Falkon BioGreen Energy
Privacy Policy
1. About This Policy
Falkon BioGreen Energy Limited ("Falkon", "we", "us" or "our") respects the privacy of everyone we deal with. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have over it.
It covers personal data collected through falkonbioenergy.com (the "Website") and, more broadly, personal data we handle in the ordinary course of our business — for example when you write to us, meet us, or take part in a project discussion. It should be read together with our Cookies Policy and our Legal Notice and Terms of Use.
Falkon is a company registered in the Masdar City Free Zone, Abu Dhabi, United Arab Emirates, and works with counterparties in the Gulf, Europe and Latin America. This Policy has therefore been prepared so as to meet, as applicable to each individual, the standards of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"), Regulation (EU) 2016/679 ("GDPR") and its United Kingdom equivalent, and Colombian Law 1581 of 2012 and Decree 1377 of 2013.
2. Who Is Responsible for Your Data
Falkon BioGreen Energy Limited is the controller of the personal data described in this Policy, meaning that we decide why and how it is processed. Our contact details are:
Falkon BioGreen Energy Limited
Masdar City Free Zone, Abu Dhabi, United Arab Emirates
E-mail: alejandro.luengas@falkonbioenergy.com
Website: falkonbioenergy.com
Any question about this Policy, and any request to exercise your rights, may be sent to the e-mail address above. We do not currently operate at a scale that requires the appointment of a data protection officer; enquiries are handled directly by our management.
3. Who This Policy Applies To
This Policy applies to:
- visitors to the Website;
- people who contact us through the Website, by e-mail or by telephone;
- representatives of companies, institutions, investors, suppliers and advisers with whom we discuss or develop projects; and
- people who send us an application or an expression of interest in working with us.
Where we hold the details of an individual because of the role they hold at an organisation, we treat those details as professional contact data and use them only for the purposes described in section 5.
4. What Personal Data We Collect
4.1 Information you give us
- Contact details — name, e-mail address, telephone number, organisation and job title.
- The content of your communications — the message you send through the contact form, your e-mails and letters, and our replies, together with notes of calls and meetings where we take them.
- Project and commercial information — documents, presentations and data that you or your organisation share with us during a discussion, to the extent these contain personal data such as the names and roles of the people involved.
- Application information — if you write to us about working with Falkon, the curriculum vitae and any supporting material you choose to send.
4.2 Information collected automatically
When you visit the Website, our servers record standard technical information, including the IP address of your device, the date and time of the request, the page requested, the response status, and the browser and operating system type. The Website does not use cookies. Both matters are explained in full in our Cookies Policy.
4.3 Information from other sources
In the ordinary course of business development we may obtain professional contact details from publicly available sources such as corporate websites, public registries, industry directories, professional networks, conferences and introductions made by mutual contacts. We collect only what is necessary to make a professional approach, and we tell you where we obtained your details if you ask.
4.4 Data we do not seek
We do not seek, and ask you not to send us, special categories of personal data — information about health, religious or political beliefs, racial or ethnic origin, trade union membership, biometric or genetic data, or sexual orientation — nor government identification numbers, payment card numbers or bank account details, unless a specific transaction genuinely requires them and we have asked for them in writing.
5. Why We Use Your Data, and on What Legal Basis
We use personal data only for the purposes set out below. The third column states the legal basis under the GDPR; the equivalent basis under UAE and Colombian law is explained after the table.
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Responding to your enquiry and maintaining a record of the exchange | Contact details; content of your message | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)), or our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f)) |
| Developing, negotiating and managing projects, partnerships and supplier relationships | Professional contact details; project and commercial information | Performance of a contract, or our legitimate interest in conducting our business (Art. 6(1)(b) and (f)) |
| Making professional approaches to potential partners, investors and counterparties | Professional contact details obtained as described in section 4.3 | Our legitimate interest in business development, balanced against your interests and subject to your right to object (Art. 6(1)(f)) |
| Sending updates or commercial communications where you have asked to receive them | Name and e-mail address | Your consent, which you may withdraw at any time (Art. 6(1)(a)) |
| Operating, securing and maintaining the Website | Technical data and server logs | Our legitimate interest in keeping the Website available and secure (Art. 6(1)(f)) |
| Considering an application or expression of interest in working with us | Application information | Steps taken at your request prior to entering into a contract, and our legitimate interest in assessing candidates (Art. 6(1)(b) and (f)) |
| Complying with legal, regulatory, tax and accounting obligations, and establishing or defending legal claims | Any of the above, as required | Compliance with a legal obligation and our legitimate interest in protecting our rights (Art. 6(1)(c) and (f)) |
Under UAE law, processing is carried out on the bases permitted by Article 4 of the UAE PDPL, principally your consent, the performance of a contract or of steps requested by you, the protection of our legitimate interests, and compliance with legal obligations.
Under Colombian law, where Law 1581 of 2012 applies to an individual, we process personal data on the basis of the prior, express and informed authorisation given when the data is provided to us, or on another basis permitted by Article 10 of that Law. You may withdraw that authorisation at any time, subject to any legal or contractual obligation that requires us to retain the data.
We do not use personal data to make decisions about you by automated means alone, and we do not carry out profiling.
6. Commercial Communications
We do not operate a mass mailing list and we do not send unsolicited bulk commercial e-mail. Where we do send updates about Falkon’s activities, we send them only to people who have asked to receive them or with whom we have an ongoing professional relationship, and every message includes a simple way to stop receiving them. Asking us to stop takes effect immediately and does not affect our ability to reply to a matter you have raised with us.
