Your personal data is collected and processed solely for the following purposes:

• To respond to contact or information requests submitted via our website or other channels;

• To provide services requested by the user or fulfill contractual obligations;

• To manage client relationships and communication;

• To comply with legal obligations.

The legal bases for processing are, as per Article 6 of the GDPR:

• Your explicit consent for data processing (Article 6(1)(a));

• The need to perform a contract or take steps prior to entering a contract (Article 6(1)(b));

• Compliance with legal obligations (Article 6(1)(c));

• The pursuit of legitimate interests, provided that such interests are not overridden by your rights (Article 6(1)(f)).

Your data will be stored only for as long as necessary to fulfill the purposes for which it was collected or to meet legal obligations.

We implement appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your data and to prevent unauthorized access, loss, destruction, or alteration.

Upon request or once the retention period has expired, your data will be securely deleted or anonymized.

Your personal data will not be sold or disclosed to third parties without your prior consent, except:

• To service providers acting on our behalf (e.g., IT support, web hosting), bound by confidentiality agreements;

• When required by law or regulatory authority;

• In case of corporate restructuring, merger, or acquisition (with appropriate safeguards).

We do not transfer your data outside the European Economic Area (EEA). If international transfers become necessary, they will be conducted in compliance with Chapter V of the GDPR, ensuring an adequate level of protection (e.g., through Standard Contractual Clauses).

As a data subject, you have the following rights, as established by Articles 15–22 of the GDPR:

• Right to Access – You can request confirmation of whether your data is being processed and access to that data;

• Right to Rectification – You may request correction of inaccurate or incomplete personal data;

• Right to Erasure ("Right to be Forgotten") – You may request the deletion of your data under certain conditions;

• Right to Restriction of Processing – You may request limitation of data processing in certain situations;

• Right to Data Portability – You may receive your personal data in a structured, commonly used, and machine-readable format;

• Right to Object – You may object to processing for reasons related to your particular situation;

• Right to Withdraw Consent – You may withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal;

• Right to Lodge a Complaint – You have the right to file a complaint with a Data Protection Authority.

To exercise your rights, contact us at info@alvmac.com