Legal
Privacy Policy
How we process personal data on this website: transparently and in line with the GDPR.
Last updated: September 19, 2026
1. Controller
The controller responsible for data processing on this website is:
- Company
- Firstgate Consulting - FZCO
- Address
- DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates
- Represented by
- Kasra Zebardast
- Phone / WhatsApp
- +971 54 288 3718
Established outside the EU
Firstgate Consulting - FZCO is based in the United Arab Emirates. As this service deliberately also addresses individuals in the European Union, the General Data Protection Regulation (GDPR) applies under the market-place principle (Art. 3(2) GDPR). Representative in the EU pursuant to Art. 27 GDPR: To be appointed.
2. Your rights as a data subject
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw a given consent (Art. 7(3) GDPR)
To exercise your rights, an informal message to info@firstgatedubai.com is sufficient. You also have the right to lodge a complaint with a data-protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR).
3. Hosting & server log files
This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you access the pages, information your browser transmits is automatically recorded (server log files): IP address, date and time of access, page requested, referrer URL, browser and operating system used.
This data is used for the secure, stable operation and delivery of the website. The legal basis is our legitimate interest in an error-free presentation and security (Art. 6(1)(f) GDPR).
4. Fonts (local embedding)
The fonts used are embedded locally into the website at publication time and served from our own server. No connection from your browser to Google or other third-party servers takes place. No font data is transferred to third parties.
5. Contact / consultation request form
When you send us a request via the form, we process the data you provide (typically your name, email address, optionally phone/WhatsApp number, country, timeline, budget and your message) in order to handle the request and any follow-up questions.
The legal basis is the performance of pre-contractual measures or contract initiation (Art. 6(1)(b) GDPR) and our legitimate interest in efficiently handling requests (Art. 6(1)(f) GDPR). For sending and receiving email we use the processor Resend (Resend, Inc., USA). Your data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.
6. Newsletter
If you subscribe to our newsletter, we process your email address to send you information about our services. Sending and managing the recipient list is handled via Resend (Resend, Inc., USA).
The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time: via the unsubscribe link in every email or by messaging info@firstgatedubai.com. The withdrawal does not affect the lawfulness of processing carried out beforehand.
7. Protection against overload (rate limiting)
To protect our form endpoints from abuse and overload, we limit the number of requests per sender. For this, the IP address is briefly processed via the service Upstash (Upstash, Inc., USA). The legal basis is our legitimate interest in the security and availability of our services (Art. 6(1)(f) GDPR).
8. Cookies & local storage
This website uses exclusively technically necessary or functional cookies and local-storage entries (e.g. to remember your language choice). No tracking for analytics or marketing purposes takes place. For details on the cookies used, please see our Cookie Policy.
9. Transfers to third countries
In connection with the services mentioned above, personal data may be transferred to countries outside the EU/EEA, in particular to the United Arab Emirates (controller) and the USA (processors such as Vercel, Resend, Upstash). Where there is no adequacy decision by the EU Commission for these countries, we base the transfer on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the EU Standard Contractual Clauses.
10. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses TLS encryption. You can recognise an encrypted connection by the “https://” and the padlock symbol in your browser bar.
11. Status & changes
This privacy policy has the status indicated above. As our website evolves or legal requirements change, it may become necessary to amend this policy. The current version is always available on this page.
