Website Privacy Policy

Last Updated: May 23rd, 2025

1. INTRODUCTION

This document outlines the privacy practices of OZ FORENSICS SOFTWARE TRADING LLC and its affiliated companies (hereinafter referred to as “Oz Forensics”, "Company," "we," "us," or "our"), a developer of facial biometric authentication and liveness check services. We are committed to protecting the privacy and personal data of individuals who interact with our digital platforms, physical facilities, and services, whether directly or through our clients. By accessing our website or using our services, you acknowledge and understand our data processing practices as described herein.

2. AREA OF POLICY APPLICATION

This Website Privacy Policy is in effect regarding any information, including personal data in the meaning of the applicable law that Company and/or affiliated persons of Company may obtain regarding you in the process of the use of our websites.

The policy determines the category of personal data collected by the Company, procedures and objectives of the use of data, as well as the conditions of granting access to such data.

3. INFORMATION COLLECTION

We collect minimal data necessary to provide and enhance our services, including:

• Registration and Service Data: Name, surname, email address, contact telephone number, company affiliation, professional information, and dependent data.

• Usage Data: Information about website browsing activity, such as accessed pages, content viewed, and interactions.

• Access Records: IP address, date, and time of website access, in compliance with applicable legislation.

• Location Data: Geolocation data, if authorized, collected through devices (e.g., GPS).

• Device Data: Information about the device, including operating system, version, and language preferences.

• Communications Data: Information about communications with us, including metadata and content.

• Event and Survey Data: Personal data collected at events, fairs, surveys, and promotional activities.

• Cookies and Browsing Data: Data collected through cookies and similar technologies, as detailed in our Cookie Policy.

4. DATA COLLECTION METHODS

We collect data through:

• Voluntary Provision: Data provided by users when using our services, filling out forms, or participating in surveys.

• Automatic Collection: Data collected automatically through applications and technologies during website browsing and service use.

• Event and Survey Interactions: Data collected at events, fairs, surveys, sweepstakes, and challenges.

• Cookies: As detailed in our Cookie Policy.

5. PURPOSE OF DATA USE

We process data in accordance with the General Data Protection Regulation (GDPR) and applicable laws for the following purposes, in which the Company operates as a Controller of personal data, backed by the legal basis of Legitimate Interest:

• To provide and improve access to our website, services, and facilities.

• To analyze user traffic and enhance commercial and promotional initiatives, including personalized marketing.

• To conduct research and generate statistical analyses for service and product/service improvement.

• To facilitate commercial meetings and send relevant content and promotional materials.

• To enable legal auditing and corporate operations (e.g., mergers, acquisitions).

• To ensure safety and comply with legal obligations.

Data may be used for compatible purposes not explicitly stated herein with prior authorization.

6. DATA SHARING

We may share data with:

• Our Professionals: To provide and support our services.

• Advisors and Auditors: For corporate operations, where data may be considered assets.

• Service Providers: For marketing, security, CRM, and data storage purposes.

• Public and Government Authorities: When required by law.

We ensure data confidentiality and security during sharing, and aim to anonymize data when possible.

7. THIRD PARTY PLUG-INS

In order to ensure the operation of some of our services, we use third party applications or plug-ins. We will inform you on these plug-ins within this section.

Plug-ins – are independent extensions of social network providers and other services. Therefore, we do not control the amount of data collected and saved by the providers of the social network performed via a plug-in. The objectives and the scope of data collection, further data processing by social network, as well as the rights and parameters of settings for the protection of your privacy associated with them can be found in the data protection policy of the respective social network. You should not use the respective plug-ins, if you do not wish the providers of social networks to receive data regarding this on-line offer or to continue using these data.

8. FOR CANDIDATES TO VACANCIES

A special section Vacancies is provided on the home page of the Company for people looking for vacancies. If you are using our website to seek a job or decide to send us your CV in reply to an advertised vacancy, you are giving us your consent to use your personal data in order to perform our recruiting procedures. Any CV received by the Company from unsuccessful applicant will be deleted/destroyed no later than three months after the date of receipt thereof.

All CVs submitted via the form of the website, shall be received by the support service of Company and then transferred to the Human Resources Department.

9. INTERNATIONAL DATA TRANSFER

Personal data can be processed and stored in the United States and other regions.

Amazon Web Services (“AWS”) infrastructure is used by Oz for data processing. To ensure compliance with international data transfer regulations, Oz Forensics has established contracts with Amazon that offer the required legal framework for these services.

The data is transferred through secure protocols and data will remain stored in encrypted form.

You have the option to directly exercise your GDPR rights with Oz Forensics at any point in time (refer to the “YOUR RIGHTS” section).

10. DATA RETENTION

We retain data as long as necessary for:

• Ongoing relationships and service provision.

• Legitimate interests, such as fraud prevention and security.

• Compliance with legal and regulatory obligations.

11. YOUR RIGHTS

As a data subject under the GDPR, you possess the following rights:

• Obtain confirmation of the existence of the processing of your data

• Request a copy of your personal data

• Correct incomplete, inaccurate, or outdated data

• Request deletion of personal data that is unnecessary, excessive, or processed in violation of GDPR

• Withdraw consent previously given to process your personal data

• Request restriction of personal data processing or object to the personal data processing

• Request portability of data to another service or product provider

To exercise your rights, please send an email to [email protected] with the specifics of your request.

Exercising your right to receive a copy of your personal data cannot infringe upon the rights and freedoms of other individuals.

To ensure your security and enable you to exercise your data rights, we need to verify your identity. This verification may involve requesting additional personal information. By submitting a rights request, you authorize us to collect, use, process, and store your personal data as described in this Privacy Policy.

We will receive and analyze all requests. If your request is denied, we will provide a proper justification for the refusal.

The processing of the requests will be done as quickly as possible, but within one month at the latest. The one-month timeframe begins upon confirmation of your identity or, if not requested by the company, upon receipt of your request. The requested information will then be provided to you. For complex or numerous requests, the company may extend the information provision period by an additional two months, provided you are notified beforehand.

In addition, you can also lodge a complaint with a supervisory authority.

12. DATA PROTECTION

We implement technical measures to protect personal data, including:

• GDPR-compliant and ISO-certified servers

• Physical security measures at our premises

• Data encryption (SSL)

• Firewalls and intrusion detection systems

• Other security measures in line with current technology

13. CONTACT INFORMATION

All queries regarding the provisions of the Policy may be sent to us by one of the following means:

OZ FORENSICS SOFTWARE TRADING LLC Office 384, Saih Shuaib Bldg 2 area, DIC, Dubai, UAE

Office e-mail: [email protected]

Email for GDPR enquire: [email protected]

14. POLICY UPDATES

We may update this policy periodically. The current version will always be available on our website. Continued use of our services implies acceptance of the updated policy.