Privacy Policy

1. Controller Identity & Contact Details

The data controller responsible for your personal data is:

For any data-protection-related enquiries, including the exercise of your rights, please contact us at info@mvhglobal.eu with the subject line "Data Protection Request".

2. Scope of This Policy

This Privacy Policy applies to all personal data we collect and process in connection with your use of our website (www.mvhglobal.eu), our procurement and engineering services, and any communications you have with us. It does not cover third-party websites linked from our site.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: First name, last name, job title, company name.
• Contact data: Business email address, telephone number, postal address.
• Communication data: Messages, enquiries, and correspondence you send to us via our contact form, email, or phone.
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system, and other technology on the devices you use to access our website.
• Usage data: Information about how you use our website, including pages visited, referral URLs, and session duration.
• Marketing & preferences: Your preferences in receiving marketing communications from us and your communication preferences.

We do not intentionally collect any Special Categories of personal data (e.g., racial origin, health, biometric, or criminal-record data). Please refrain from providing such data in your communications with us.

4. How We Collect Personal Data

• Direct interactions: submitting our contact or quote request forms, emailing or calling us, or providing business cards.
• Automated technologies: cookies and similar tracking technologies as you navigate our website (see Section 10).
• Third parties: business partners, industry directories, and publicly available professional networks (e.g., LinkedIn) for B2B sourcing purposes.

5. Purposes of Processing & Legal Basis (GDPR Article 6)

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements:

• Contact / enquiry data: up to 3 years from last contact, unless a contract is formed.
• Contract-related data: 10 years from contract end to comply with Portuguese commercial and tax law.
• Marketing opt-in records: retained until you withdraw consent.
• Technical / usage data (logs): up to 12 months.

After the applicable retention period, data is securely deleted or anonymised.

7. Sharing of Personal Data

We may share your personal data with:

• Service providers (processors): IT infrastructure providers, cloud hosting, website analytics, email service providers, and CRM platforms — all bound by Data Processing Agreements as required by GDPR Article 28.
• Professional advisers: lawyers, auditors, and insurers under strict confidentiality obligations.
• Public authorities: tax authorities (AT), customs, or regulators where required by EU or Portuguese law.
• Business partners: only where necessary to fulfil a specific procurement project and with your knowledge.

We do not sell or rent your personal data to any third party for their own marketing purposes.

8. International Data Transfers

MVH Global operates globally. When personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through one or more of the following safeguards:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transfers to countries with an EU adequacy decision (GDPR Article 45).
• Binding Corporate Rules or other lawful transfer mechanisms where applicable.

You may request a copy of the relevant transfer mechanism by contacting us at info@mvhglobal.eu.

9. Your Rights Under GDPR (Articles 15–22)

As a data subject under EU/EEA law, you have the following rights:

• Right of access (Art. 15): Obtain confirmation of whether we process your data and receive a copy.
• Right to rectification (Art. 16): Have inaccurate or incomplete data corrected without undue delay.
• Right to erasure (Art. 17): Request deletion of your data where there is no compelling reason for continued processing.
• Right to restrict processing (Art. 18): Request that we suspend processing of your data in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format and transfer it to another controller.
• Right to object (Art. 21): Object at any time to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.
• Right not to be subject to automated decisions (Art. 22): Not be subject to decisions based solely on automated processing that significantly affect you.

To exercise any of these rights, please submit a written request to info@mvhglobal.eu. We will respond within 30 calendar days. We may need to verify your identity before processing your request.

10. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to improve performance and user experience. Categories of cookies used:

• Strictly necessary cookies: required for the website to function (no consent needed).
• Analytics cookies: help us understand visitor behaviour (e.g., page views, session duration) — activated only with your consent.
• Preference cookies: remember your settings such as theme preference.

You can manage or withdraw cookie consent at any time through your browser settings. Disabling certain cookies may affect website functionality.

11. Data Security

We implement appropriate technical and organisational security measures (GDPR Article 32) to protect personal data against unauthorised access, loss, destruction, or alteration. These include TLS encryption, access controls, regular security audits, and staff training on data protection.

In the event of a personal data breach that poses a high risk to your rights and freedoms, we will notify you without undue delay in accordance with GDPR Article 34.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority. In Portugal, this is:

We would, however, appreciate the opportunity to address your concerns before you contact the authority. Please reach out to us first at info@mvhglobal.eu.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this page periodically. Where changes are material, we will notify you by email or a prominent notice on our website.

14. Governing Law

This Privacy Policy is governed by the General Data Protection Regulation (EU) 2016/679 (GDPR), Portuguese Law No. 58/2019 (the national GDPR implementation law), and any other applicable EU or Portuguese data protection legislation.