This privacy notice explains how Emirates Global Aluminium PJSC and its subsidiaries (EGA) use your personal data when you interact with us. It also describes the rights that you have and the steps that we take to keep your personal data safe.

When EGA processes your personal data for the reasons described in this privacy notice, EGA is known as the ‘data controller’.

If you have any questions about the content of this privacy notice, you can contact us by using the details provided in the ‘Contact us for more information’ section at the bottom of this page.

What personal data do we process, and what reasons do we process it for?

When you browse our website

When you use this website, we use cookies to record:

• the areas of the website that you visit; and
• information about your computer, such as which browser you are using, your network location, the type of connection you are using (e.g., broadband, ADSL etc.) and your IP address.

We do this so that we can collect and analyse information on our site's performance, which helps us to develop and improve the site, and to allow us and our partners to show you relevant advertisements when you visit our site and other third party websites, including social networks.

Processing your personal data for these purposes is based on your consent, unless the cookies are strictly necessary to the website’s functionality.

You can control which cookies you consent to through the cookie banner on our website, or by visiting the Cookie Policy, which also provides more information on how we use cookies, and how you can opt out of them.

When you submit an enquiry

If you submit an enquiry, either through this website, through another contact option (such as a contact email address or telephone number), or directly to one of our employees, we will process your personal data for the purposes of responding to, and managing, your query. This could include queries relating to our products, or to seeking employment with EGA.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number, as well as any other personal data that you provide when you submit your enquiry.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests, or in some circumstances may be based on your consent to the processing.

When you are in contact with us as part of your role as an employee of one of our partners

If you are communicating with us on behalf of your employer, we will process your personal data so that we can manage the relationship with your employer, such as administering any orders that have been, or will be, placed. This includes activities such as emailing or calling us to discuss orders that have been placed for our products, or discussing our products in meetings and at trade shows.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests, or in some circumstances may be based on our right to defend legal claims against us.

When you visit our sites and offices

When you visit our sites and offices anywhere in the world, we will process your personal data for the purposes of ensuring the safety and security of you, other visitors, and our staff.

At our sites in the United Arab Emirates, EGA also uses personal data of visitors to accurately identify them upon arrival at EGA's sites, which includes using photographs provided by visitors to verify the visitor's identity using facial recognition.

Some visitors to our sites in the United Arab Emirates may also need to create an account on EGA’s visitor access pass system. In this case, EGA will process your personal data for the purpose of creating and managing your EGA visitor access pass account which in turn enables you to request a pass to visit our sites.

The personal data we process for these purposes includes images, such as through the use of CCTV cameras, as well as your name, contact details, and formal identification documents, such as your passport or identification card.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests, as well as the protection of wider public interests.

When you submit a complaint

If you make a complaint to EGA, either through this website, through another contact option (such as a contact email address or telephone number), directly to one of our employees, or to a relevant authority, we will process your personal data for the purposes of investigating and managing your complaint.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests, or in some circumstances may be on our right to defend legal claims against us.

To comply with legal or regulatory obligations

In some circumstances, EGA may be obliged to process your personal data for the purposes of complying with legal and regulatory requirements applicable to EGA’s businesses in all countries in which EGA operates, such as record-keeping and reporting obligations, conducting audits, compliance with government inspections and other requests from government or other public authorities.

Processing your personal data for these purposes is necessary to comply with legal obligations and may in some cases be necessary to protect EGA’s legitimate interests.

For marketing and research purposes

We will process your personal data for the purposes of sending you marketing materials when you sign up to receive this marketing communications from us.

We may also process your personal data to seek your input into market research that we are conducting.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing your personal data for these purposes is based on your consent. If you wish to withdraw your consent to marketing communications, you can contact us using the details at the end of this privacy notice.

To improve our products and services

In some circumstances, we will use your personal data to help improve our products and services. This may involve conducting analytics to understand how we have performed in delivering our services to you, and reviewing how we can improve for the future.

This may require us to process personal data you have provided to us, such as your contact details or information relating to queries and complaints.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests or, where appropriate, may be based on your consent.

When you engage with us on social media

When you interact with us on social media, such as by liking or commenting on posts made by EGA, we are able to view the personal data that you have made publicly available, such as your name, profile picture and comment, and will process this personal data to respond and interact with you accordingly.

Processing this personal data for these purposes is necessary to protect EGA’s legitimate interests or, depending on your location, may also be lawful as you will have made the data publicly available.

When you use our customer portal

When you register for, and subsequently use, our customer portal, we will process your personal data (such as your login details) so that we can administer and manage your customer portal account.

Processing your personal data for these purposes is necessary to protect EGA’s legitimate interests, or in some cases may be based on our contractual obligation to provide the services of the portal to you.

To protect EGA from fraud and other illegal activities

EGA uses personal data in order to maintain a safe environment for our partners and employees, and to protect the interests of EGA’s shareholders and the wider public. This includes, for example, monitoring the emails that are sent to EGA email accounts to detect fraud and phishing attempts.

