Privacy Policy

1. Who is the controller

Lavmax Inc., a corporation organized under the laws of the State of Delaware, USA. Privacy contact: privacy@lavmax.com. Legal contact: legal@lavmax.com. Mailing address: 3 Germay Dr, Unit 4 #2844, Wilmington, DE 19804, USA. Additional corporate information is available in the Legal Notice / Impressum.

2. Data we process

• data you enter in the contact form: name, email, subject and message text;
• technical data necessary to operate and protect the website: IP address, browser/User-Agent information, referrer, Host, Accept, Content-Type/Content-Length, X-Forwarded-For (if supplied by the infrastructure) and other standard HTTP/server log data;
• a session identifier used for form protection, CSRF protection and limiting repeated submissions.

When the contact form is submitted, the technical metadata listed above and available to the server is included with the message in an operational email sent to Lavmax Inc.’s business mailbox. This is used for diagnostics, anti-spam measures and protection against abuse.

3. Purposes and legal bases

• Responding to requests and communication: taking steps at your request before a possible contract where applicable (Art. 6(1)(b) GDPR), or Lavmax Inc.’s legitimate interest in responding to business and general inquiries (Art. 6(1)(f) GDPR).
• Security and abuse prevention: legitimate interest in protecting the website, form and infrastructure against spam, fraud and attacks (Art. 6(1)(f) GDPR).
• Legal obligations and protection of claims: where retention or disclosure is required by applicable law or for the establishment, exercise or defence of legal claims.

The checkbox on the contact form confirms that you have read this policy and is not itself used as consent to processing where another applicable legal basis exists for the specific processing.

4. Recipients and international processing

Data may be accessed by hosting, email/SMTP, security and technical-maintenance providers to the extent necessary to provide services to Lavmax Inc. Lavmax Inc. is a U.S. company; depending on the provider used, routing and place of access, data may be processed in the EEA, the United States and other countries.

Where Chapter V GDPR applies to a particular transfer, Lavmax Inc. uses an applicable lawful mechanism: an adequacy decision for the relevant recipient/country, European Commission Standard Contractual Clauses (SCCs), or another GDPR mechanism, together with supplementary measures where required. The EU–US Data Privacy Framework applies only to a U.S. recipient that actually participates in/is certified under that framework; Lavmax Inc.’s Delaware incorporation does not by itself mean participation in the DPF. Information about the mechanism applicable to a particular recipient may be requested at privacy@lavmax.com.

5. Retention period

Contact inquiries: generally up to 24 months after the last substantive communication concerning the inquiry, unless longer retention is required for an active contract, accounting/legal obligations or the protection of claims.

Technical logs and anti-spam/security data: generally up to 90 days. In the event of a security incident, relevant records may be retained longer for the period of investigation and protection of legal claims.

These periods should also be applied in operational email, logging and backup settings; where a specific mandatory rule requires a different period, that rule applies.

6. Your rights

Depending on applicable law, you may have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests. To make a request, write to privacy@lavmax.com. Users in the EEA also have the right to lodge a complaint with the competent data-protection supervisory authority.

7. Cookies and external resources

The current version of lavmax.com does not use advertising or analytics cookies. When the home page containing the protected contact form is opened, a technically necessary server-side session is created: the CSRF token must exist before the form is submitted. Google Fonts and other external font CDNs are not loaded from this page. More information: Cookie Notice.

Language preference cookie: lavmax_lang stores the interface language you explicitly select for 12 months. It is used only to remember that preference and is not used for advertising, profiling or cross-site tracking.

8. Changes to this policy

This policy may be updated when the website, providers or legal requirements change. The current version is published on this page.

Last updated: September 15, 2026.