Privacy Policy
IN TERMS OF THE GENERAL DATA PROTECTION REGULATION (GDPR) (EU) 2016/679
1. Introduction
This Privacy Policy explains how AVICT Consulting ("we," "us," or "our") collects, processes, stores, and discloses personal information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. We are committed to protecting the privacy and security of personal information and ensuring that all data is collected, processed, and disclosed lawfully, fairly, and transparently.
2. Purpose of GDPR Compliance
The GDPR is designed to safeguard personal information processed by public and private entities while ensuring that such processing is conducted in a lawful, responsible, and secure manner. This policy ensures that we:
- Give effect to the fundamental right to privacy by safeguarding personal information.
- Process personal information lawfully and transparently, subject to justifiable limitations that balance privacy rights with the right of access to information.
- Do not prevent or hinder the performance of any legal duties, functions, or obligations while ensuring compliance with GDPR and any other applicable legislation.
3. What Information We Collect
We only collect personal information necessary for providing services as outlined in our service descriptions. This may include:
- Personal identifiers: Name, surname, contact details, email address, phone number.
- Billing and payment information, where applicable.
- Information necessary to fulfill our contractual obligations or comply with legal requirements.
We do not collect unnecessary personal data, and we do not use your information for any purposes other than providing the agreed-upon service.
4. How We Use Your Information
We use your personal information for the following purposes:
- To provide and maintain our services.
- To verify your identity where necessary.
- To comply with legal and regulatory requirements.
- To prevent fraud, security breaches, and criminal activity.
- To communicate with you regarding our services.
- To improve our service offerings based on user interactions and feedback.
5. How We Share Your Information
We take your privacy seriously and do not sell, rent, or trade your personal information. Your data will only be shared under the following conditions:
- Service Provision: Where necessary to deliver our services, we may share relevant personal data with third-party service providers (e.g., payment processors, couriers) who are contractually obligated to handle your data securely and in compliance with GDPR.
- Legal Compliance: If required by law, regulation, or legal process (e.g., court orders, subpoenas, or government requests), we will disclose personal information as necessary.
- Business Operations: In rare cases, if we undergo a business transaction such as a merger, acquisition, or asset sale, your personal information may be transferred to the new entity, subject to the same privacy protections.
6. Your Rights Under GDPR
As a data subject, you have the following rights under GDPR:
- Right to Access: You may request a copy of your personal information that we hold.
- Right to Rectification: You may request corrections to inaccurate or outdated information.
- Right to Object to Processing: You may object to the processing of your data in certain circumstances.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your data where it is no longer necessary for the purpose collected, subject to legal or regulatory retention obligations.
- Right to Restrict Processing: You may request that we limit the processing of your data in certain situations.
- Right to Data Portability: You may request a copy of your data in a structured, commonly used format for transfer to another service provider.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
7. Data Retention
We only retain your personal data for as long as necessary to:
- Fulfill the purpose for which it was collected.
- Comply with legal, accounting, or regulatory requirements.
- Resolve disputes and enforce agreements.
Once no longer required, data will be securely deleted or anonymized.
8. Security Measures
We take reasonable technical, administrative, and physical measures to protect your personal information from loss, unauthorized access, disclosure, alteration, or destruction. Our security measures include:
- Encryption and secure storage of sensitive data.
- Access controls to ensure only authorized personnel have access to data.
- Regular security reviews and updates to safeguard against emerging threats.
- Secure data disposal methods to ensure that information is permanently destroyed when no longer needed.
In the event of a data breach, we will follow legally required notification procedures and inform affected parties as required under GDPR.
9. Third-Party Service Providers ("Processors")
Where we engage third-party service providers (referred to as "processors" under GDPR) to process personal information on our behalf, they are contractually bound to:
- Use the data only for the agreed-upon purpose.
- Implement reasonable security safeguards to protect your personal information.
- Comply with GDPR and any other relevant data protection laws.
10. Cross-Border Data Transfers
We do not transfer personal information outside the European Economic Area (EEA) unless:
- The recipient country has adequate data protection laws in place as determined by the European Commission.
- A legally binding agreement ensures the protection of your data.
- You provide explicit consent for the transfer.
- The transfer is necessary for contract performance (e.g., payment processing).
11. Compliance with Local Data Protection Authorities
In compliance with GDPR, we recognize your right to lodge a complaint with a data protection authority if you believe your data has been processed unlawfully. Our designated Data Protection Officer (DPO) is available to assist with any concerns.
12. Changes to This Policy
We may update this Privacy Policy from time to time in response to changes in legal requirements or operational practices. The latest version will always be available on our website. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or need further information about how we process your data, please contact us: