Data Protection Policy

AIM OF THE DATA PROTECTION POLICY
Altway Systems is fully committed to complying with applicable data protection laws, as we believe that ensuring data protection is the foundation of trustworthy business relationships.

We constantly work to maintain compliance — encouraging audits, certifications, and providing industry-standard contractual protections.

This Data Protection Policy ensures the level of data protection prescribed by the European Union Data Protection Regulations and provides one of the necessary framework conditions for cross-border data transmission.

This Data Protection Policy applies to all companies of Altway Systems, its affiliated companies and their employees, and is based on globally accepted principles of data protection.

The latest version of the Data Protection Policy is available with our privacy information on Altway’s website at: altway.systems

PRINCIPLES OF PERSONAL DATA PROCESSING
We collect and use (process) certain types of information (Personal Data) that relate to individuals (Data Subjects) we interact with, in order to carry out our business operations.

We believe that when processing personal data, individual rights must be protected — all personal data must be collected and processed lawfully and fairly.

Personal data shall be:

(a) processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
(b) collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes (‘purpose limitation’);
(c) adequate, relevant and limited to what is necessary for the purposes (‘data minimisation’);
(d) accurate and, where necessary, kept up to date (‘accuracy’);
(e) kept in a form that permits identification of data subjects for no longer than necessary (‘storage limitation’);
(f) processed securely to protect against unauthorised or unlawful processing and against accidental loss, destruction, or damage (‘integrity and confidentiality’).

LAWFULNESS OF PROCESSING
To ensure lawful processing, we rely on at least one legal basis for processing personal data, as set out in Article 6(1) of the GDPR. These include:

  • the data subject has given consent;
  • processing is necessary for the performance of a contract;
  • processing is necessary for legitimate interests pursued by Altway Systems or a third party, unless overridden by the data subject’s rights.

In some cases, prior consent may not be required under the GDPR.

HOW DO WE COLLECT YOUR PERSONAL INFORMATION
We collect your data in the following ways:

  • When you contact us via our website to request information about our services.
  • When you respond to our marketing communications.
  • When we receive data from other sources (e.g., social media).

If you are under 16, please do not provide any personal data unless you have permission from your parent or guardian.

To keep your information accurate, please notify us of any changes. You have the right to correct inaccurate data, and to request erasure (“the right to be forgotten”) under Article 17(1) GDPR. To exercise this right, please contact us at: [email protected]

WHAT PERSONAL DATA MAY BE COLLECTED
We may collect the following types of personal information:

  • name
  • address
  • phone numbers
  • email address

When you visit our website, we may also collect technical data such as your IP address, browser type, referring site, and operating system. This information is typically not personally identifiable.

HOW DO WE KEEP PERSONAL DATA SAFE
We apply safeguards to protect your personal data. While internet transmission is never 100% secure, we use technical and organizational measures such as:

  • restricted access based on roles
  • encrypted data transfers
  • secure, firewalled IT systems
  • ongoing monitoring for unauthorized access or misuse

YOUR RIGHTS
You have the following rights regarding your personal data:

  • Access: Obtain information on how your data is processed
  • Rectification: Request corrections of inaccurate or incomplete data
  • Erasure: Request deletion where appropriate under Art. 17 GDPR
  • Restriction: Request limited processing under certain conditions
  • Objection: Object to processing based on legitimate interests or for direct marketing
  • Data Portability: Receive your data in a structured format and transfer it elsewhere
  • Withdraw Consent: Withdraw your consent at any time, free of charge — contact: [email protected] 
  • Complain: File a complaint with a data protection authority

INTERNATIONAL TRANSFERS
Altway Systems operates globally. Your personal data may be stored or processed on servers located outside your country of residence. These countries may have different data protection laws.

We take appropriate safeguards, including use of the European Commission’s Standard Contractual Clauses, to ensure that your data remains protected under the standards of EU law.

Cookies

USE OF COOKIES
The Altway website may use cookies to personalize your online experience. Cookies cannot be used to run programs or deliver viruses to your computer. Each cookie is uniquely assigned to you and can only be read by the web server that issued it.

Altway uses cookies to collect your IP address and browsing data. Cookies are placed on your device only with your consent.

To understand how visitors use the Altway website and to improve the user experience, we use Google Analytics. This service sets cookies that help Altway track website traffic and analyze user interactions.

Most web browsers accept cookies by default, but you can modify your browser settings to decline cookies if you prefer. If you choose to decline cookies, you may not be able to fully enjoy the interactive features of the Altway website or services.

To learn more, please visit our full Cookie Policy at: altway.systems

Data Protection Standarts

When you share your business or Personal Data, you want to know that it is protected. We proactively ask third parties to review our services against international standards, like ISO standards, so you know your business and personal data is handled responsibly.

Data Processing Agreement

During the contractual relations there might be a necessity to process Personal Data previously collected and processed by your company. The types of the Personal Data and the categories of the Data Subjects can be all types of Personal Data of your or your affiliates’ services or website users or clients and/or the clients’ users. In such case we would act as a processor or a sub-processor and will keep all the Personal Data strictly confidential and fully complied with EU Regulations. With respect to this matter some specific responsibilities and liabilities would took place for us and to ensure their enforcement we will provide you with a special Data Protection Agreement and Standard Contractual Clauses for transfers of Personal Data recommended by European Commission.

Personal Data Protection Clause

We believe that creative marketing is a key to business success — that’s why you’re receiving an email from us. Still, we firmly believe that every individual’s rights must be respected. This means all personal data must be collected and processed lawfully and fairly.

To demonstrate our compliance with EU Data Protection Regulations, we would like to inform you of the following:

LAWFULNESS OF PROCESSING
Your personal data has been processed in accordance with Article 6(1)(f) of EU Regulation No 2016/679 (General Data Protection Regulation), under the basis of legitimate interests.

As stated in Recital 47 of the GDPR, the processing of personal data for direct marketing purposes may be regarded as carried out for a legitimate interest.

HOW DO WE COLLECT YOUR PERSONAL INFORMATION
We obtained your personal data from publicly available sources, such as social media platforms.

WHAT PERSONAL DATA MAY BE COLLECTED
The following types of personal information may be collected:

  • name
  • address
  • phone numbers
  • email address

HOW DO WE KEEP PERSONAL DATA SAFE
We implement both technical and organizational security measures — including encryption and authentication tools — to protect your personal information against manipulation, loss, destruction, and unauthorized access by third parties.

YOUR RIGHTS
The following rights can be exercised without any disadvantage to you, and will be addressed promptly by the responsible unit:

  • You have the right to request the correction of inaccurate personal data, and to have incomplete data completed.
  • You also have the right to request the erasure of your personal data in accordance with Article 17(1)(a) of the GDPR.

To exercise any of these rights, please contact us at: [email protected]
If you are requesting data erasure (your “right to be forgotten”), please indicate this explicitly. We will promptly remove all your personal data from our database.