Privacy Policy

1. Data Controller

The Swedish Accreditation Center ("SAC", "we", "us") is the data controller for personal data collected through this platform. Our registered address is Dubai Knowledge Park, Block 2A, Office 301, Dubai, UAE.

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, password (hashed), role
• Institutional data: Institution name, type, license number, address, contact information
• Application data: Self-assessment responses, quality documentation, accreditation scope
• Uploaded documents: Policies, quality reports, evidence files
• Usage data: IP address, browser type, access timestamps (for security and audit)

3. Legal Basis

We process your data under the following legal bases as defined by UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection:

• Consent: Obtained at registration via mandatory consent checkbox
• Legitimate interest: Necessary for the performance of the accreditation service you have requested
• Legal obligation: Audit log retention as required by UAE regulatory frameworks

4. Data Residency

All personal data and institutional data is stored exclusively within the United Arab Emirates, hosted on AWS infrastructure in the me-central-1 region (UAE). No data is transferred outside the UAE under any circumstances.

5. Data Retention

Account and application data is retained for the duration of your accreditation relationship with SAC, plus 7 years after the last accreditation cycle for regulatory compliance. Audit logs are retained indefinitely as required by UAE law.

6. Your Rights

Under UAE data protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing in certain circumstances

To exercise any of these rights, contact us at info@sac-sweden.com.

7. Security

We implement appropriate technical and organizational security measures, including: encryption at rest and in transit, bcrypt password hashing, role-based access controls, immutable audit logging, and rate-limited authentication endpoints.

8. Contact

For any privacy-related enquiries, contact our Data Protection Officer at info@sac-sweden.com or write to: Swedish Accreditation Center, Dubai Knowledge Park, Block 2A, Office 301, Dubai, UAE.