GDPR Policy

General Data Protection Regulation (GDPR) Compliance Policy

⚡ Quick Bites (TL;DR): This GDPR Compliance Statement outlines how wealth.efootball-patch.com processes, protects, and respects the personal data of European Union (EU) and European Economic Area (EEA) residents seeking UAE corporate relocation, Golden Visa residency, and DIFC offshore wealth structuring.

1. Introduction and Scope of GDPR Compliance

Welcome to wealth.efootball-patch.com, an elite corporate advisory platform founded by Mizanur Rahman Hridoy. Headquartered in Dubai, United Arab Emirates, our digital infrastructure serves high-net-worth individuals, global entrepreneurs, and corporate executives worldwide.

Although our operations are rooted in prime jurisdictions such as the Dubai Multi Commodities Centre (DMCC) and the Dubai International Financial Centre (DIFC), we recognize the global nature of capital movement. Many of our corporate clients and private investors reside within the European Union and the European Economic Area.

This General Data Protection Regulation (GDPR) Policy establishes our unwavering commitment to Regulation (EU) 2016/679. We enforce strict technical and organizational safeguards to ensure all European data subjects experience total transparency, control, and security regarding their personal information.

2. Data Controller and Supervisory Identity

Under the statutory definitions of Article 4(7) of the GDPR, the designated Data Controller responsible for determining the purposes and means of processing personal data across this domain is:

  • Data Controller: Mizanur Rahman Hridoy
  • Corporate Enterprise: wealth.efootball-patch.com
  • Registered Physical Address: Level 41, Emirates Towers, Sheikh Zayed Road, Dubai, United Arab Emirates
  • Dedicated Privacy Desk: business@wealth.efootball-patch.com

3. Legal Bases for Data Processing

In strict alignment with Article 6 of the GDPR, we only collect and process personal data when a clear, legally sanctioned basis exists. We never execute arbitrary or opaque data processing operations.

3.1 Explicit Consent (Article 6(1)(a))

When you subscribe to bespoke corporate briefings, submit a message via our secure contact form, or opt into analytical tracking via our cookie preference manager, you provide explicit, affirmative consent. You maintain the right to withdraw this consent at any point in time.

3.2 Legitimate Interests (Article 6(1)(f))

We process non-sensitive digital identifiers, server logs, and engagement metrics to maintain the integrity and security of our financial portal, defend against cyber threats, optimize mobile-first readability, and facilitate programmatic advertising delivery via Google Ad Exchange (ADX).

3.3 Legal Obligation (Article 6(1)(c))

Certain processing activities are mandatory to comply with international anti-money laundering (AML) directives, know-your-customer (KYC) documentation standards, and regulatory disclosure mandates under UAE and cross-border commercial frameworks.

4. Fundamental Rights of European Data Subjects

Under Chapter III of the GDPR, users situated in the European Union and the European Economic Area possess comprehensive and enforceable rights over their personal data. We facilitate these rights without undue delay:

  • Right to Access (Article 15): You have the right to request a formal copy of the personal data we hold regarding your corporate identity, advisory inquiries, and digital interactions.
  • Right to Rectification (Article 16): If any stored information regarding your corporate structure, email address, or investment threshold is inaccurate or incomplete, you may demand immediate corrections.
  • Right to Erasure (“Right to be Forgotten” – Article 17): You may request the permanent deletion of your personal data from our active databases, provided there is no overriding statutory requirement to retain the records.
  • Right to Restrict Processing (Article 18): You possess the authority to contest the accuracy of your data or halt specific processing operations while an audit or legal review is pending.
  • Right to Data Portability (Article 20): You are entitled to receive your personal data in a structured, commonly used, and machine-readable format to transmit to another corporate advisory entity.
  • Right to Object (Article 21): You hold an absolute right to object at any time to the processing of your data for direct marketing, programmatic profiling, or operations grounded purely in legitimate interests.

5. Categories of Personal Data Collected and Processed

To provide high-level educational content on UAE free zone setup, corporate tax minimization, and luxury property equity, we collect minimal and proportionate data points:

Identity and Direct Communications: Full name, professional title, corporate email address, and direct telephone numbers provided voluntarily during advisory consultations or general corporate inquiries.

Technical Identifiers: Internet Protocol (IP) addresses, device hardware profiles, browser fingerprints, referring URLs, and session timestamps captured automatically by our web servers to ensure system reliability.

Programmatic Advertising Identifiers: Pseudonymized tracking cookies and digital tokens utilized by Google Ad Exchange (ADX) to determine contextually appropriate advertisements tailored to high-net-worth commercial interests.

6. International Data Transfers and Standard Contractual Clauses

wealth.efootball-patch.com operates its technical infrastructure and editorial headquarters in Dubai, United Arab Emirates. Consequently, accessing our resources from the European Union involves an international transfer of data outside the European Economic Area.

To ensure robust compliance with Chapter V of the GDPR, all cross-border data transfers are executed under recognized legal safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) and alignment with DIFC Data Protection Law No. 5 of 2020.

Our secure server environments enforce end-to-end Transport Layer Security (TLS 1.3) encryption, strict firewall protocols, and multi-factor authentication to maintain an equivalent level of security to that guaranteed within the EU.

7. Third-Party Processors and Advertising Disclosures

We work exclusively with elite enterprise service providers who maintain independent, verifiable compliance with GDPR standards. Our core technology partners include:

Google Ad Exchange (ADX): We deploy Google’s enterprise advertising technology to deliver non-intrusive, premium commercial advertisements. Google operates as an independent or joint controller depending on the service level and adheres to international data transfer frameworks and privacy frameworks.

Hosting and Content Delivery Networks: Our global content delivery and caching partners process technical IP traffic solely to serve high-speed web assets and mitigate distributed denial-of-service (DDoS) vulnerabilities.

We do not sell, rent, or trade your personal data to unauthorized third parties or unvetted brokers under any circumstances.

8. Data Retention and Destruction Protocols

We enforce a strict data minimization philosophy. Personal data gathered through our contact infrastructure is retained only for the timeframe required to fulfill the specific advisory or communication request.

Technical logs and analytics data are automatically anonymized or purged within thirty (30) to ninety (90) days. In instances where legal, tax, or regulatory obligations necessitate extended storage under UAE federal statutes, data is isolated in secure, encrypted archives with restricted administrative access.

9. Exercising Your Rights and Response Timelines

If you wish to invoke any of your statutory rights under the GDPR—including requesting a full export of your personal data or requesting immediate record erasure—please submit a formal written request to our dedicated privacy desk.

In accordance with Article 12(3) of the GDPR, we will acknowledge and resolve your verified request within one (1) calendar month of receipt. In complex cases involving extensive technical audits, this window may be extended by two additional months with formal notification.

10. Right to Lodge a Formal Supervisory Complaint

If you believe that our handling of your personal data infringes upon your statutory protections under Regulation (EU) 2016/679, you maintain the undisputed right to lodge a formal complaint with a competent Supervisory Authority.

You may approach the Data Protection Authority situated in your particular EU Member State of habitual residence, place of employment, or where the alleged processing infringement occurred.

11. Dedicated Privacy Office and Contact Details

For all regulatory inquiries, subject access requests, or questions regarding our GDPR compliance protocols, please communicate directly with our corporate team:

For comprehensive details on our general terms, usage obligations, and advisory boundaries, please review our official Terms and Conditions and explore our dedicated Contact Us channel.