Snapshot 126517
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy Introduction Transtek Systems FZ LLC (“Transtek Systems”, “we”, “us”, or “our”) is committed to protecting the privacy and security of personal data processed through the Mojodat EAM Platform (“Mojodat”, “the Platform”, or “the Service”). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, with whom we share it, and what rights you have in relation to your data. It applies to all users of the Mojodat platform, including administrators, end users, and visitors to our corporate website at www.transtek.com. Mojodat is a multi-module, cloud-based Enterprise Asset Management (EAM) SaaS platform covering Fixed Asset Management (FAM), Inventory Management (INV), Maintenance Management (MNT), Procurement, and Marketplace modules, primarily serving enterprise clients across the MENA region and internationally, including through the Microsoft Azure Marketplace and Amazon Web Services (AWS) Marketplace. Mojodat is designed to meet enterprise and government-grade data governance, security, and compliance requirements. The platform supports organizations operating in highly regulated environments, ensuring alignment with international data protection standards and best practices. By accessing or using Mojodat, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to discuss your concerns. Data controller & scope Data controller The data controller responsible for your personal data is: Transtek Systems FZ LLC Dubai Office: Unit 2107, Iris Bay Tower, Business Bay Dubai, UAE. Abu Dhabi Office: Office 341, Wafra Square, Reem Island, Abu Dhabi, UAE. KSA Regional Office: 3141 Anas Ibn Malek 8292, Po Box 13521 Riyadh, KSA. Website: www.transtek.com Sales contact: [email protected] For data subjects located in the European Economic Area (EEA) or the United Kingdom, Transtek Systems acts as the data controller and is responsible for compliance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and the UK GDPR, to the extent applicable to international data transfers involving EEA or UK residents. Scope and controller This Privacy Policy applies to: All registered users and administrators of the Mojodat platform (cloud-hosted SaaS and on-premise deployments). Employees and representatives of corporate clients (“Customer Organizations”) who use Mojodat on behalf of their organization. Visitors to the Transtek Systems website and marketing pages; Prospective customers who enquire about Mojodat through our website, marketplace listings, or direct contact. Channel partners, resellers, and system integrators working with Transtek Systems. Customer Organizations retain full ownership of all data entered into Mojodat. Transtek Systems processes such data solely on behalf of the Customer Organization in accordance with contractual agreements. Where Mojodat is deployed by a Customer Organization, that organization acts as the data controller for its own users’ data and Transtek Systems acts as the data processor on their behalf. In such cases, the data processing is governed by the Data Processing Agreement (DPA) between Transtek Systems and the Customer Organization. All processing activities are governed by a Data Processing Agreement (DPA), including confidentiality, security, and data protection obligations. Personal data we collect We collect personal data in different categories depending on how you interact with Mojodat: Account and identity data Full name, job title, and place of employment. Business email address and telephone number. Username and encrypted password (credentials). Organization name, address, and country. User role and permission level within the platform. Usage and operational data Module usage patterns (FAM, INV, MNT, Procurement, Marketplace). Asset records, inventory entries, maintenance logs, and procurement data entered into the platform. Feature interaction logs and session activity. Platform configuration settings and preferences. Technical and device data IP address and approximate geographic location. Browser type, version, and operating system. Session tokens and authentication logs. Access timestamps, page views, and navigation paths. Error logs and crash reports. Communication data Support tickets, chat logs, and helpdesk correspondence. Email communications with our team. Feedback, survey responses, and product reviews. Commercial and transactional data Subscription tier, contract terms, and billing records. Payment information (processed through secure third-party payment gateways; Transtek does not store full payment card details.). Invoice history and renewal data. Marketplace subscription details (AWS and Azure Marketplace). Data we do not collect We do not knowingly collect or process any of the following categories of sensitive data unless explicitly required by a specific enterprise deployment and governed by a separate agreement: Racial or ethnic origin Political opinions or religious beliefs Health or biometric data Sexual orientation Criminal records or conviction history The Mojodat platform is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors. How we collect data Directly from you When you register an account or complete onboarding. When you subscribe via Microsoft Azure Marketplace or AWS Marketplace. When you contact our support, sales, or onboarding teams. When you participate in demos, webinars, or training sessions. When you complete forms, surveys, or feedback requests. Automatically through the platform Session and authentication logs generated during login and use. Activity and audit logs capturing actions within the system. Performance monitoring and error reporting tools. Cookies and similar tracking technologies on our website (see Cookies and tracking technologies). From third parties Microsoft Azure and AWS Marketplace: subscriber identity