Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

VAALMAX LTD
Registered office: Georgiou Karaiskaki 11-13, Carisa Salonica, Office 102, 7560 Pervolia, Larnaca, Republic of Cyprus
Reg. No. HE 494093 · Director: Justin Dominic Pollard
Email: info@vaalmax.com

2. Principles of our data processing

We process personal data only where there is a legal basis to do so, and only to the extent necessary. We follow the principles of data minimisation, purpose limitation and storage limitation. We do not use any automated decision-making or profiling.

3. Hosting and server log files

This website is served as static files by a hosting provider. When you visit the site, the hosting infrastructure may automatically record technical information in server log files, such as the anonymised or truncated IP address, the date and time of access, the requested file, the referring page and your browser type. This processing is technically necessary to deliver the website securely and to detect and prevent misuse. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Log data is not merged with other data sources and is retained only for as long as necessary for security purposes.

4. Contact by form or email

If you contact us via our contact form or by email, the details you provide (such as your name, email address and the content of your message) are processed for the purpose of handling your enquiry and any follow-up questions.

• Contact form: our form does not transmit data to our server. Instead, it opens your own email application with the information you entered, so that you send the message yourself. The legal basis for processing your enquiry is our legitimate interest in responding (Art. 6(1)(f) GDPR) and, where your enquiry aims at concluding a contract, the performance of pre-contractual measures (Art. 6(1)(b) GDPR).

We store enquiry data only for as long as necessary to process your request and to comply with any statutory retention obligations, after which it is deleted.

5. Cookies and tracking

This website does not use tracking or marketing cookies, and it does not embed third-party advertising or analytics services. Any storage strictly necessary for the basic technical functioning of the site does not require consent. As a result, no cookie consent banner is displayed.

6. External content and embedding

We deliberately avoid embedding third-party scripts, fonts, analytics or media that would load automatically and transfer your data without your action. All assets used on this website are served from our own domain, so simply viewing a page does not disclose your data to any third party.

7. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR)

To exercise any of these rights, please contact us at info@vaalmax.com. You also have the right to lodge a complaint with a competent data protection supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection.

8. Data security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or manipulation. This website is intended to be delivered over an encrypted TLS (HTTPS) connection. Despite our efforts, no method of transmission over the internet is completely secure; we therefore continuously review and improve our security measures.

9. Changes to this policy

We may update this privacy policy to reflect changes in our practices or in legal requirements. The version published on this page always applies to your current visit.