Legal
Privacy Policy
This notice explains what personal data is processed when you visit blackarrow.media, for what purpose, and on what legal basis.
1. Controller
Performance Marketing FZCO
Dubai Silicon Oasis, DDP
Building A2
Dubai
United Arab Emirates
Represented by: Roman Lieder
Email: [email protected]
Phone: +971 50 387 4509
2. Transfers outside the EEA
The controller is established in the United Arab Emirates, outside the European Economic Area, for which the European Commission has issued no adequacy decision. Transfers take place under Art. 49(1)(b) GDPR where necessary to answer your enquiry, and otherwise under the standard contractual clauses we have concluded with our processors (Art. 46(2)(c) GDPR). A level of protection equivalent to EU standards cannot be guaranteed in every case in third countries.
3. Server log files
When you load this site the hosting provider automatically records data your browser transmits: the page requested, date and time, volume transferred, referrer, browser type and version, operating system, and your IP address in shortened form.
Purpose and legal basis: delivering the page, and the stability and security of the service. Art. 6(1)(f) GDPR; our legitimate interest is the technically correct and secure operation of this website.
Retention: 14 days, then automatic deletion.
Recipients: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany as server operator and Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA as the content delivery network through which requests are routed. Both act as processors under Art. 28 GDPR.
4. Contact form and email
If you write to us via the contact form or by email we process the data you provide — your name, email address and message — solely to handle your enquiry.
Legal basis: Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Recipients: messages are delivered via Resend (Plus Five Five, Inc.), 2261 Market Street, San Francisco, CA 94114, USA as processor.
Retention: we delete enquiries once they are conclusively dealt with, unless statutory retention periods apply.
Provision: your name and email address are required so we can reply. Without them we cannot handle your enquiry. There is no further obligation to provide data.
5. Cookies and similar technologies
This site sets no analytics or marketing cookies unless you have explicitly consented. Technically necessary storage is limited to recording your choice in the consent banner, so that you are not asked again on every page.
Legal basis: § 25(2) no. 2 TDDDG for technically necessary storage; for every other purpose your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future; the lawfulness of processing before withdrawal is unaffected.
Details are in our cookie policy.
6. Web fonts
Fonts are loaded from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which transmits your IP address to Google. Legal basis Art. 6(1)(f) GDPR; our legitimate interest is the consistent and accessible presentation of this site.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to withdraw consent at any time (Art. 7(3)).
Right to object under Art. 21 GDPR: where we process data on the basis of a legitimate interest, you have the right to object at any time on grounds relating to your particular situation.
Contact [email protected] to exercise any of these.
Right to complain: you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence or of the alleged infringement.
8. No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
9. Version
This notice applies from 11 September 2026. We update it when the processing described here changes.