processed by Marmara within the limits specified by UAE PDPL, in compliance with the principles of lawfulness, fairness, transparency, and proportionality, and always in a limited and relevant manner for the following purposes:
1. To fulfill obligations under UAE Federal Decree‑Law No. 45 of 2021 (PDPL)
2. To fulfill obligations under UAE AML/CFT/CPF laws and Cabinet Decision No. 10 of 2019
3. To comply with SAIF Zone regulations and UAE commercial laws
4. To conduct commercial activities and plan business strategies
5. To ensure the Company’s legal, technical, commercial, and workplace safety
6. To carry out sales, procurement, and marketing activities
7. To maintain communication with customers and suppliers
8. To manage customer and supplier relations and ensure accuracy of contact information
9. To ensure customer satisfaction and address operational needs
10. To provide relevant persons with access to products and services
11. To carry out customer and supplier onboarding and due diligence
12. To provide information to third parties involved in business relations
13. To resolve requests, questions, suggestions, and complaints
14. To comply with data retention obligations under UAE law
15. To provide information/documents to authorized individuals or entities as required by legal obligations
16. To conduct official correspondence
17. To respond to inquiries from data subjects in accordance with UAE PDPL
Transfer of Personal Data
Your personal data may be transferred, within the scope of the purposes mentioned above and in compliance with UAE PDPL, to:
• UAE government authorities (FIU, Police, Customs, SAIF Zone Authority)
• Judicial and administrative bodies
• Private legal and natural persons permitted under UAE legislation
• Institutions and organizations authorized to audit the Company
• Banks and payment institutions
• Business partners providing services or collaborating with Marmara
Suppliers where necessary for operational activities
Such transfers will only be made to the extent required for achieving the specified purposes and in accordance with UAE PDPL requirements for cross‑border transfers.
Methods and Legal Grounds for Collecting Personal Data
Your personal data may be collected directly from you and/or third parties through tools such as:
• Emails, application forms, onboarding documents
• Phone calls, websites, and digital communication channels
• Contracts, invoices, and commercial records
• CCTV systems and access logs
• Written or verbal communication
• Government databases and regulatory submissions
This data is processed based on the legal grounds specified under UAE PDPL, including:
It is explicitly required under UAE law It is necessary for the performance of a contract
It is necessary for the Data Controller to fulfill legal obligations
It is mandatory for the establishment, exercise, or protection of a right
It is necessary for the legitimate interests of the Company, provided that it does not violate the fundamental rights and freedoms of the data subject
Explicit consent where required under UAE PDPL
Rights of Data Subjects Under UAE PDPL
Pursuant to UAE Federal Decree‑Law No. 45 of 2021, you may apply to Marmara at any time to:
• Learn whether your personal data is being processed
• Request information regarding the processing of your personal data
• Learn the purpose of processing and whether it is being used accordingly
• Learn the third parties, either domestic or abroad, with whom your personal data has been shared
• Request correction of your personal data if it has been processed incompletely or inaccurately
• Request the deletion of your personal data under the conditions specified in UAE PDPL
• Request notification to third parties regarding corrections or deletions
• Object to automated processing or profiling
• Request restriction of processing
• Request data portability where applicable
• Request compensation if you suffer damage due to unlawful processing
We hereby inform you of these rights you are entitled to under UAE law.
How to Submit a Data Protection Request
• Applications made to Marmara for these purposes can be submitted using one of the following methods:
• By delivering a written and signed request to Marmara’s registered address in SAIF Zone
• By sending a signed request via email to:
marmara.refinery@gmail.com
• By submitting a request through secure electronic communication channels
Requests must include:
Full name
Signature
Nationality
Passport/Emirates ID number
Residential or workplace address
Email address
Telephone number
Subject of the request
• Applications that do not contain these required elements may be rejected.
• Requests will be finalized as soon as possible and no later than 30 (thirty) days from the date of receipt, depending on the nature of the request.
Updates to This Notice
Marmara reserves the right to make changes to this notice at any time due to:
Amendments in UAE PDPL
Secondary regulations
Decisions of UAE supervisory authorities
Operational or legal requirements
Any changes to this disclosure text, as well as the updated version, will become effective immediately as of the date they are communicated to you.