ALAMAS GROUP respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection legislation.

This Privacy Policy explains how personal data may be collected, used and protected when you visit alamas.eu, contact us, submit a business enquiry or otherwise communicate with us.

1. Data Controller

The ALAMAS GROUP website represents the following Estonian companies:

The relevant company with which you communicate or establish a business relationship will normally act as the controller of your personal data.

For privacy-related enquiries, please contact:

2. Personal Data We May Collect

Depending on how you interact with us, we may process:

• your name and surname;
• company name and position;
• email address;
• telephone number;
• country and business address;
• information contained in your enquiry or correspondence;
• information necessary to establish or maintain a business relationship;
• transaction, contractual and invoicing information where applicable;
• technical information generated when visiting our website, such as IP address, browser type, device information and website usage information, where such information is collected by our website or hosting providers.

We generally obtain personal data directly from you. In a B2B context, we may also obtain professional contact information from your employer, business partners or publicly available professional and corporate sources.

3. Purposes of Processing

We may process personal data for the following purposes:

• responding to enquiries and requests;
• establishing and maintaining relationships with customers, suppliers and other business partners;
• preparing quotations and negotiating commercial arrangements;
• entering into and performing contracts;
• coordinating international trade, sourcing and logistics services;
• processing invoices and payments;
• fulfilling accounting, tax, compliance and record-keeping requirements;
• conducting appropriate counterparty, sanctions and compliance checks where required;
• protecting our legal rights and preventing fraud or misuse;
• maintaining the security and functionality of our website and IT systems.

4. Legal Basis for Processing

Depending on the circumstances, personal data may be processed on the basis of:

• taking steps at your request before entering into a contract or performing a contract;
• compliance with legal obligations applicable to us;
• our legitimate interests in operating and protecting our business, communicating with customers and business partners, and maintaining appropriate business records;
• your consent, where consent is required by applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing of Personal Data

We do not sell personal data.

Where necessary for legitimate business purposes, personal data may be shared with:

• companies within ALAMAS GROUP;
• accounting, legal and professional advisers;
• banks and payment service providers;
• IT, website hosting and technical service providers;
• logistics and freight forwarding partners where necessary for a transaction;
• government, tax, customs, regulatory or law-enforcement authorities where disclosure is required by law;
• other service providers involved in the performance of a specific commercial transaction.

Only information reasonably necessary for the relevant purpose will be disclosed.

6. International Data Transfers

Due to the international nature of our business, certain transactions may involve counterparties or service providers located outside the European Economic Area.

Where personal data is transferred outside the EEA, we take appropriate measures where required by applicable data protection law to ensure an adequate level of protection.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal, accounting, tax, contractual and regulatory requirements.

General business correspondence may be retained for the duration of the relevant business relationship and for a reasonable period thereafter.

Accounting, transaction and contractual records may be retained for the period required under applicable law.

8. Cookies and Website Data

Our website may use cookies or similar technologies that are technically necessary for the operation, security and performance of the website.

If analytics, advertising or other non-essential cookies are introduced, visitors will be provided with appropriate information and, where required, an opportunity to provide or refuse consent.

You can also control certain cookies through your browser settings.

9. Your Rights

Subject to the conditions provided by applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent where processing is based on consent.

To exercise your rights, please contact us at office@alamas.eu.

We may request appropriate information to verify your identity before processing a request.

10. Complaints

If you believe that your personal data has been processed unlawfully, you may contact us so that we can address your concerns.

You also have the right to lodge a complaint with the competent supervisory authority.

In Estonia, the supervisory authority is:

11. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

12. Third-Party Websites

Our website may contain links to third-party websites. ALAMAS GROUP is not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policies of the relevant third parties before providing personal information to them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, business activities or applicable legal requirements.

The current version will always be published on alamas.eu together with the date of the latest update.

14. Contact

For questions concerning this Privacy Policy or the processing of personal data, please contact: