Privacy Policy
Last updated: 12 September 2026
This notice describes which personal data we process when you visit this website or contact us, on what legal basis, and what rights you have.
1. Controller
The controller for the processing of personal data on this website is BGS LLC-FZ.
The Meydan Hotel, Grandstand, 6th floor, Meydan Road, Nad Al Sheba
Dubai, United Arab Emirates
Represented by Alexander Herti
Email: alex.herti@business-growth-solutions.com
We have not appointed a data protection officer because the statutory conditions for doing so do not apply to us. For any data protection question, please use the address above.
2. Representative in the European Union
Our company is established outside the European Union but directs its offering at people within the Union. Under Article 27 GDPR we therefore designate a representative in the Union. That designation is currently being arranged. Until it is complete, you can reach us on all data protection matters directly at the contact details in section 1.
3. Principles
We process personal data only as far as this is necessary to operate this website and to answer your enquiries. We do not sell data, we run no web analytics, no profiling and no advertising trackers on this website, and we set no cookies for advertising purposes.
Where legal bases are named below, they refer to Article 6(1) GDPR.
4. Visiting the website and server logs
When you open this website, technically necessary data is transmitted to our hosting provider and logged there briefly. This covers the shortened IP address, the date and time of access, the address requested, the referring page, the browser used and the operating system.
This processing is necessary to deliver the page, to keep the service secure and to fend off attacks. The legal basis is our legitimate interest under (f) in secure and uninterrupted operation.
Our hosting provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes the data named above on our behalf under a data processing agreement. Delivery runs over a worldwide server network, so transfer to third countries cannot be ruled out. See section 10.
5. Storage in your browser
We do not set cookies. We store two items in your browser's local storage. They never leave your device and we cannot read them.
The first remembers which language version you selected. The second remembers that you have acknowledged the notice at the foot of the page, so it does not reappear on every visit.
Both are technically required to provide a function you explicitly requested. The storage relies on section 25(2) no. 2 TDDDG and therefore requires no consent. You can delete both at any time through your browser settings.
6. Booking a call through Calendly
On most pages we embed a scheduling calendar provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. The calendar loads when the page is opened. Your IP address is transmitted to Calendly in the process, and Calendly may store or read information on your device.
If you book a call, we process the details you provide, usually name, email address, time zone and what you tell us about your enquiry. We use these details solely to prepare and hold the conversation.
The legal basis for processing in connection with a booking is (b), since the processing serves pre-contractual measures taken at your request. For embedding the calendar on the page we rely on (f), our legitimate interest in straightforward scheduling.
If you would rather not use it, please do not book through the calendar and send us an email to the address in section 1 instead.
7. Contacting us
If you write to us by email, we process the details you provide in order to answer your enquiry. We do not operate a contact form on this website.
The legal basis is (b) where your enquiry is aimed at concluding or performing a contract, and otherwise (f), our legitimate interest in answering enquiries.
8. Links to social networks
In the footer we link to our profiles on LinkedIn, Instagram, Facebook, YouTube and X. These are plain links, not embedded content. Simply opening our page transmits no data to these providers. Only when you click one of these links do the privacy terms of the respective provider apply.
9. Transfers to third countries
Our company is established in the United Arab Emirates. For the services named in sections 4 and 6, processing may take place in the United States.
For the United States there is an adequacy decision of the European Commission covering companies certified under the EU-US Data Privacy Framework. Where a provider is not certified, we base the transfer on the European Commission's standard contractual clauses under Article 46(2)(c) GDPR.
For the United Arab Emirates there is no adequacy decision. We point out that third countries may have a level of protection that does not match that of the European Union and that legal remedies may be harder to enforce.
10. Recipients
We pass on personal data only as far as necessary for the purposes named. Recipients are our hosting provider, the scheduling provider, our email provider and, within the limits set by law, tax advisors and public authorities. We have concluded agreements with processors under Article 28 GDPR.
11. Retention
Server logs are deleted or anonymised after thirty days at the latest. Data from a booking or an enquiry is deleted once the matter has been dealt with conclusively and no statutory retention obligations stand in the way. Documents subject to commercial or tax retention rules are kept for six or ten years respectively.
12. Your rights
You have the right of access to the data processed about you under Article 15 GDPR, to rectification of inaccurate data under Article 16, to erasure under Article 17, to restriction of processing under Article 18 and to data portability under Article 20.
Under Article 21 GDPR you have the right to object at any time, on grounds relating to your particular situation, to processing that we base on a legitimate interest. We will then stop processing the data unless we can demonstrate compelling legitimate grounds.
Where processing is based on consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal is not affected.
An informal message to the address in section 1 is enough to exercise your rights.
13. Right to lodge a complaint
Under Article 77 GDPR you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your data infringes the General Data Protection Regulation. The competent authority is the one at your habitual residence, your place of work or the place of the alleged infringement.
14. No automated decision-making
Automated individual decision-making, including profiling, within the meaning of Article 22 GDPR does not take place.
15. Whether you must provide data
Providing your data is neither required by law nor by contract. Without a name and an email address, however, we cannot deal with an enquiry or a booking.
16. Changes to this notice
We update this notice when the legal situation or the services we use change. The version published on this page, bearing the date above, is the one that applies.