Legal
Privacy notice
This notice explains what personal data this website collects, why, how long it is kept and what rights you have over it. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).
Last updated: 19 August 2026
Who is responsible
The controller of your personal data is GEP Finance L.L.C-FZ, a limited liability company registered in Meydan Free Zone, Dubai, United Arab Emirates, licence No. 2650844.01, of Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
For any question about this notice or about your data, write to info@gep.finance.
What we collect
We collect only what you give us and what a web server necessarily records.
Enquiry form
When you use the contact form we receive your name, email address, company name if you provide one, the content of your message, your IP address and the time of submission. The IP address and timestamp are recorded to help identify automated abuse of the form.
Server logs
Our hosting provider records standard access data for every request: IP address, date and time, the page requested, referring page, and browser identification. These logs exist to operate and secure the service and are retained by the provider under its own policy.
Cookies
This site sets one cookie: a temporary PHP session identifier used to carry your form entries and any error message between pages. It contains no personal data, expires when you close the browser, and is strictly necessary for the form to work. We use no analytics, no advertising and no tracking cookies.
Third parties on the page
None. Fonts, stylesheets and images are served from this domain, so loading a page does not disclose your IP address to any third-party provider.
Why we use it, and on what legal basis
We use the information from the enquiry form for one purpose only: to read your message and respond to it. The legal basis is Article 6(1)(b) GDPR — steps taken at your request before entering into a contract — and, where your enquiry does not lead to a contract, Article 6(1)(f), our legitimate interest in answering people who approach us.
Server logs are processed on the basis of Article 6(1)(f), our legitimate interest in keeping the site available and secure.
We do not use your data for marketing, we do not build profiles, and we do not make automated decisions about you.
Who else sees it
Your message is delivered to our own mailbox. The website and that mailbox are operated on our behalf by our hosting provider, Hostinger, acting as a processor on servers located in Germany. Within the GEP Technik group, your enquiry is shared only with the people who need it in order to answer you.
We do not sell personal data and we do not share it with third parties for their own purposes. We may disclose data where we are required to by law.
Transfers outside the European Economic Area
We are established in the United Arab Emirates. The UAE is not the subject of an adequacy decision by the European Commission, so when we read and answer your enquiry your data is accessed from outside the EEA. Where you contact us with a view to a possible engagement, that transfer is necessary for the performance of a contract with you or for pre-contractual steps taken at your request, and is made on the basis of Article 49(1)(b) GDPR. Data at rest remains on servers in Germany.
How long we keep it
Enquiries and the correspondence arising from them are kept for 24 months from the last exchange, after which they are deleted, unless we are required to keep them longer to comply with a legal obligation or to establish, exercise or defend a legal claim. Server logs are retained by our hosting provider for a short period under its own retention policy.
Your rights
Under the GDPR you may ask us to confirm what data we hold about you and give you a copy of it; to correct it if it is inaccurate; to erase it; to restrict how we use it; and to provide it in a portable form. You may object at any time to processing we carry out on the basis of legitimate interest.
Write to info@gep.finance and we will respond within one month. There is no charge. If you believe we have handled your data improperly, you may also complain to the data protection supervisory authority in the EU country where you live or work.
Security
The site is served only over an encrypted connection (HTTPS); requests over plain HTTP are redirected. Access to the mailbox that receives enquiries is restricted to the people who need it. No transmission over the internet can be guaranteed completely secure, but we take reasonable measures appropriate to the sensitivity of the data involved.
Changes
If we change how this site handles personal data we will update this page and the date shown at the top. Material changes will be described here rather than made silently.