7. Who We Share Your Data With
We do not sell, rent or trade personal data. We share it only in the following circumstances:
- Service providers who work on our behalf, including Hostinger (hosting and domain), our business e-mail and file storage provider, and providers of communication and productivity tools. They act on our instructions, under contract, and may not use the data for their own purposes.
- Professional advisers — lawyers, accountants, auditors and consultants — where their advice requires it, and subject to duties of confidentiality.
- Counterparties in a project, where sharing a contact name or role is necessary to advance a discussion in which you or your organisation is involved. Commercially sensitive material is shared only under a confidentiality agreement.
- Authorities, courts and regulators, where we are required to disclose information by law or where disclosure is necessary to establish, exercise or defend legal claims.
- A successor, if Falkon is reorganised, or if all or part of its business is transferred, in which case the recipient remains bound by this Policy until it publishes its own.
8. International Transfers
Falkon operates across the Gulf, Europe and Latin America, and our service providers may store or process data on servers outside the United Arab Emirates and outside your own country. Where personal data is transferred across borders, we do so under contractual arrangements requiring an adequate level of protection, consistent with Articles 22 and 23 of the UAE PDPL, Chapter V of the GDPR — including, where applicable, the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum — and Article 26 of Colombian Law 1581 of 2012. You may ask us for further information about the arrangements that apply to your data.
9. How Long We Keep Your Data
We keep personal data only as long as we need it for the purpose for which it was collected, and then delete it or render it anonymous. As a guide:
| Type of data | Retention |
|---|---|
| Enquiries that do not lead to a relationship | Up to 24 months from the last exchange |
| Professional contacts and business development records | For as long as the relationship is active, and up to 36 months after the last meaningful contact |
| Project, contract and commercial records | For the duration of the relationship and for the period required by applicable law and limitation periods thereafter |
| Accounting and tax records | For the period required by applicable law, normally at least five (5) years |
| Applications that do not lead to an engagement | Up to 12 months, unless you ask us to delete them sooner |
| Website server logs | No longer than 12 months |
Where a legal claim, investigation or audit is reasonably foreseeable, we may keep the relevant records for longer, and only for that purpose.
10. How We Protect Your Data
The Website is served over an encrypted connection. We use reputable providers for e-mail and file storage, protect accounts with strong authentication, limit access to personal data to the people who need it, and keep the amount of data we hold to what is necessary. No system can be guaranteed to be completely secure, and we therefore ask you not to send confidential or sensitive material through the Website contact form; if a matter is confidential, ask us for a secure channel first.
If a security incident occurs that is likely to affect your rights, we will notify the competent authority and, where required, the individuals concerned, within the periods set by applicable law.
11. Your Rights
Depending on the law that applies to you, you have some or all of the following rights:
- Access — to be told whether we hold data about you and to receive a copy of it.
- Correction — to have inaccurate or incomplete data corrected or completed.
- Deletion — to have your data deleted where we no longer have a valid reason to keep it.
- Restriction — to have the use of your data limited while a question about it is resolved.
- Objection — to object to processing based on our legitimate interests, including business-development approaches, which we will stop unless we have compelling grounds to continue.
- Portability — to receive data you provided to us in a structured, commonly used electronic format.
- Withdrawal of consent — where we rely on your consent or, in Colombia, on your authorisation, to withdraw it at any time without affecting processing already carried out.
- Complaint — to complain to the competent supervisory authority.
To exercise any of these rights, write to alejandro.luengas@falkonbioenergy.com. We may need to verify your identity first. We will respond within thirty (30) days, and sooner where the law requires it — in particular, for individuals in Colombia, within ten (10) business days for queries and fifteen (15) business days for complaints, in accordance with Articles 14 and 15 of Law 1581 of 2012, and for individuals in the European Economic Area or the United Kingdom, within one month as required by Article 12 of the GDPR. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
If you are not satisfied with our response, you may complain to the UAE Data Office in the United Arab Emirates; to your national data protection supervisory authority in the European Economic Area; to the Information Commissioner’s Office in the United Kingdom; or to the Superintendencia de Industria y Comercio in Colombia.
12. Children
Falkon’s activities and the Website are addressed to businesses, institutions and professional audiences. They are not directed at children, and we do not knowingly collect personal data from them. If you believe that a child has provided us with personal data, please contact us and we will delete it without undue delay.
13. Changes to This Policy
We may update this Policy to reflect changes in our activities, in the services we use or in applicable law. The version in force is always the one published on this page, identified by its effective date and version number. Where a change materially affects how we use personal data, we will take reasonable steps to bring it to the attention of the people concerned.
Version history: Version 1.1 — 20 September 2026 — first publication. Version 1.2 — 28 September 2026 — company details updated following incorporation in the Masdar City Free Zone. Version 1.3 — 5 October 2026 — section 4.2 updated to reflect that the Website does not use cookies. Version 1.4 — 9 October 2026 — references to a content-delivery network removed, as the Website is no longer delivered through one.
14. Contact and Applicable Law
Questions about this Policy may be addressed to Falkon BioGreen Energy Limited, Masdar City Free Zone, Abu Dhabi, United Arab Emirates, at alejandro.luengas@falkonbioenergy.com.
This Policy is governed by the laws of the United Arab Emirates as applied in the Emirate of Abu Dhabi, without prejudice to any mandatory rights you may have under the law of your own country of residence. Where this Policy is made available in more than one language, the English version prevails in the event of any discrepancy.