The personal data we process for these purposes includes your name and contact details, including your email address and telephone number.

Processing this personal data for these purposes is necessary to protect EGA’s legitimate interests, to comply with legal obligations and to enable us to defend ourselves against legal claims.

Who do we share your information with?

We share your personal data with trusted third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, IT consultants carrying out testing and development work on our business technology systems, research, media and mailing houses and function co-ordinators. These third parties comply with similar and equally stringent undertakings of privacy and confidentiality, and we have back-to-back confidentiality agreements with them.

We also share your personal data with our other subsidiaries for internal reasons, primarily for business and operational purposes. To find out more about the companies within the EGA group that may handle your personal data please click here.

As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us your personal data will be disclosed to such entity. Also, if any bankruptcy or reorganisation proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties.

As is noted above, we may also need to share your personal data with third parties when we are obliged to do so, or where it is necessary to protect EGA’s interests: to comply with a legal obligation; when we believe in good faith that an applicable law requires it; at the request of government authorities conducting an investigation; to verify or enforce our website terms and conditions or other applicable policies; to detect and protect against fraud, or any technical or security vulnerabilities; to respond to an emergency; or otherwise to protect the rights, property, safety, or security of third parties, visitors to the our website, our business or the public; or auditory purposes.

We make best efforts to ensure we have confidentiality agreements in place with the parties with whom we share information and they comply with information protection requirements of EGA.

Transfers of your personal data outside of your home country

Your personal data may be processed by EGA, its subsidiaries and those other parties described above, outside the country in which you are based.

If your personal data is transferred to another country, we will ensure that there are adequate mechanisms in place to protect your personal data. This includes the use of data transfer agreements and implementing standard data protection clauses where appropriate to help ensure that your personal data is subject to the same standards of protection as it is in your own country.

Security

We are committed to ensuring that your personal data is kept secure. In order to prevent unauthorised access or disclosure we have put in place suitable physical, electronic and administrative procedures to safeguard and secure the information we collect.

We are also certified to ISO27001:2013 standard which is a globally accepted standard for managing risks to the security of information an entity holds.

If at any point you suspect or become aware of a security incident (e.g. you receive a suspicious communication from someone holding themselves out to be an EGA employee or from a unauthorised website claiming to be affiliated with EGA), please report the incident by email to informationcenter@ega.ae as soon as possible.

How long will we keep your personal data?

We will only keep your personal data for the period necessary to fulfil the purposes outlined above. Once we no longer need your personal data to fulfil those purposes, we delete it or completely anonymise it so that it no longer identifies you.

What are your rights?

By law, you have a number of rights when it comes to your personal data. These rights vary depending on the country that you are located in, but they generally include:

Right	What does this mean?
The right to be informed	You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we’re providing you with the information in this notice.
The right to object to processing	You have the right to object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
The right of access	You have the right to obtain access to your personal data (if we’re processing it), and certain other information (similar to that provided in this notice). This is so you’re aware and can check that we’re using your personal data in accordance with applicable law.
The right to rectification	You are entitled to have your personal data corrected if it’s inaccurate or incomplete.
The right to erasure	This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
The right to restrict processing	You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.
The right to data portability	You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
The right to lodge a complaint	You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator, but we would ask that you contact us in the first instance so that we can try to resolve your complaint.
The right to withdraw consent	If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your personal data with your consent up to that point is unlawful). This includes your right to withdraw consent to us using your personal data for marketing purposes.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information for:

• Baseless or excessive/repeated requests, or
• Further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request.

Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll come back to you and let you know.

Linking to other websites

Our website or marketing email messages sometimes include links to other websites which are not within our control. Once you have left our website/marketing email message, we cannot be held responsible for the content of other websites or the protection and privacy of any information which you provide to those websites. You should exercise caution and look at the privacy notice applicable to the website in question.

How to find more information about our website

For more information, you can view our website terms and conditions which explain the terms on which you are allowed to use our website https://www.ega.ae, which provides a gateway to our products and services, as well as lots of other useful information about EGA here.

Contact us

If you have questions or concerns about this privacy notice or about the processing of your personal data, or need additional information, please contact us at informationcenter@ega.ae.

You can also use EGA’s ‘Your Voice’ report line to ask a question or to report a concern. The Your Voice platform is hosted by an external provider bound by strict obligations of confidentiality. It is available 24/7, in multiple languages, and has the option for the reporter to remain anonymous.

To use the Your Voice report line, please visit https://ega.ethicspoint.com Please note that the Your Voice page is hosted on EthicsPoint's secure servers and is not part of EGA’s website or intranet.

Changes to this privacy notice

EGA will regularly review and update this privacy notice when changes are made to the ways in which we process personal data.

This privacy notice was last updated on 22 January 2024.