Last updated: 20 September 2026
Scope and controller
This privacy notice governs personal data processed through sy.certificatoiwz.org, the Syria General Agency contact channels and related certification-enquiry workflows. The primary Certification Body is CERTIFICATO IWZ FZCO, Dubai. Local enquiries may be received and operationally coordinated by ETT Global Elite Investment LLC in its capacity as Syria General Agency.
Data we may process
Depending on the request, we may process identity and contact data, organisation details, professional role, certification scope information, site and workforce data, communications, uploaded documents, technical logs, consent records and information reasonably necessary to evaluate or route a certification request.
Purposes
Data are processed to answer enquiries, evaluate certification requests, prepare offers, coordinate audit planning, administer contracts, meet accreditation and legal obligations, protect information systems, prevent abuse and establish or defend legal claims.
Recipients
Certification-related information may be transferred to CERTIFICATO IWZ FZCO in Dubai and to competent auditors, technical reviewers or certification-decision personnel subject to confidentiality and impartiality requirements.
International transfers
Because the Certification Body is established in the United Arab Emirates and the Agency operates in Syria, data may be processed across borders with appropriate contractual, organisational and security measures.
Retention
Data are retained only for as long as required by the purpose, certification-cycle rules, accreditation requirements, contractual obligations, limitation periods and applicable law.
Rights
Subject to applicable law, individuals may request access, correction, deletion, restriction or information regarding processing by writing to syrian@certificatoiwz.org or info@certificatoiwz.ae.
Security
Risk-based safeguards include access control, least privilege, secure transmission, logging, backup and incident-management measures.