The professional business directory for Dubai & UAE
Only 4+ star rated businesses
List your business

Privacy policy

At b2bdubai.ae we take the protection of your personal data seriously. This privacy policy explains what information we collect through the website, for what purpose and how we safeguard it.

Because the website is aimed at users in the United Arab Emirates but is operated from Spain, this policy has been drafted to comply with both frameworks simultaneously: Regulation (EU) 2016/679 (GDPR) and Spanish Law 34/2002 (LSSI), and UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) for users located in the UAE.

1. Data controller

The controller of the personal data collected on b2bdubai.ae is:

  • Company name: Consultoría SEO posicionamiento web Barcelona, S.L.
  • Tax ID (NIF): B72737224
  • Registered address: Rambla de Catalunya 38, 8º, 1ª, 08007 Barcelona, Spain
  • Contact email: info@b2bdubai.ae

2. Data we collect

We apply the principle of data minimisation: we only process what is strictly necessary. Specifically, we handle the following data:

  • IP addresses: When you browse our website, your device's IP address may be recorded in the server logs. This is standard practice intended to preserve network security, identify possible attacks or errors and assist with technical diagnostics. IP addresses are not used to identify visitors and are kept only for as long as necessary.
  • Contact details (if you write to us): If you contact us via the form or by email, we receive the information you include in your message (your name, your email address, your phone number if you provide it, and the content of your enquiry).
  • Usage data (only with your consent): If you accept analytical cookies, Google Analytics 4 collects aggregated and anonymised statistics about how the website is used. See the Cookie policy for details.

3. Purposes and legal basis

The data we collect is processed for the following purposes. For maximum transparency, we indicate the legal basis under each framework separately:

  • Protecting the website and detecting incidents. IP addresses in server logs are used to monitor server activity, protect the site against improper access or attacks and diagnose technical faults.
    GDPR: our legitimate interest in ensuring the security and operation of the service (art. 6.1.f). PDPL: performance of a task carried out in the public interest / applicable legal exemption.
  • Answering your enquiries. If you contact us, we use the details you provide to respond to your request, enquiry or comment.
    GDPR: steps prior to entering a contract and/or your consent when sending the message (arts. 6.1.a and 6.1.b). PDPL: your consent, which you may withdraw at any time.
  • Assessing listing requests. If you submit a listing request for your company, we use the data provided to evaluate your application and, where appropriate, to publish the profile.
    GDPR: your consent and steps prior to entering a service relationship. PDPL: your consent.
  • Web analytics. Anonymous usage statistics through Google Analytics 4.
    GDPR/LSSI: your prior consent, which you may withdraw at any time. PDPL: your consent.

4. Data retention

  • Server log IP addresses are kept only for as long as necessary to ensure network protection and the correct operation of the website.
  • Form or email communications are retained while your request is being handled and, afterwards, for the periods required by law to comply with our obligations. Unsuccessful listing requests are deleted once the assessment is concluded.
  • Consent records are kept for the period necessary to demonstrate that valid consent was given, in accordance with applicable regulations.

5. Recipients and processors

We do not sell or rent your personal data. We share it only with the providers that make the service possible, acting as data processors under the applicable contracts:

  • Hosting provider: stores the website and its server logs.
  • Google LLC (Google Analytics 4): processes usage data only if you have consented. You can prevent this at any time through the cookie settings.
  • Email service provider: delivers the messages sent through the contact form.

Data may also be disclosed where required by law (for example, a judicial or public authority request).

6. International transfers

The controller is established in Spain (European Economic Area) and the main processing takes place there. Some of the providers listed above may involve access to data from outside the EEA - in particular, Google LLC is established in the United States. Where such a flow constitutes an international transfer subject to Chapter V of the GDPR and the destination country does not benefit from an adequacy decision, the transfer is made on the basis of Standard Contractual Clauses approved by the European Commission, together with any supplementary measures that may be necessary.

Transfers of data from the UAE to Spain are carried out in accordance with Articles 22 and 23 of the UAE PDPL. You can request information about the safeguards applicable to any specific transfer by writing to info@b2bdubai.ae.

7. Your rights

Under the GDPR (users in the EEA): access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

Under the UAE PDPL (users located in the UAE): the rights of access, correction, erasure, restriction of processing and the rights relating to automated processing, as well as the withdrawal of consent.

To exercise any of these rights, send a written request to info@b2bdubai.ae, accompanied by a copy of an identification document. We will respond within the shortest applicable statutory period.

8. Right to lodge a complaint

If you consider that your rights have not been properly addressed, you may lodge a complaint with the competent data protection authority:

  • In Spain / the EEA: the Spanish Data Protection Agency (AEPD), www.aepd.es.
  • In the UAE: the competent UAE data protection authority under Federal Decree-Law No. 45 of 2021.

9. Security measures

We apply technical and organisational measures appropriate to the risk, including encryption of connections (HTTPS), access control to administrative environments, and minimisation of the data processed. In the event of a personal data breach that may affect your rights, we will notify the competent authorities and the affected data subjects in accordance with the applicable regulations.

10. Changes to this privacy policy

We may update this privacy policy when required by legislative or regulatory changes. Amendments will be published on this same page, so we recommend that you review it from time to time. Last updated: August 2026.