and subscription token data transmitted at the point of purchase. Channel partners and resellers who provision Mojodat on behalf of end clients. Analytics and performance monitoring providers. How we use your personal data We process personal data only where we have a valid legal basis for doing so. The table below sets out our processing purposes and corresponding legal grounds: Purpose of processing Legal basis Data involved Account registration and authentication Performance of contract Account credentials, company name, contact details Service delivery and subscription management Performance of contract Subscription records, usage data, module configuration Billing and invoicing Performance of contract / Legal obligation Payment details, invoice records Technical support and helpdesk Performance of contract / Legitimate interest Support tickets, system logs, error reports Product improvement and analytics Legitimate interest Anonymised usage statistics, feature engagement data Security monitoring and fraud prevention Legitimate interest / Legal obligation Access logs, IP addresses, session tokens Marketing communications (opted-in users) Consent Name, email, preferences Compliance with legal obligations Legal obligation As required by applicable law Customer onboarding and configuration Performance of contract Organisation profile, asset data, user roles Sharing your personal data We do not sell, rent, or trade your personal data to third parties. We share data only in the following circumstances: Cloud infrastructure and hosting providers Mojodat is hosted on Microsoft Azure, AWS, and Oracle Cloud Infrastructure (OCI). These providers act as sub-processors under strict data processing agreements. Your data may be stored in data centers located in the UAE, Canada, or other regions depending on your deployment configuration. Marketplace platforms If you subscribe via Microsoft Azure Marketplace or AWS Marketplace, those platforms transmit subscriber identity tokens and subscription metadata to Transtek Systems as part of the purchase fulfillment process. Data handling by those platforms is governed by their respective privacy policies. Channel partners and resellers Where Mojodat is sold or provisioned through an authorized reseller or channel partner (such as a CSP partner on Azure), that partner may have access to subscription-level information necessary to manage the customer relationship. All partners are contractually required to protect your data in accordance with applicable law. Service providers We work with trusted third-party service providers for functions including: Payment processing Email delivery and communications Customer support platforms and helpdesk tools Analytics and performance monitoring A list of key sub-processors is available upon request. Customers may also request copies of our Data Processing Agreements (DPAs) and details of applicable safeguards by contacting us at [email protected]. All service providers are bound by data processing agreements and may only process your data for the specified purposes. Legal and regulatory disclosure We may disclose personal data to competent authorities, courts, or regulators where required by applicable law, court order, or regulatory requirement, including in the UAE, KSA, the EU, the UK, and other jurisdictions where our clients operate. Business transfers In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected users in advance where legally required. International data transfers Transtek Systems is based in the UAE. Personal data collected through Mojodat may be processed or stored in the UAE, the European Economic Area, the United Kingdom, or the United States, depending on the deployment region and the sub-processors involved. Customers may select their preferred data hosting region — including UAE, EU/EEA, UK, or US — subject to availability through our supported cloud providers (AWS, Azure and OCI). This allows organizations to meet their specific data residency, sovereignty, and regulatory requirements. Where we transfer personal data to countries that are not recognized as providing an adequate level of data protection under applicable law (including the GDPR), we implement appropriate safeguards such as: Standard Contractual Clauses (SCCs) approved by the European Commission or the UK ICO. Data Processing Agreements incorporating appropriate technical and organizational safeguards. Binding Corporate Rules where applicable Clients in the MENA region, Europe, and the UK with specific data residency requirements should contact us at [email protected] to discuss deployment configurations and region selection. Data security We implement technical and organizational security measures appropriate to the risk of processing, including: Encryption of data in transit using TLS 1.2 or higher. Encryption of data at rest using AES-256 or equivalent. Role-based access control (RBAC) and principle of least privilege. Multi-factor authentication (MFA) for administrative access. Regular security assessments, vulnerability scanning, and penetration testing. Audit logging of all significant system and user actions. Incident response and data breach notification procedures. Employee training and confidentiality obligations. While we implement robust security controls, no system is completely immune to security risks. We encourage users to maintain strong, unique passwords and to report any suspected security incidents to [email protected] immediately. