1. Scope This privacy policy explains how ITLS UAE processes your personal data when you register for and participate in the "AI for Industry" training programs.

2. Data Collected

Registration data: name, business email address, employer, role, country.
Participation data: session selection, attendance lists, completion status.
Program data: voucher allocation/usage, labs, survey responses.
Technical data (for virtual events): arrival/departure times, IP or device information (minimized).

3. Purpose and Legal Basis We process your data for:

Registration management and delivery of the training (performance of contract).
Program administration, security, and fraud prevention (legitimate interests).
Reporting results to Microsoft (legitimate interests, minimized).
Sharing data with your employer (see below) for training verification and HR development, to the extent that your participation is linked to your professional role or facilitated/sponsored by your employer (legitimate interests, in accordance with applicable law).
Sending follow-up communications about similar training (with consent or under applicable legal provisions).

4. Sharing of Your Data

Microsoft Corporation and its affiliates, where necessary for program reporting and quality assurance.
Your employer/partner, where relevant to your participation, for the purposes of attendance verification, certification support, and HR development.
Fast Lane / ITLS affiliates involved in delivering the program.
Service providers (event platforms, survey tools, email services) under appropriate contracts.
Authorities, where required by law.
Data minimization: Only the minimum necessary data (name, employer, session/track, attendance/completion status) will be shared. Personal phone numbers and private email addresses are not shared.

5. International Transfers If data is transferred outside the United Arab Emirates or the EU, appropriate safeguards will be applied, such as contractual clauses or equivalent measures, in compliance with the UAE PDPL law and, where applicable, the EU GDPR.

6. Retention

Registration and attendance lists: up to 24 months after the event.
Consent or compliance documents: up to 36 months.
Anonymized data may be retained for longer.

7. Your Rights You may request access, rectification, erasure, restriction, portability, or object to the processing, in accordance with applicable data protection laws (including the UAE PDPL and, where applicable, the GDPR). Contact: [email protected].

8. Security We implement appropriate technical and organizational measures, including encryption, access controls, and secure file transfers.

9. Children "Area Acceleration" events are intended for adult professionals. We do not knowingly process children's data.

10. Updates We may update this policy from time to time. Updates will be published with a revised effective date.

Privacy Policy