Privacy & Data Protection

1. Introduction

This Privacy Policy describes how Chivale (“Chivale”, “we”, “us”, or “our”) collects, uses, processes, stores, and protects personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR / RODO).

We are committed to protecting the privacy, confidentiality, and security of personal data of our users, clients, partners, contractors, and website visitors. This Privacy Policy applies to all Chivale websites,services, platforms, applications, hosting solutions, communication channels, and business operations.

By using our websites or services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for the processing of personal data is:
Chivale Group LTD
Website: https://www.chivale.com/
Contact: via contact forms available on our website

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed in connection with:
• Websites operated by Chivale
• Hosting services (including email hosting)
• Software development services
• Maintenance and support services
• Contact and inquiry forms
• WhatsApp communication channels
• Telegram communication channels
• Client projects and contractual cooperation
• Storage of project documentation and source code

4. Types of Personal Data We Collect

Depending on the nature of interaction, we may collect the following categories of data:

5. Legal Basis for Processing (GDPR Art. 6)

We process personal data based on one or more of the following legal grounds:
• Consent (Art. 6(1)(a) GDPR)
• Performance of a contract (Art. 6(1)(b) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR), including security, service improvement, and fraud prevention

6. Purpose of Data Processing

We process personal data for the following purposes:
• Providing and operating our services
• Responding to inquiries and contact requests
• Delivering hosting, email, and cloud services
• Software development and maintenance
• System monitoring and security
• Contract management and billing
• Legal compliance and dispute resolution
• Improving website functionality and user experience

7. Cookies and Tracking Technologies

8. Hosting, Servers, and Infrastructure

Personal data may be processed and stored on:
• Dedicated servers
• Cloud VPS environments
• Shared or isolated hosting infrastructure

We apply appropriate technical and organizational measures including:
• Firewalls
• Access controls
• Network segmentation
• Monitoring and logging
• Regular security updates

9. Email Hosting and Communication Services

For email hosting services, Chivale processes data such as:
• Email addresses
• Email metadata (sender, recipient, timestamps)
• Email content (only as technically required for service delivery)

Security measures include:
• TLS encryption
• Spam and virus protection
• Authentication mechanisms (DKIM, SPF, DMARC)
Chivale does not access email content unless required for technical support or legally obligated.

10. WhatsApp/Telegram Communication

Chivale may use WhatsApp/Telegram channels for communication and updates.

Please note:
• WhatsApp/Telegram is a third-party service operated by Meta Platforms
• Data processed via WhatsApp/Telegram is subject to WhatsApp/Telegram own Privacy Policy
We recommend users avoid sending sensitive personal data via WhatsApp/Telegram.

11. Contact Forms

When submitting a contact form, we process:
• First name and last name
• Company name
• Email address
• Phone number
• Message title (subject)
• Message content

12. Source Code and Project Data Protection

13. Data Retention

Personal data is retained only for as long as necessary:
• Contract duration
• Legal obligations
• Legitimate business purposes
After retention periods expire, data is securely deleted or anonymized.

14. Data Sharing and Third Parties

We may share data only with
• Trusted service providers (hosting, infrastructure, security)
• Legal or regulatory authorities when required
All third parties are bound by confidentiality and data protection agreements.
We do not sell personal data.

15. International Data Transfers

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards, including:
• Standard Contractual Clauses (SCCs)
• Adequate data protection frameworks

16. Data Security Measures

We implement industry-standard security measures, including:
• Encryption
• Access control
• Monitoring and incident detection
• Regular security audits
Despite best efforts, no system can be 100% secure.

17. Data Subject Rights (GDPR)

You have the right to:
• Access your data
• Rectify inaccurate data
• Erase data (“right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
Requests can be submitted via our contact channels.

18. Supervisory Authority

You have the right to lodge a complaint with a data protection authority in your country of residence or within the EU.

19. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be published on this page with an updated revision date.

20. Contact

For privacy-related inquiries, please contact us via the official contact forms available on:
https://www.chivale.com/contact/