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by law. Data retention We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or contractual obligations. Active account data is retained for the duration of the subscription or contractual relationship. After account termination or subscription expiry, personal data is retained for a maximum of 36 months unless a longer retention period is required by applicable law or legitimate business necessity (e.g., pending disputes or regulatory investigations). Billing and transactional records may be retained for up to 7 years in accordance with accounting and tax obligations. Support and communication records are retained for up to 3 years from the date of the last interaction. Anonymised or aggregated usage data (from which individuals cannot be identified) may be retained indefinitely for analytical purposes. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures. Your privacy rights Depending on your location and the applicable law, you may have the following rights in relation to your personal data: Right Description Right to be informed You have the right to clear information about how and why we process your personal data — which this Policy provides. Right to access You may request a copy of the personal data we hold about you (a “Subject Access Request”). Right to rectification If any data we hold is inaccurate or incomplete, you may request that we correct it. Right to erasure You may request deletion of your personal data in certain circumstances (the “right to be forgotten”). Right to restrict processing You may ask us to pause processing of your data for specific purposes. Right to data portability You may obtain and reuse your personal data across different services in certain circumstances. Right to object You may object to us processing your data based on legitimate interests or for direct marketing purposes. Rights re automated decisions Where we use automated decision-making or profiling, you have the right to human review and to challenge the outcome. To exercise any of your rights, please submit a written request to: Email: [email protected] Post: Dubai Office — Unit 2107, Iris Bay Tower, Business Bay Dubai, UAE Post: Abu Dhabi Office — Office 341, Wafra Square, Reem Island, Abu Dhabi, UAE Post: KSA Regional Office — 3141 Anas Ibn Malek 8292, Po Box 13521 Riyadh, KSA We will respond to all legitimate requests within 30 days of receipt. In complex or high-volume cases, we may extend this period by up to a further 60 days, of which we will notify you. We may need to verify your identity before processing your request. If you are dissatisfied with our response, you have the right to lodge a complaint with your local data protection authority. For EEA residents, this is the supervisory authority in your Member State. For UK residents, this is the Information Commissioner’s Office (ICO) at ico.org.uk. Cookies and tracking technologies Our website and, where applicable, the Mojodat platform use cookies and similar tracking technologies to improve functionality, analyze usage, and support security. Types of cookies we use Strictly necessary cookies: Required for the platform to function correctly (login sessions, authentication tokens, security controls). These cannot be disabled. Functional cookies: Remember your preferences and settings to personalize your experience. Analytics cookies: Collect anonymized usage data to help us understand how the platform is used and identify areas for improvement. Marketing cookies (website only): Used on our public website to track campaign effectiveness. These are only activated with your explicit consent. Managing cookies You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. For more information, refer to your browser’s help documentation. Third-party links and integrations The Mojodat platform and website may contain links to third-party websites, integrations, or marketplace listings (including Microsoft Azure Marketplace and AWS Marketplace). Transtek Systems is not responsible for the privacy practices or content of those third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with Mojodat. Children’s privacy Mojodat is an enterprise software platform intended solely for use by business professionals and organizations. It is not directed at or intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a minor without appropriate consent, we will take immediate steps to delete that data. Marketing communications We may send you marketing communications about Mojodat products, updates, and events where you have: Explicitly opted in to receive such communications, or Purchased or enquired about our services, and have not opted out. You may withdraw your consent or opt out of marketing communications at any time by: Clicking the unsubscribe link in any marketing email. Updating your communication preferences in your Mojodat account settings. We will not share your contact information with third parties for their marketing purposes without your explicit consent. Changes to this privacy policy We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will: Post the updated Policy on our website and within the Mojodat platform with a revised “Effective Date”. Notify registered users by email or in-platform notification at least 14 days before material changes take effect. Where required by law, seek your consent before applying changes to existing processing activities. We encourage you to review this Policy periodically. Continued use of the platform after the effective date of any update constitutes acceptance of the revised Policy. Contact us If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us: Transtek Systems FZ LLC — Privacy Office Email: [email protected] Phone: +971 4 379 1039 | +971 56 431 6969 Post: Dubai Office — Unit 2107, Iris Bay Tower, Business Bay Dubai, UAE Post: Abu Dhabi Office — Office 341, Wafra Square, Reem Island, Abu Dhabi, UAE Post: KSA Regional Office — 3141 Anas Ibn Malek 8292, Po Box 13521 Riyadh, KSA Website: www.transtek.com Document Reference: MOJ-PRIV-POL-001 · Effective: 1 January 2026 January 01, 2026 Transtek Systems FZ LLC. All rights reserved.