Information about cookies and similar technologies
1. Responsible person and scope
Responsible for the operation of https://www.AlexBodi.com and the processing described in this statement is:
SCANDIC ASSETS FZCO
Dubai Silicon Oasis DDP
Building A1/A2
342001 Dubai / UAE, Business License Number 050-3124863. You can reach us at [email protected] and by phone at +971 56 929 86 – 90.
The legal notice contains further information on company law.
This declaration supplements the data protection declaration. In particular, it explains how to store information on your device and read out information that has already been stored. The legal requirements for this must be distinguished from the requirements for subsequent processing of personal data. Lawful storage does not automatically allow any subsequent use of the data obtained.
The categories below are a framework and not a claim that all of the services described on this website are used.
2. What cookies and similar technologies are
Cookies are small pieces of information that a browser stores for a website. For example, you can maintain a requested session or recognize a selection that has been made. Session cookies are usually deleted at the end of the browser session in question; Permanent cookies generally remain stored until the end of their specified lifespan or until they are deleted. The specific technical configuration is decisive.
Comparable functions can in particular include local storage, session storage, indexedDB, integrated scripts, pixels, device identifiers or the merging of device information. What is important is not the product name, but rather what a technology actually stores, reads, transmits and for what purpose it is used. A process without classic cookies may also require consent.
A technical access data record generated by our server when you access a page is not a cookie for that reason alone. However, the processing of IP addresses and other personal information in server logs is subject to separate data protection requirements. Conversely, access to non-personal information on the device may also be subject to legal consent requirements.
3. Legal basis: Device access and personal data
For users to whom German law applies, § 25 of the Telecommunications Digital Services Data Protection Act (TDDDG) is particularly relevant. At the European level, the protection of the terminal device is based on Article 5 Paragraph 3 of Directive 2002/58/EC and its respective national implementation. Additional or different national requirements may therefore apply in other countries.
In principle, we require prior consent to store or read information. An exception may be considered in particular if this is used exclusively for the transmission of messages over a public telecommunications network or is absolutely necessary so that an expressly requested digital service can be provided. Economic usefulness, a mere convenience of the provider or a general reference to security do not automatically make a technology absolutely necessary.
If personal data is subsequently processed, there must also be a legal basis in accordance with Article 6 GDPR. Depending on the specific processing, this may in particular be your consent, the necessity for a contract you have requested or a legitimate interest that predominates after weighing up your interests. A legitimate interest does not replace the consent required under device law. Special categories of data are subject to additional requirements.
4. Essential features
Only technologies that are actually necessary may be treated as absolutely necessary. This includes, for example, a login session that you have requested, a specific security function to protect this session or the storage of your data protection decision, provided there is no less intrusive, functional solution for this. Whether an exception applies is checked for each individual process and purpose.
The required technologies may not be used for independent advertising, comprehensive profiling or unrelated performance measurement. A mixed technology does not require consent altogether just because it also fulfills a necessary function. Unnecessary functions must be separated or prevented until effective consent has been given.
Required technologies actually used are managed by SCANDIC ASSETS FZCO.
5. Optional features, reach measurement and advertising
Additional convenience functions, embedded content from external providers, reach measurement and personalized advertising may only be activated to the extent permitted by law. A functional category must not obscure the fact that an external provider also processes data for its own advertising or analysis purposes. Corresponding purposes and recipients must be clearly separated.
An optional reach measurement can, for example, record which pages are accessed and how users interact with the offer. Whether such data is personal depends on the overall processing, including identifiers and merging. A shortened IP address or a pseudonymous identifier does not automatically mean complete anonymization.
Advertising and marketing technologies can enable recognition across different offers and the creation of interest profiles. Such technologies are not generally approved by this declaration. Use requires prior specific information and the necessary, voluntary consent. The rejection must not be circumvented using preset consents or misleading buttons.
Optional services actually used: In particular, no use of Google Analytics, Meta Pixel, advertising networks or social media plug-ins can be derived from this declaration.
6. Selection, rejection and revocation
If technologies requiring consent are used, you will be given a real choice before they are activated. You can agree, reject all unnecessary technologies, or make a differentiated selection. A rejection should be just as easy to access and understand as an agreement. Required features are clearly explained as such and are not confused with optional purposes.
