DUKAAT◆Dutch–Arab Business Club◆Anno 2018◆By nomination
About us
Get to know DUKAAT’s story, vision, mission, values and goals in building relationships, exchanging knowledge and facilitating cooperation across borders.
About usBusiness services
Specify your need for a supplier, a distributor, a partner or knowledge of a new market, and explore the search, introduction and consultancy services.
Business servicesGuidance
Market and network
Membership
Discover the business membership, commercial growth and executive membership tracks, and choose the level of participation that suits your goals.
MembershipEvents
Follow the gatherings and specialised programmes of the DUKAAT community, the workshops and exhibitions, and the opportunities for professional and business introductions.
EventsContact us
Tell us what you want to achieve in business, training or partnerships, and specify the market and the service that interest you.
Contact us
How we process personal data under the GDPR.
Version: September 2026
This statement explains how Stichting Nederlands-Arabische Handelskamer, trading as DUKAAT, handles personal data: of visitors to this site, of people who write to us or use the intake, of members and of those nominated for or applying for membership, and of the contact persons of the companies we deal with.
Much of what passes through DUKAAT is company information. The General Data Protection Regulation (GDPR) applies wherever that information concerns an identifiable person — a contact person, a director, a sole trader — and this statement covers exactly that part.
This statement is published in English, Dutch and Arabic. In case of any difference between the language versions, the Dutch text prevails.
The controller for the processing described here is Stichting Nederlands-Arabische Handelskamer, a foundation under Dutch law trading as DUKAAT — Dutch–Arab Business Club, based in the Rotterdam region, the Netherlands. Visiting address: Kelvinring 11, 2952 BG Alblasserdam. Chamber of Commerce (KvK) number: 73318205.
For any question about this statement or about your data, write to [enquiries@ — domain pending].
Intake and correspondence. When you use the intake form, we receive the route you chose, your company, your name, your e-mail address, your country, your message and the language version of the site you used. When you write to us or speak with us, we keep the correspondence and our notes of the conversation.
Nominations. When a member nominates you, that member gives us your name, your company and your contact details, together with what they tell us about you.
Members. For admission and membership we process your member profile — company details, contact persons, what you offer and what you look for, your markets and sectors, and any images you provide — and your membership number. For verification we process your company registration, VAT number, website, address, export experience, certifications, the references you name, the documents you provide, and information on the persons who own or control the company. Where we ask for an identity document, we ask only for what verification requires: you may mask the photograph and national identification numbers, and we never ask for a Dutch citizen service number (BSN).
Participation and invoicing. When you take part in an event, a trade mission or an introduction, we record your participation and the practical details it requires. For invoicing we process billing details and payment records.
Technical data. When your browser requests a page, our hosting provider records technical data in server logs: IP address, date and time, the page requested and the browser used. These logs serve only to operate and secure the site. The site uses no analytics or tracking cookies (see the Cookie policy).
We do not ask for special categories of personal data, such as data concerning health, religion or political opinions; please do not send them. You are not obliged to give us any data, but without the details the intake asks for we cannot answer you, and without verification data we cannot admit you.
Most of the data we hold, you give us yourself. We also receive data from a member who nominates you; from public sources, such as trade registers, company websites and the sanctions lists of the European Union, the United Nations and the Netherlands; from the references you name; and, in the course of an introduction, from the counterparty you are introduced to. If we receive your data from someone other than you, we tell you so when we first contact you, and at the latest within one month.
If you give us the details of another person — a colleague, a reference — please let them know, and point them to this statement.
To answer an intake, to assess admission, and to perform the membership and any project work you commission: replying, verifying, matching, introducing, organising events and trade missions, sending members the newsletters and alerts that belong to their level, and invoicing. Basis: steps taken at your request before an agreement, and the agreement itself (GDPR art. 6(1)(b)).
To comply with legal obligations, such as the statutory duty to keep financial records and, where the law requires it, the identification of the parties we work with and checks against sanctions lists. Basis: legal obligation (art. 6(1)(c)).
To verify counterparties before anyone is introduced, to assess a nomination or an application, to keep a record of the introductions we make, to secure this site and our systems against misuse, and to establish or defend legal claims. Basis: our legitimate interests, and those of our members, in doing business with parties who are who they say they are (art. 6(1)(f)). We weigh those interests against yours, and you may object (see article 10).
To publish information about you or your company in the member directory, in DUKAAT Market and in Stories. Basis: your consent (art. 6(1)(a)). You may withdraw it at any time; withdrawal does not affect the lawfulness of publication before it, and we then remove the item without undue delay. The page ‘Publication of member data’ sets out what is published and how.
Our service providers process data on our instructions and under a processing agreement: Vercel, which hosts this site; Resend, which delivers the messages sent through the intake form to our mailbox; and the providers of our e-mail, office and accounting software.
Other parties receive data only where our work requires it: a counterparty, a specialist or an ambassador, as part of an introduction you asked for or with your consent; other members and visitors to this site, for what you have agreed to publish; the accountants and legal advisers we engage, who are bound to confidentiality; and public authorities, where the law obliges us.
Introductions between Europe and the Arab world can mean that data travels to countries outside the European Economic Area, and the service providers that host this site and deliver its intake messages are based in the United States. Such transfers take place only with the safeguards the GDPR requires, such as the Standard Contractual Clauses of the European Commission. The page ‘Transfers outside the EU’ explains when data travels, what travels and how to obtain a copy of the safeguards.
We keep personal data no longer than its purpose requires.
Intakes, nominations and applications that lead to neither a membership nor a project engagement: [12] months after our last contact.
Membership and project data — profile, verification data, correspondence and project files: for the duration of the membership or the engagement, and then no longer than [24] months, unless a statutory period requires longer. A published profile is taken down without undue delay when the membership ends or you withdraw your consent.
Invoices, payment records and other financial records: seven years, as Dutch tax and civil law require.
Server logs: for the limited period set by our hosting provider, after which they are deleted automatically. Where data is needed to establish or defend a legal claim, we keep it until that matter is closed.
We take appropriate technical and organisational measures against loss, misuse and unauthorised access. This site is served only over an encrypted connection; access to members’ files is limited to the people who need it for their work, each bound to confidentiality; and our service providers are bound by processing agreements.
Should a personal data breach occur that poses a risk to you, we report it to the Autoriteit Persoonsgegevens within 72 hours and, where the risk is high, inform you without undue delay.
Technology narrows the search; people verify. Admission decisions are taken by people, and a person reviews every match before it reaches you — we do not send lists. We do not take decisions based solely on automated processing, including profiling, that have legal effects for you or affect you in a similarly significant way.
You have the right to access the personal data we hold about you; to have it corrected or erased; to have its processing restricted; to receive the data you gave us in a structured, commonly used format and have it passed to another party; and to object to processing based on legitimate interests. Where processing rests on your consent, you may withdraw that consent at any time.
Send your request to [enquiries@ — domain pending]. We may ask you to confirm your identity. We answer within one month; for complex requests this may be extended by up to two further months, in which case we tell you why within the first month. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.
Questions about this statement go to [enquiries@ — domain pending], or by post to Stichting Nederlands-Arabische Handelskamer, Kelvinring 11, 2952 BG Alblasserdam, the Netherlands.
If you believe we handle your data incorrectly, please tell us first, so that we can put it right. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority of the EU country where you live or work.
We amend this statement when our services or the law change. The version date at the top shows which text applies. Members are informed of material changes by e-mail before they take effect.
