BaOne FZCO is a professional services firm based in Dubai with expertise in Consulting, Technology, Transactions, Tax and Business Support. We help clients streamline their business, manage risks, improve operational efficiency, drive innovation and protect their assets from cyber threats. Our professionals advise on all tax matters to help navigate the changing business environment.

Throughout this document, BaOne FZCO will be referred to as “BaOne”, “we”, “us”, and “our”.

This Privacy Notice explains how BaOne uses personal data and describes the rights you have with respect to your personal data. If you have any questions about how we process and protect your personal data, please contact us via email at info@baone.ae, or by mail at Office 304/305, The Offices 2, One Central, Level 3, Dubai, UAE.

This Privacy Notice covers the following scenarios where BaOne processes personal data:

• Personal data collected directly from you on our website at https://baone.ae/, or via our email domain @baone.ae, or otherwise submitted by you to BaOne personally
• Personal data processed in the context of providing professional services to you or your employer, whether provided by you or not (including publically available sources)

BaOne acts as a data controller under applicable laws, including Federal Decree Law No. 45 of 2021 Regarding the Protection of Personal Data (PDPL), which means we are required to use our own judgment in determining the purposes and means for processing personal data covered by this Notice.

We do not employ automated decision-making in our business practices and do not use your personal data to automatically assess aspects of your personality (automated profiling).

To fulfil the processing purposes outlined in Section 2 of this Notice, we may need to share your personal data with the following entities in various jurisdictions in which they operate:

• Our external service providers and their respective subcontractors (Support Providers)
• Entities that control, are controlled by, or are under common control with BaOne (BaOne Affiliates)
• Uur subcontractors

Any personal data transferred to BaOne Affiliates, our Support Providers and subcontractors will be processed in accordance with applicable law, and appropriate technical and organizational security measures will be implemented to protect it. We will remain responsible for any use or disclosure personal data by our subcontractors, BaOne Affiliates or Support Providers to the same extent as if BaOne had engaged in the conduct itself.

As a data subject, you have specific rights under PDPL. You may exercise any of the following rights by contacting us as outlined in Section 1 of this Notice:

• Right to obtain information about the categories of personal data processed, purposes of processing, decisions made by automated decision-making, targeted sectors or establishments with which your personal data is shared, controls and standards for storing and keeping your personal data, procedures for correcting, erasing, or limiting processing and objecting to personal data, protection measures for cross-border processing, procedures to be taken in the event of a breach or infringement of your personal data, and the process of filing complaints with the UAE Data Office
• Right to request personal data transfer in a structured and machine-readable format
• Right to correction or erasure of inaccurate personal data
• Right to restrict processing
• Right to object to and stop processing
• Right to object to decisions issued with respect to automated processing that have legal impact or otherwise adversely affect you
• Right to file a complaint with the UAE Data Office if you believe that there has been a violation of the law or if your personal data is being processed in violation of the law

Please notice that you will need to provide us your identifying information so that we can recognize you and fulfill your request.