for data subjects pursuant to Art 13 and 14 GDPR
Last Updated: 26.11.2025
Kwizda Pharma GmbH (“Kwizda”, “we”, “our”, or “us”) is committed to protecting your personal data and ensuring transparency regarding how we collect, use, store, and disclose personal information in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its 2023/2024 Executive Regulations.
This Privacy Policy applies to all visitors and users of our UAE website and online digital platforms.
1. Controller Information
Kwizda Pharma GmbH
Effingergasse 21, A-1160 Vienna, Austria
Operating in the UAE through authorized partners and distributors
Email:
Phone: +43 / (0)5 9977 30 400
For UAE data protection inquiries, please contact us using the email above.
2. Types of Personal Data We Collect
We may collect and process the following categories of personal data:
a. Information You Provide Directly
- Name
- Email address
- Phone number
- Country and city information
- Contact form messages
- Documents or attachments voluntarily submitted
b. Information Collected Automatically
- IP address
- Browser type and version
- Device type
- Website pages visited
- Date/time of access
- Referring website
- Cookies and similar technologies
c. Product or Medical Inquiry Information
When you voluntarily contact us regarding product usage, safety concerns, complaints, or general health-related questions, we may process:
- Basic health-related information you share
- Details of your query, incident, or experience
Note:
We do not actively request or store Protected Health Information (PHI). Any health-related information you share is processed strictly to respond to your inquiry.
3. Purpose of Processing
We process personal data for the following purposes:
- Responding to product-related inquiries or complaints
- Providing customer assistance
- Improving the quality and functionality of our website
- Ensuring safety and pharmacovigilance compliance
- Protecting our legal rights and preventing misuse of the website
- Fulfilling legal obligations imposed by UAE health, pharmaceutical, advertising, and privacy regulations
4. Legal Basis for Processing (PDPL – UAE Law)
Kwizda processes personal data under one or more of the following legal bases:
- Consent – when you voluntarily submit information through our website
- Legal obligation – for compliance with applicable UAE pharmaceutical safety, reporting, and regulatory requirements
- Legitimate interest – to improve website performance, enhance user experience, and maintain platform security
- Contractual necessity – when responding to business or distributor-related communications
5. Cookies and Tracking Technologies
Our website uses cookies to:
- Improve user experience
- Analyze website performance
- Enhance functionality
You may disable cookies in your browser settings. Some features may not function properly if cookies are disabled.
6. Sharing of Personal Data
We may share your personal data only with:
- Licensed UAE distributors and authorized commercial partners
- Service providers who support website hosting, analytics, or communication
- UAE health authorities (e.g., Ministry of Health and Prevention), if required for safety and regulatory reporting
- Legal authorities when required by applicable law
We do not sell, rent, or commercially exchange personal data.
7. International Data Transfers
Since Kwizda Pharma GmbH is headquartered in the EU, some data may be transferred outside the UAE.
When transferring data internationally, we ensure compliance with UAE PDPL by:
- Using adequate contractual safeguards
- Ensuring transfers are necessary for service provision
- Protecting data through organizational and technical controls
8. Data Retention
Kwizda retains personal data only for the duration necessary to fulfill the purposes described above or as required by UAE law, including:
- Product safety and compliance reporting
- Pharmacovigilance obligations
- Legal and regulatory retention periods
After the retention period expires, data is securely deleted or anonymized.
9. Your Rights Under UAE PDPL
You have the right to request:
- Access to your personal data
- Correction of inaccurate data
- Deletion of your data, where legally permitted
- Objection to certain processing activities
- Withdrawal of consent
- Data portability (where applicable)
To exercise your rights, contact us via:
Email: [Insert UAE Contact Email]
We may require basic verification to process your request securely.
10. Data Security
Kwizda applies appropriate technical and organizational security measures, including:
- Secure socket layer (SSL) encryption
- Access controls and authentication
- Secure hosting environments
- Incident monitoring and breach reporting processes (aligned with PDPL Article requirements)
11. Links to External Websites
Our website may contain links to external third-party sites. We are not responsible for the privacy practices or content of those websites.
12. Updates to This Privacy Policy
We may modify this policy to reflect:
- Changes in UAE legislation
- Updates to our products or services
- Improvements in website functionality
The latest version will always be available on this website.
