Legal
Privacy
1. Controller
The party responsible for data processing in this portal is: to be completed by the operator · info@iag-sy.com
2. Which data we process
- Account data: name, email address, phone number, language, password (stored only as a hash).
- Information about your formation case from the questionnaire.
- Personal data of the founders (name, date of birth, identity document number, address) – only once IAG requests them for the next step. Identity document numbers are stored in encrypted form.
- Uploaded documents and working papers generated from them.
- Messages between you and IAG, tasks and case statuses.
- Technical logs: time, page accessed, IP address, type of action – without document content.
3. Purposes
- Providing your account and secure sign-in.
- Preparing, reviewing and supporting your formation case.
- Communication and notifications, which you can control in the settings.
- Security of the portal and traceability of changes.
4. Recipients and service providers
Only you and the responsible IAG staff have access to your case. Service providers used:
- Hosting of the portal and the database: to be completed by the operator
- Email delivery: to be completed by the operator
- AI support: Currently not active.
5. Transfer to other countries
Depending on the location of the operator, the hosting and the service providers, data are transferred to other countries. The details and legal bases are: to be completed by the operator
6. Storage period
Your data are stored for as long as your account exists and your case is being handled. The retention periods after a case is closed are: to be completed by the operator
7. Your options in the portal
- Access and data copy: in the settings you can download your data as a file.
- Correction: you can change your information in the portal as long as the case is open for this.
- Deletion: in the settings you can request the deletion of your account.
- Notifications: you can switch off email notices individually.
8. Security
- Encrypted transmission (HTTPS).
- Strict separation of customer data; staff accounts with two-factor sign-in.
- Documents are kept in private storage; downloads only via time-limited links.
- Uploaded files are checked for malware or remain quarantined until they have been checked.
- Logs contain no document content, passwords or identity document numbers.
9. Cookies
The portal uses only technically necessary cookies: for sign-in, the protection of forms and the selected language. There is no tracking and no embedding of third-party content.
Translations are provided for understanding. The official Arabic original texts are binding.