Privacy policy

1. Controller

The controller for data processing is B A Media Group FZE LLC, Business Centre, Sharjah Publishing City Free Zone, Sharjah, Vereinigte Arabische Emirate. Contact: contact@bamg.ae.

2. Hosting and infrastructure

The website and processing run on Amazon Web Services (AWS), including EU data centres (Frankfurt). Delivered files are stored on Amazon S3, order and progress data in Amazon DynamoDB. Legal basis: Art. 6(1)(b) and (f) GDPR.

3. Order and payment

For a purchase, payment is processed via Stripe (Stripe Payments Europe Ltd.). Stripe processes the payment and billing data you enter as well as your email address. We receive the email address and billing data from Stripe to fulfil the order and issue the invoice. Legal basis: Art. 6(1)(b) GDPR.

4. Creation of the address lists

To create the ordered list we evaluate publicly accessible business and address directories. The compiled, predominantly commercial business data (B2B) is provided as CSV. Legal basis for processing this publicly available data: Art. 6(1)(f) GDPR.

5. Email delivery

We send the download link by email via Amazon SES, processing your email address for delivery. Legal basis: Art. 6(1)(b) GDPR.

6. Retention

Delivered CSV files and their download links are available for a limited time (download link 24 hours). Order data is retained in line with statutory (in particular commercial and tax) retention periods.

7. Cookies

Strictly necessary cookies are always set, optional ones exclusively after your consent. We embed no advertising services.

Necessary: “cc_cookie” stores your decision about the cookie notice (6 months). “NEXT_LOCALE” remembers the selected language (session). “__stripe_mid” (1 year) and “__stripe_sid” (30 minutes) are set by our payment provider Stripe for fraud detection and to link an ongoing payment to your session.

Optional and only after consent are the Google Analytics cookies: “_ga” (2 years) and “_ga_*” (2 years) distinguish visitors and maintain the session state, “_gid” (24 hours) distinguishes visitors short-term, “_gat” (1 minute) throttles the number of requests.

Legal basis for the necessary cookies is Section 25(2) no. 2 TDDDG together with Art. 6(1)(b) and (f) GDPR. Legal basis for the optional cookies is Section 25(1) TDDDG together with Art. 6(1)(a) GDPR. You can change your choice at any time via the “Cookies” link in the page footer and thereby withdraw your consent with effect for the future.

8. Audience measurement with Google Analytics

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how the website is used so we can improve it. Processed data includes a truncated IP address, a randomly assigned identifier, the pages you visit, the time and duration of the visit as well as approximate location, device and browser data.

Google Analytics is only loaded after you have accepted the “Statistics and audience measurement” category in the cookie notice. Before that, no script is loaded from Google, no request goes to Google and no cookie is set. The IP address is truncated (anonymize_ip) and the data is not merged with other Google services or advertising accounts.

Legal basis is your consent under Art. 6(1)(a) GDPR together with Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the “Cookies” link in the page footer; processing carried out until then remains lawful. The recipient is Google, and a transfer to the USA cannot be ruled out; Google relies on the EU standard contractual clauses and the EU-US Data Privacy Framework. Event data is deleted after 2 months, user-level data after 14 months.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact contact@bamg.ae. You also have the right to lodge a complaint with a supervisory authority.