MDC Consulting is a Specialist Consultancy, Engineering and Advisory firm with headquarters based in Dubai – UAE working throughout Europe, Asia, and the Middle East.

Introduction

MDC Consulting is committed to protecting the privacy and confidentiality of personal data entrusted to us by our customers, employees, contractors, and other stakeholders. This Data Protection Policy and Standards document outlines our commitment to compliance with data protection laws and regulations and sets standards for the collection, use, storage, and processing of personal data.

Scope

This policy applies to all personal data collected, processed, and stored by MDC Consulting, including data collected from customers, employees, contractors, suppliers, and other individuals.

Compliance with Laws and Regulations

MDC Consulting complies with all applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA), and other data protection laws worldwide.

Principles of Data Protection – Lawfulness, Fairness, and Transparency: Personal data is processed lawfully, fairly, and transparently, with individuals informed of the purposes and legal basis for processing their data.

Purpose Limitation: Personal data is collected and processed for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

Data Minimization: Only the minimum amount of personal data necessary for the intended purpose is collected and processed.

Accuracy: Personal data is accurate, up to date, and kept current to the extent necessary for the purposes for which it is processed.

Storage Limitation: Personal data is kept in a form that permits identification of data subjects for no longer than necessary for the purposes for which it is processed.

Integrity and Confidentiality: Personal data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Data Collection and Consent

MDC Consulting collects personal data only for specified, explicit, and legitimate purposes and obtains consent from individuals before collecting their data, where required by law. Consent must be freely given, specific, informed, and unambiguous.

Data Security

MDC Consulting implements appropriate technical and organizational measures to ensure the security of personal data and protect it from unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes encryption, access controls, data backups, and regular security audits.

Data Subject Rights

MDC Consulting respects the rights of data subjects, including the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing. Data subjects can exercise their rights by contacting the Data Protection Officer or designated privacy contact.

Training and Awareness

MDC Consulting provides regular training and awareness programs to educate employees, contractors, and other stakeholders about their obligations under this policy and data protection laws and regulations.

Review and updates to this policy is subject to periodic review and updates to ensure its effectiveness and compliance with changing legal requirements and industry standards. By adhering to this Data Protection Policy and Standards, MDC Consulting demonstrates its commitment to safeguarding the privacy and confidentiality of personal data and maintaining trust with its customers, employees, and stakeholders.