This privacy notice explains how Emirates Global Aluminium PJSC (EGA) uses your personal data when you interact with https://egarewards.vfairs.com/ (the website) and the EGA Rewards Application (the application). It also describes the rights that you have and the steps that we take to keep your personal data safe.
When EGA processes your personal data for the reasons described in this privacy notice, EGA is known as the ‘data controller’. As the website and the application are intended solely for use by EGA employees, this privacy policy should be read in conjunction with the EGA Staff Privacy Notice (document EGA.HC.OP.01.07) which is available on MyEGA under Policies & Procedures, Human Capital.
If you have any questions about the content of this privacy notice, you can contact us by using the details provided in the ‘How to contact us’ section at the bottom of this page.
The website and the application are hosted by vFairs. You can read their privacy policy here.
Please review this Privacy Policy periodically as we may update it from time to time to reflect changes in our data practices.
As part of your use of the website and the application, the following personal data will be processed:
We use this personal data to:
We also use non-personally identifiable information and certain technical information about your computer and your access to the website and the application (including your internet protocol address) in order to operate, maintain and manage the website and the application.
Processing your personal data for these purposes is necessary pursuant to the contract that exists between you as an employee and EGA and, to the extent applicable, is necessary for EGA’s legitimate interests of providing timely and informative information to its employees
As part of the provision of the website and the application, we may share your personal data with third party service providers, such as the hosting company vFairs. These third parties are required not to use your personal data other than to provide the services requested by EGA, and EGA maintains appropriate confidentiality agreements with them.
We are committed to ensuring that your personal data is kept secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and administrative procedures to safeguard and secure the information we collect.
EGA is also certified to ISO27001:2013 standard which is a globally accepted standard for managing risks to the security of information an entity holds.
If at any point you suspect or become aware of a security incident (e.g. you receive a suspicious communication from someone holding themselves out to be an EGA employee or from a unauthorised website claiming to be affiliated with EGA), please report the incident by email to informationcenter@ega.ae as soon as possible.
If we seek to use the information we obtain about you in other ways, we will provide specific notice and request your consent at the time of collection.
By law, you have a number of rights when it comes to your personal data. These rights vary depending on the country that you are located in, but they generally include:
Right | What does this mean? |
---|---|
The right to be informed | You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this notice. |
The right to object to processing | You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities). |
The right of access | You have the right to obtain access to your personal data (if we’re processing it), and certain other information (similar to that provided in this notice). This is so you’re aware and can check that we’re using your personal data in accordance with applicable law. |
The right to rectification | You are entitled to have your personal data corrected if it’s inaccurate or incomplete. |
The right to erasure | This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions. |
The right to restrict processing | You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future. |
The right to data portability | You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability. |
The right to lodge a complaint | You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator, but we would ask that you contact us in the first instance so that we can try to resolve your complaint. |
The right to withdraw consent | If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes. |
We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:
Alternatively, we may be entitled to refuse to act on the request.
Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.
A “cookie” is a text file that websites send to a visitor’s computer or other Internet-connected devices to uniquely identify the visitor’s browser or to store information or settings in the browser. A “web beacon” is also called a Web bug or a pixel tag or a clear GIF. Used in combination with cookies, a web beacon is an often-transparent graphic image, usually no larger than 1-pixel x 1-pixel, that is placed on a Web site or in an e-mail that is used to monitor the behavior of the user visiting the Website or sending the e-mail.
The website uses cookies and other similar technologies for the convenience of users. Cookies enable us to serve secure pages to our users without asking them to sign in repeatedly. The website also uses cookies to store information such as your preferences. The website also uses cookies to ensure the proper functioning and efficiency of the website.
For most of the cookies placed on the website, vFairs is the data controller.
Most internet browsers enable you to erase cookies from your computer hard drive, block all cookies, or receive a warning before a cookie is stored. Please be aware that the website cannot be used without cookies enabled. The website also does not respond to web browser “do not track” requests.
You are able to control the categories of cookies that are used when you visit this site, using the cookie banner control settings that appears when you first access the site.
The website permits third-party cookies. For example, third-party services located on the website, including those that allow for single sign-on, commenting, live chat and social media sharing, may use cookies to remember user preference settings and interaction history.
Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to your website.
The companies that provide third-party tools and services, such as commenting, operate under their own privacy policies and you are encouraged to be aware of the privacy policies of such companies. EGA does not have control over or access to any information contained in the cookies that are set on your computer by third-party tool providers.
There are many resources on the internet that can provide you guidance regarding deleting or disabling cookies.
Your personal data may be processed by EGA, its subsidiaries and those other parties described above, outside the country in which you are based.
If your personal data is transferred to another country, we will ensure that there are adequate mechanisms in place to protect your personal data. This includes the use of data transfer agreements and implementing standard data protection clauses where appropriate to help ensure that your personal data is subject to the same standards of protection as it is in your own country.
The website and the the application may sometimes include links to other websites which are not within our control. Once you have left the website or the application, we cannot be held responsible for the content of other websites or the protection and privacy of any information which you provide to those websites. You should exercise caution and look at the privacy notice applicable to the website in question.
EGA will regularly review and update this privacy notice when changes are made to the ways in which we process personal data.
If you have questions or concerns about this privacy notice or about the processing of your personal data, or need additional information, please contact us at egaprivacy@ega.ae.