Privacy & Personal Data Protection Policy
Last updated: 28 September 2026
1. Who we are
DAWAR ALSHEMAS BUSINES LLC, Commercial Registration No. 1510059, trading as DSA Engineering, is a company registered in the Sultanate of Oman.
We process personal data in accordance with the Personal Data Protection Law of the Sultanate of Oman and its applicable regulations.
Personal Data Protection Officer:
Matthias Weber
Email: info@dsa-solar.com
2. What information we collect
Depending on your enquiry or project, we may collect information such as:
your name, telephone number and email address;
address or project location;
information about your proposed or existing project;
technical, quotation, contract and payment information;
correspondence by email, telephone or WhatsApp;
photographs and technical information obtained during site visits;
electricity bills, connection information and other documents relevant to a project; and
other information that you provide to us for an enquiry, project or service.
In limited cases, we may process a Civil ID or identification number where this is required for a specific authorisation, for example when requesting electricity connection or permitted PV capacity information from Nama.
We do not normally require customers to provide passport or ID copies unless specifically necessary for a defined purpose.
3. How and why we use your information
We may use personal data to:
respond to enquiries;
evaluate and prepare quotations or proposals;
design, plan, execute, supervise or maintain projects;
communicate with customers and prospective customers;
obtain information or approvals from utilities and authorities where authorised;
administer contracts, payments, warranties and technical support;
maintain business and project records; and
comply with legal, accounting or regulatory requirements.
Where required by law, we obtain your explicit consent before processing your information. In other cases, processing may be permitted because it is necessary for a contract, a legal obligation or another circumstance permitted by law.
We do not sell personal data and we do not currently use customer information for newsletters or unsolicited marketing.
4. Website and communications
Information submitted through our website contact form is used to respond to your enquiry and may subsequently form part of our customer or project records.
We also communicate with customers through email, telephone and WhatsApp. Information relevant to a project may be transferred from these communications into our project files or customer records.
Our website uses normal hosting and technical traffic information necessary to operate and monitor the website. We do not currently use Google Analytics, advertising pixels or behavioural advertising tools.
5. Where information is stored
Our business systems include services provided by Hostinger, Microsoft 365/OneDrive, HubSpot and WhatsApp/Meta, as well as secure company devices and backups.
Because some of these providers operate internationally, personal data may be stored or processed outside the Sultanate of Oman. Where this occurs, we handle international processing and transfers in accordance with applicable Omani data protection requirements and use appropriate security and contractual safeguards.
Where explicit consent for an international transfer is required by law, we obtain such consent.
6. Who we may share information with
Where necessary for the relevant purpose, information may be shared with:
Nama or other electricity-sector entities;
government authorities or regulators;
banks and payment providers;
contractors or subcontractors working on a project;
professional advisers such as accountants, insurers or legal advisers; and
hosting, software, communications and other service providers used to operate our business.
We limit disclosures to information reasonably required for the relevant purpose and may also disclose information where required by law or a competent authority.
7. How long we keep information
We keep personal data only while there is a continuing purpose for doing so.
Information relating to a genuine enquiry or prospective project may generally be retained for up to five years after the last substantive contact where the potential project or business relationship reasonably remains open.
Information will be deleted earlier where the purpose for which it was collected has clearly ended.
Where an enquiry becomes an active project, contract, warranty, operation and maintenance relationship or continuing technical-support matter, relevant information may be retained for as long as it remains necessary for those purposes.
Records may also be retained where required by law or in connection with an existing dispute.
Identification information collected for a specific authorisation or regulatory purpose is retained only for as long as necessary for that purpose or an applicable legal requirement.
8. Security
We use appropriate technical and organisational measures to protect personal data, including access restrictions, multi-factor authentication, device encryption, secure backups and physical protection of paper records.
Access to customer information is limited to DSA Engineering's directors and authorised administrative support where access is necessary for their work and subject to confidentiality requirements.
9. Your rights
Subject to applicable law, you may request to:
withdraw consent previously given;
correct, update or block your personal data;
obtain a copy of your personal data;
transfer your data to another controller where applicable; or
erase personal data that is no longer required.
You also have rights relating to notification of qualifying personal data breaches and may submit a complaint to the Ministry of Transport, Communications and Information Technology where you believe your personal data has been processed contrary to applicable law.
To exercise your rights or ask a privacy-related question, contact:
Matthias Weber
Personal Data Protection Officer
info@dsa-solar.com
We may request reasonable information to verify your identity before acting on a request. Requests will be handled within the period required by applicable law.
10. Changes to this policy
We may update this policy when our business practices, technology providers or legal obligations change. The latest revision date will be shown at the top of this page.