Mawlab Strategic Advisory

1. Data Controller

The data controller is **MAW EOOD** ("we", "us", "our"), the company behind the MAWlab website. MAWlab is the name of our website/brand. **Registered address:** MAW EOOD Sofia Center Evlogi Hristo Georgiev Blvd 77 1142 Sofia, Bulgaria If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at info@mawlab.io.

2. What data we collect

We collect only the personal data you choose to provide when you contact us through our website contact form or by email. This may include: - Full name - Professional role - Company/Organization - Email address - Phone number - Any additional information included in your message We may also collect aggregated and anonymized analytics data via Google Analytics to monitor how the website is used (traffic, pages visited, session duration), without directly identifying you as an individual.

3. How we use your data

We use the personal data you provide exclusively to: - Respond to your contact request - Assess whether we can support you with our advisory services - Keep you updated on developments relevant to your request (recurring communications on a monthly/bi-monthly basis). You can opt out at any time by replying to our emails or contacting us at info@mawlab.io. - Maintain professional relationships with institutional stakeholders We will never sell your data to third parties, and we will not use it for unrelated marketing purposes. All data is handled with the highest level of confidentiality.

4. Anonymized metrics

We may aggregate and anonymize the personal data you provided to create internal statistics and metrics that we may publish, such as: - Total number of inquiries received - Conversion rates (inquiries/contracts closed) - Number of completed projects and types of work - Aggregated demographic data (only if anonymized) This anonymized data will not identify you personally and will not violate your privacy. This practice allows us to transparently share our activity and track record.

5. Legal basis for processing

We process your personal data on the basis of: - **Our legitimate interest** in responding to professional requests related to our services and maintaining business relationships with institutional stakeholders - **Consent** explicitly provided when you submit the contact form (where applicable) - **Contractual necessity** if we move forward toward a collaboration Where required by applicable law, we rely on your explicit consent. Where processing is based on consent, you may withdraw it at any time by contacting us at info@mawlab.io.

6. Data retention

We retain your personal data: - For as long as necessary to handle your request and evaluate a potential business relationship - For a reasonable period thereafter (typically 2–3 years) to meet legal and regulatory obligations - Longer if needed to comply with legal requirements or to protect our legitimate rights If you request deletion, we will delete or anonymize your data unless we are legally required to retain it.

7. How we protect your data

We use appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. These include: - Encryption of data in transit (HTTPS) - Access limited to authorized staff only - Internal confidentiality and security policies However, we cannot guarantee 100% security of any online transmission or storage system.

8. Sharing your data

We may share your personal data with trusted service providers (acting as data processors) who help us: - Run the website infrastructure (hosting) - Send email communications - Comply with legal and regulatory obligations These providers are bound by contractual obligations to protect your data and use it only according to our instructions. **We do not sell your data to third parties.**

9. International data transfers

Your data may be transferred to and processed in countries outside your jurisdiction, depending on where our service providers are located. Where required by law, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your data during such transfers, in compliance with applicable data protection regulations.

10. Google Analytics

We use Google Analytics to monitor website usage and collect aggregated analytics information. Google Analytics may use cookies or similar technologies to help analyze how visitors use the site. You can disable analytics cookies through your browser settings and, where available, via the cookie preferences on our website. You can also install Google’s opt-out browser add-on. Please refer to Google’s Privacy Policy for more details on how they handle data.

11. Your rights

Under applicable data protection laws (including the GDPR, where applicable), you have the right to: - Request access to the personal data we hold about you - Request correction or updates to inaccurate data - Request deletion of your data ("right to be forgotten"), within the limits of the law - Object to or restrict certain types of processing - Request data portability - Withdraw consent at any time where processing is based on consent To exercise these rights, contact us at info@mawlab.io with a clear request, and we will respond within 30 days of receipt. You also have the right to lodge a complaint with your local data protection authority.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, you can contact us at: **MAW EOOD** Sofia Center Evlogi Hristo Georgiev Blvd 77 1142 Sofia, Bulgaria Email: info@mawlab.io You can also contact our team to exercise your data protection rights or to raise any concerns.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect: - Changes in our services - New legal or regulatory requirements - Evolving industry best practices The updated version will be published on this page with a revised "Last updated" date. Continued use of our website implies acceptance of the updated Privacy Policy.