DRAKKEN PRIVACY POLICY

Policy Version: 1.0

Effective Date: June 2026

Drakken DMCC and its group of companies (“Drakken”, “we”, “us”, or “our”) are committed to protecting and respecting the privacy of our customers, suppliers, operational representatives, and website visitors (collectively referred to as “Data Subjects”).

This Privacy Policy describes how we collect, use, store, and safeguard your personal data when you interact with our website (https://drakken.co) or engage in professional and contractual relationships with us. All personal data is processed in a lawful, correct, and transparent manner in compliance with applicable global data protection standards, including the General Data Protection Regulation (GDPR).

1. WHO WE ARE AND HOW TO CONTACT US

Drakken DMCC is a regional leader in Electrical & Instrumentation (E&I) integration and industrial intelligence, headquartered in Dubai, UAE.

• Data Controller: Drakken DMCC, Dubai, United Arab Emirates.

• General & Data Protection Inquiries: For any queries regarding this policy, the use of your data, or to exercise your legal rights, please contact us at: privacy@drakken.co

• Mailing List & Preferences: To update your marketing preferences or unsubscribe, please email: info@drakken.co

2. WHAT PERSONAL DATA WE COLLECT

We collect and process personal data across three primary categories:

I. Data Provided Directly by You

During the course of establishing commercial contracts or navigating our digital platforms, you may share personal identification and business data, including:

• First name, surname, and professional title.

• Company name, corporate/tax identifiers, and physical business address.

• Contact information (business email addresses, telephone numbers).

• Bank, credit position, and billing/payment details necessary for transactional execution.

II. Data Received from Third Parties

We collaborate with corporate partners, industry publication platforms, event organizers, and content syndication entities. These third parties may securely share your business contact details with us so we can communicate regarding relevant Drakken power, control, and automation solutions.

III. Technical and Usage Data Collected via our Website

When interacting with our website, our systems automatically log technical information, including:

• IP address, browser type and version, and operating system/platform.

• Time zone settings and browser plug-in variants.

• Navigation pathways, pages viewed, and engagement data (scrolls, clicks, mouse-overs).

3. PURPOSE AND LEGAL BASIS OF PROCESSING

Drakken processes personal data by means of operations such as collection, recording, organization, storage, consultation, modification, select extraction, and secure destruction. Your data is used exclusively under legitimate, recognized legal bases:

Note on Data Provision: You are under no legal obligation to provide your personal data. However, failure to provide essential personal and financial information will make it impossible to establish an official business relationship or execute contractual commitments with Drakken.

4. SCOPE OF DATA DISCLOSURE AND INTERNATIONAL TRANSFERS

To maintain Integrated Agility across our international project delivery zones (including the GCC, Iraq, and Nigeria), Drakken may share data under strict confidentiality controls:

• Intercompany Transfer: Personal data may be securely disclosed among Drakken Group corporate entities for administrative and operational consistency.

• Third-Party Processors: We utilize specialized external service providers, including IT/hosting vendors, financial institutions, logistics/transport firms, and technical consultants. These entities act as Data Processors bound by rigorous data-handling clauses.

• Tenders and External Client Requirements: Should it become necessary during public or private tenders to process or pass forward personnel data (e.g., for joint liability, anti-corruption, or anti-money laundering certifications), Drakken will act in strict legal alignment as an authorized processor or joint controller.

• International Safeguards: Where data is transferred or stored outside of its country of origin or the European Economic Area (EEA), Drakken guarantees appropriate security frameworks and legal agreements are enacted to maintain data integrity.

5. DATA RETENTION AND SECURITY

Drakken observes advanced security measures to prevent data loss, illicit or incorrect use, and unauthorized access.

• Security Protocols: Personal data is subjected to both physical paper and secure electronic/automated processing. We protect data by limiting access permissions to authorized, instructed internal personnel, utilizing encrypted firewalls, and hosting workflows on secure servers.

• Retention Timeline: The Controller retains personal data only for the timeframe strictly required to fulfill the operational purposes for which it was gathered, or as mandated by prevailing corporate, fiscal, and legal liability statutes. Inactive marketing records older than two years are systematically removed.

6. YOUR LEGAL RIGHTS

Pursuant to prevailing international data protection laws (including Articles 15-21 of the GDPR), Data Subjects possess comprehensive rights regarding their personal data. You may contact privacy@drakken.co to exercise your right to:

1. Access & Rectification: Request a copy of your stored records or correct inaccurate/incomplete details.

2. Erasure & Restriction: Request the total cancellation (“right to be forgotten”) or restriction of your processing activities under specific legal scenarios.

3. Portability: Request the transfer of your structured data format to another technical provider.

4. Objection & Automated Decisions: Object to profiling, automated decision-making, or direct marketing pipelines.

5. Withdraw Consent: Revoke any previously provided data processing consent at any time without retroactively affecting the lawfulness of past processing.

If you believe Drakken is handling your data in an non-compliant manner, you retain the legal right to submit a formal complaint directly to your local supervisory Data Protection Authority.

7. COOKIE POLICY BRIEF

Drakken uses cookies to distinguish you from other users on our web domain, helping us optimize site navigation and digital performance.

• Strictly Necessary Cookies: Required for core system operations, security, and interface stability.

• Analytical & Functional Cookies: Used to observe traffic volumes, map customer navigation data, and remember your regional layout preferences.

By interacting with and utilizing the Drakken digital platforms, you consent to our deployment of these cookies. You can modify or deactivate cookie tracking at any time via your localized browser privacy settings.