Personal Data Processing Policy LabX Group FZE

1. Definitions

• Personal Data (PD) — any information relating to an identified or identifiable natural person, directly or indirectly.
• Processing — any operation performed on Personal Data: collection, storage, use, transfer, anonymization, deletion, and other operations as defined under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL).
• Data Controller — the entity that determines the purposes and means of processing Personal Data.
• Data Subject — an individual whose Personal Data is processed.
• Cookies — small text files stored by the browser to identify a session, remember interface settings, and support analytics. Users may disable cookies via browser settings; this may affect certain Website functionality.
• IP Address — a unique network identifier assigned to an internet-connected device.
• Website — the web resource at https://internetlab.ae and related services operated by LabX Group FZE.

2. Data Controller

3. Legal Basis and Applicable Law

• 3.1. This Policy is developed in compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and its implementing regulations.
• 3.2. Personal Data is processed on one or more of the following legal bases:
• 3.2.1. Consent — the Data Subject has given explicit consent to processing for one or more specific purposes.
• 3.2.2. Contractual necessity — processing is required to perform a contract with the Data Subject or to take pre-contractual steps at their request.
• 3.2.3. Legitimate interests — processing is necessary for the legitimate interests of the Controller, provided these do not override the Data Subject's fundamental rights.
• 3.3. The Controller guarantees the protection of Personal Data from unauthorized access and implements technical and organizational measures appropriate to the risk.
• 3.4. The current version of this Policy is published on the Website. The Controller reserves the right to update this Policy; material changes will be communicated via the Website or by email.

4. Types, Purposes, and Retention of Data

• 4.1. Data provided voluntarily by the user: full name, email address, phone number, age, education level.
• 4.2. Technical data collected automatically: IP address, browser type, device type, date and time of visit — used for statistical and security purposes; does not, by itself, identify individuals.
• 4.3. Purposes of processing:
• 4.3.1. Providing software development services and related support.
• 4.3.2. Registration for training programs and internships.
• 4.3.3. Marketing communications (subject to consent).
• 4.3.4. Content personalization.
• 4.3.5. Analytics in anonymized or aggregated form.
• 4.3.6. Legal compliance and fraud prevention.
• 4.4. Retention periods:
• 4.4.1. Contact and registration data: retained for the duration of the service relationship and up to 3 years thereafter, unless a longer period is required by law.
• 4.4.2. Technical/log data: retained for up to 12 months.
• 4.4.3. Marketing data: retained until consent is withdrawn or the Data Subject opts out.

Data is deleted or anonymized upon expiry of the retention period.

5. Rights of Data Subjects

Under the UAE PDPL, Data Subjects have the following rights:

• Right of access — obtain confirmation of whether Personal Data is being processed and receive a copy of it.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of Personal Data where there is no legitimate basis for continued processing.
• Right to restriction — request limitation of processing in certain circumstances.
• Right to data portability — receive Personal Data in a structured, commonly used format.
• Right to object — object to processing based on legitimate interests, including for direct marketing.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact: hello@sportlab.dev. Requests will be responded to within 30 days.

6. Cookies

The Website uses cookies and similar tracking technologies. By continuing to use the Website, you consent to the use of cookies as described in this Policy. You may withdraw consent at any time by adjusting your browser settings or using the cookie management tool on the Website. Note that disabling certain cookies may affect Website functionality.

7. Cross-Border Data Transfers

Personal Data may be transferred to and processed in countries outside the UAE, including but not limited to countries where our hosting providers, analytics platforms, and other third-party service providers operate. Where such transfers occur, the Controller ensures that appropriate safeguards are in place in accordance with the UAE PDPL, such as adequacy decisions, standard contractual clauses, or the Data Subject's explicit consent.

8. Third-Party Processors and Links

• 8.1. The Controller may engage trusted third-party service providers (e.g., hosting, analytics, email platforms) who process data on behalf of the Controller under data processing agreements.
• 8.2. The Website may contain links to external resources. The Controller does not control their content and is not responsible for the data protection practices of third parties. Users are encouraged to review the privacy policies of any third-party sites they visit.

9. Intellectual Property

All materials on the Website are protected by copyright and applicable intellectual property laws. Use is permitted for personal, non-commercial purposes only. Copying, reproducing, or distributing any content without the prior written consent of LabX Group FZE is prohibited. Trademarks and logos are the property of the Company or respective third parties.

10. Governing Law and Dispute Resolution

• 10.1. This Policy and any disputes arising from it are governed by the laws of the United Arab Emirates.
• 10.2. Any disputes relating to the processing of Personal Data or the use of the Website shall be subject to the jurisdiction of the competent courts of the UAE, or resolved through the dispute resolution mechanism of the Sharjah Publishing City Free Zone (SPCFZ).

11. Contact