Eastvantage Privacy Policy

Introduction 

Eastvantage Group JSCO and its affiliated companies (together “Eastvantage” or the “Company”) respect your online privacy and are committed to protecting your personal information (“Personal Data”). Personal Data refers to any information that can identify an individual, such as a name, identification number, location data, online identifier, or other factors specific to one’s identity. 

This Privacy Notice explains how we handle personal data. 

Eastvantage is a service provider to its clients. For that reason, Eastvantage handles personal data in two capacities: 

• As a Controller: When Eastvantage collects data directly from you (e.g., through our website) and Eastvantage will decide what to do with the data. 

• As a Processor: When Eastvantage processes personal data on behalf of our clients (the “Controllers”), the clients are deciding what to do with the data and Eastvantage just follows their instructions. 

Our Role as a Controller 

Types of Data 

When you interact with our website (e.g., submitting inquiries, applying for jobs, or subscribing to updates), we may collect: 

• Contact information (name, email, phone number). 

• Professional details (job title, company name). 

• Technical data (IP address, browser type, cookies). 

Purposes and Legal Basis 

We process this data to: 

• Respond to your inquiries (legal basis: legitimate interest, contract). 

• Send marketing communications (legal basis: consent, where required). 

• Improve website functionality (legal basis: legitimate interest). 

Our Role as a Processor 

Scope of Processing 

We act as a processor for our clients (who may be Controllers) who may engage us to process your personal data. This data is determined and controlled solely by the Controllers, our clients. We operate strictly under the documented instructions of our clients. These instructions detail the scope, nature, and purpose of the processing. We do not: 

• Determine the purposes or means of processing. 

• Use controller owned data for our own purposes. 

Sub-Processors 

Eastvantage may engage trusted third parties (e.g., cloud providers, IT service providers) to assist in processing data. All sub-processors are bound by GDPR-compliant contracts and may only process data per our instructions. 

International Transfers 

If personal data is transferred to countries outside the European Economic Area (EEA), Eastvantage ensures that appropriate safeguards are in place, such as Standard Contractual Clauses or other approved mechanisms. 

Technical and Organizational Measures 

Eastvantage is ISO 27001 certified and has implemented appropriate technical and organizational measures to ensure the security of personal data, including:    

• Encryption of data in transit and at rest.    

• Access controls to restrict access to personal data. 

• Regular security assessments and audits. 

• Data retention policies aligned with our clients’ instructions. 

• Secure data storage and backup systems. 

We comply with Article 28 of the GDPR, ensuring that we only process data as instructed, maintain confidentiality, and assist our clients in meeting their obligations. 

Data Retention 

We retain personal data only for as long as instructed by our clients. After the retention period, we securely delete or anonymize the data, unless legal obligations require longer retention. 

Data Subject Rights  

As a processor, we do not directly handle data subject requests. If you wish to exercise your data subject rights (e.g., access, rectification, erasure, objection), please contact the data controller who provided your data to us. We will assist our clients in responding to data subject requests as required by our contractual obligations. 

Updates to This Notice 

We may update this notice periodically. Changes will be posted on our website with a revised “Last Updated” date. 

Contact Us 

For questions about this Privacy Notice or controller-collected data: 

• Email: [[email protected]] 

• Address: [Eastvantage Group JSCo, 19 Vitosha Boulevard, Sofia 1000, Bulgaria] 

• Compliance Officer: [Balraj Thuppalay] 

Cookies 

Our website uses cookies to enhance user experience. For details, see our [Cookie Policy]  

Last Updated: April 24, 2025

This Privacy Notice does not apply to third-party websites or services linked from our site.