Privacy notice

1. Data controller

The data controller for the purposes of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) is:

2. Applicable law

The processing of personal data through this website is governed by the law of the United Arab Emirates, in particular Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the requirements of the UAE Data Office established under Federal Decree-Law No. 44 of 2021. Where users from the European Union access this website, we additionally observe the core principles of the General Data Protection Regulation.

3. Visiting the website (server logs)

When you visit this website, our hosting provider automatically collects information transmitted by your browser:

• IP address of the requesting device
• Date and time of the request
• Requested URL and HTTP status
• Referrer URL (if transmitted)
• Browser type, version and operating system (user-agent)

These data are processed solely to ensure the stable and secure operation of the website. The processing is permitted under Article 4 PDPL as it is necessary to protect the controller's legitimate interests in the secure operation of its online services. The data are not combined with any other data sources.

4. Contact form

When you send us a message via the contact form, we process the following data you provide:

• Name
• Email address
• Content of your message
• Website language (locale) at the time of submission

In addition, your IP address is held briefly in memory for up to 24 hours to prevent automated abuse (rate limiting). The IP address is neither stored permanently nor logged.

The legal basis is your consent given by actively submitting the form within the meaning of Article 6 PDPL, together with the necessity of the processing to respond to your enquiry. The data are retained for as long as required to respond to your request; statutory retention obligations remain unaffected.

5. Email delivery via Mailgun

To deliver messages received through the contact form, we use the service Mailgun provided by Mailgun Technologies, Inc., 112 E Pecan St #1135, San Antonio, TX 78205, USA. Mailgun processes the data entered into the contact form on our behalf to deliver the message as an email.

A data processing agreement is in place with Mailgun. The transfer to the United States is carried out in accordance with the requirements of Articles 22 and 23 PDPL governing cross-border transfers of personal data and on the basis of the provider's standard contractual clauses. For more information see mailgun.com/privacy-policy.

6. Local storage of language preference

When you change the language, the website stores your selection in your browser under the key th_lang_pref in so-called local storage. This information remains exclusively on your device, is not transmitted to us, and is used only to display the website in your previously chosen language on future visits. You can delete this information at any time via your browser settings.

7. No cookies, no tracking

This website sets no tracking cookies and uses no web analytics or advertising tools. No profiling and no individual automated decision-making takes place. Fonts are served exclusively from our own server; no third-party font services are embedded.

8. Your rights under the PDPL

As a data subject under Federal Decree-Law No. 45 of 2021 (PDPL) you have, in particular, the following rights:

• Right to be informed about the processing of your personal data
• Right of access to the personal data held about you
• Right to rectification of inaccurate or completion of incomplete data
• Right to erasure of your personal data
• Right to restrict or stop the processing
• Right to data portability in a structured, commonly used format
• Right to withdraw a consent previously given, with effect for the future
• Right to object to decisions based solely on automated processing
• Right to lodge a complaint with the UAE Data Office as the competent supervisory authority

To exercise your rights an informal message to support@foundster.com is sufficient. We will respond to your request within the timeframes provided for by law.

9. Cross-border data transfers

Personal data are generally processed on servers operated by our hosting provider. Any transfer to countries outside the United Arab Emirates is carried out solely to the extent necessary to deliver the email functionality via Mailgun (United States). Such transfers are made in accordance with the requirements of Articles 22 and 23 PDPL and the technical and organisational safeguards committed to by the recipient.

10. Updates to this notice

We reserve the right to update this privacy notice so that it always meets current legal requirements or reflects changes to our services. The version applicable on each new visit is the one published at that time.