Privacy Policy

Information on the processing of personal data for visitors of this website and users of the contact form.

Last updated: 24 November 2025

1. Controller & Contact

The controller within the meaning of data protection law for this website is:

POSMU Group – Dubai Holding & POSMU-IT DMCC
DMCC Business Centre
Level 12, Uptown Tower
Dubai
United Arab Emirates
Email: mail@posmu-it.ae

For business activities and data processing relating to Germany, the following entities may act as joint controllers in the sense of Art. 26 GDPR, where applicable:

POSMU Holding DE
Immenröder Straße 6
38640 Goslar
Germany
Email: mail@posmu-it.de

POSMU-IT GmbH
Immenröder Straße 6
38640 Goslar
Germany
Email: mail@posmu-it.de
Phone: +49 5321 9288130

2. Scope of this Privacy Policy

This Privacy Policy explains how we process personal data when you visit our website https://holding.posmu.com and use the contact form provided. Other websites of POSMU entities may have their own privacy notices.

3. Categories of Data, Purposes and Legal Bases

3.1 Access data when visiting the website

When you access this website, the web server automatically stores certain information in server log files. This may include:

• IP address of the requesting device
• Date and time of access
• Visited pages / URL
• Amount of data transferred
• Referring URL (website from which you came)
• Browser type and version, operating system

We process this data to ensure the technical operation and security of the website (e.g. to detect errors or attacks). The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in providing a secure and stable website.

3.2 Contact via contact form or email

If you contact us via the contact form or by email, we process the data you provide, in particular:

• Name
• Company (optional)
• Email address
• Message content
• Technical metadata (e.g. time of submission)

We process this data to handle and respond to your enquiry and, where applicable, to initiate or perform a contractual relationship.

The legal bases are:

• Art. 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract, and
• Art. 6(1)(f) GDPR – legitimate interest in processing business enquiries.

4. Recipients and Categories of Recipients

Your data is processed within POSMU Group by those departments which need it to fulfil the above purposes (e.g. management, sales, support). In addition, we may use external service providers (processors) for hosting and technical support of the website.

These service providers are contractually bound to process personal data only in accordance with our instructions and in compliance with applicable data protection law.

5. International Data Transfers

As the POSMU Group operates both from the United Arab Emirates and Germany, data may be processed in countries outside the European Union (EU) or European Economic Area (EEA), in particular in the UAE.

Where GDPR applies and data is transferred from the EU/EEA to a third country for which there is no adequacy decision by the European Commission, we implement appropriate safeguards (such as standard contractual clauses pursuant to Art. 46 GDPR) or ensure that another legal basis under GDPR applies.

You may request further information on the safeguards used (e.g. copies of the standard contractual clauses) via the contact details provided above.

6. Storage Period

We store personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by statutory retention periods.

• Server log data is usually stored for a short period only, unless longer storage is required for security or evidence purposes.
• Contact enquiries are stored for the duration of the processing and, if necessary, until the expiry of statutory retention periods (e.g. commercial and tax laws).

7. Obligation to Provide Data

You are not legally required to provide personal data when using this website. However, certain functions (such as replying to your enquiry) cannot be provided without the necessary information (e.g. your email address).

8. Your Rights under Data Protection Law

To the extent GDPR applies, you have the following rights with regard to the processing of your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or place of alleged infringement.

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (processing based on legitimate interests). We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. However, internet-based data transmission may in principle have security gaps, so absolute protection cannot be guaranteed.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in legal requirements or our processing activities. The latest version is always available on this website.

11. Contact for Privacy Requests

For all questions regarding this Privacy Policy or the processing of your personal data, you can contact us at:

Email (Dubai): mail@posmu-it.ae
Email (Germany / EU): mail@posmu-it.de