Consent is not granted by reading this statement, continuing to scroll, continuing to use the website or simply closing an information window. Checked boxes do not constitute effective active consent. We do not associate consent with unnecessary information about your identity.
You can change your selection at any time via [add actual name and accessible link of the “Cookie Settings” function] or revoke it with effect for the future. A revocation must be as simple as granting it. It does not affect the lawfulness of processing that was previously based on effective consent. After revocation, future processes based on this will be prevented; Existing data will be deleted or withdrawn from other processing unless a separate legal basis permits their retention.
We may store the decision made to a limited extent in order to implement it and to be able to demonstrate any necessary consent. For this purpose, the solution actually used, the stored evidence data and its deadlines must be disclosed: The provider is SCANDIC ASSETS FZCO, the deletion deadline is 31. December of a current year.
7. Embedded content, external connections and server-side procedures
A simple link to another website is different from a video, a map, an external font or social media content that is already loaded when the page is viewed. When external resources are loaded directly, the IP address and technical retrieval data, among other things, can be transmitted to third parties. The legal review is based on the actual process and not on the visual design of the element.
Where prior consent is required, external content will only be activated after the relevant decision has been made. A two-click solution must actually prevent the processing requiring consent from taking place before the first conscious activation step. Simply covering the visible content is not enough.
Server-side tracking, a so-called consent mode or the term “cookieless” do not create a general exception. Here too, data flows, device access, identifiers, recipients, purposes and legal bases must be checked. A rejection may not be circumvented by equivalent hidden transmissions under a different technical name.
8. Binding technology directory
The list below must be completed for actual operations before publication. Each entry must clearly identify a service and all associated storage or access operations. If names can change dynamically, a meaningful name pattern and its meaning are also specified.
Provider and responsible legal entity:
SCANDIC ASSETS FZCO
Dubai Silicon Oasis DDP Building A1/A2
342001 Dubai / UAE
Business License Number 050-3124863
Storage period in the device:
The deletion deadline is 31. December of a current year
Server-side retention:
The deletion deadline is 31. December of a current year
Revocation and provider information must be sent by post to:
SCANDIC ASSETS FZCO
Dubai Silicon Oasis DDP Building A1/A2
342001 Dubai / UAE
Business License Number 050-3124863
9. Service providers, CRIF and Darktrace
The contractually agreed cooperation with CRIF Germany in the areas of KYC, KYB and AML does not mean that CRIF automatically sets cookies for all website visitors. KYC refers to the identity verification of customers, KYB the verification of companies and AML measures against money laundering. Technical integration into a specific testing process must be recorded separately and explained accordingly before it begins.
The technical monitoring of certain applications is supported by Darktrace according to the intended security architecture. This does not automatically mean that Darktrace sets a browser cookie on this website or processes all visitor activities. Security functions actually used on the end device are disclosed in the directory. A security designation alone replaces neither the necessity test nor the balancing of interests under data protection law.
The data protection declaration contains more information about recipients, roles, data processing and possible international transfers. This cookie statement does not contain a blanket permission to transfer data to all partners affiliated with the company.
10. Storage periods and browser settings
The duration of storage in the browser and storage with a provider are different sizes. Both must be specifically stated where relevant. There is no uniform European standard duration for all technologies and purposes that replaces every test. A deadline is set based on the necessary purpose, the intensity of the intervention and the respective legal requirements.
You can also delete stored information via your browser settings and limit future storage. This can affect individual functions. Deleting data in the browser does not automatically remove data that has already been legally or unlawfully transmitted to a provider and does not always replace the revocation of consent stored there.
Browser signals are taken into account according to their technical and legal liability. We do not claim across the board that every signal such as “Do Not Track” is automatically implemented as a legally effective revocation by all services used. A reliably accessible setting option therefore remains necessary.
11. Rights, Complaints and Updates
Your rights to information, correction, deletion, restriction, data portability and objection as well as the right to complain to a data protection supervisory authority are based on the legal requirements. Further details, in particular regarding contact options and international transfers, can be found in the data protection declaration.
If there are significant changes in purposes or recipients, existing consent is not simply extended to new processing operations. If necessary, you will be informed in advance and asked to make a new decision.
Status of this declaration: 01. October 2026