Avmar Group — Privacy Policy

Last Updated: Septmber 27, 2026

Welcome to www.avmar.group (the "Service"), operated by Avmar Group Ltd. ("we," "us," or "our"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you access our Service.

We are committed to protecting your privacy and handling your personal information in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable, the UK Data Protection Act 2018 (UK GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana (collectively, the "US State Laws"), and other applicable laws.

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.

Scope of Application

This Privacy Policy applies to all personal information collected by us through www.avmar.group and our related communication channels (email and WhatsApp messaging). It does not apply to information collected by third-party websites or services that we do not own or control.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you voluntarily provide to us when you contact us through our Service or otherwise interact with us.

The personal information we collect may include the following, depending on the context of your interaction with our Service:

• Full name

• Email address

• Phone number

• Organization or business name (if applicable)

• Inquiry details and message content describing your training or consulting needs

• Country and city of operation (where relevant to the services you are inquiring about)

• Any other information you choose to provide to us.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Certain information — such as your IP address and browser/device characteristics — is collected automatically when you visit our Service.

We automatically collect certain information when you visit, use, or navigate the Service. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information. The information automatically collected may include:

• IP address

• Browser type and version

• Operating system

• Device type, device identifiers, and screen resolution

• Language preferences

• Referring URLs and pages visited on the Service

• Date and time of visits, time spent on pages

• Approximate geographic location (derived from IP address)

• Click-stream data and interaction patterns within the Service

This information is primarily needed to maintain the security and operation of our Service, and for internal analytics and reporting purposes. Like many businesses, we also collect information through cookies and similar technologies, as further described below.

1. How Do We Use Your Information?

In Short: We process your information for purposes based on legitimate business interests, the performance of our contract with you, compliance with our legal obligations, and/or your consent.

We use the personal information we collect or receive for the following purposes, on the following legal bases under GDPR Article 6 and analogous provisions of applicable US State Laws:

• To respond to your inquiries about our civilian preparedness and emergency-response training services, and to provide consultation regarding service offerings (legal basis: performance of a contract or steps prior to entering into a contract — Article 6(1)(b) GDPR).

• To prepare proposals, quotes, and service agreements based on your inquiry (legal basis: performance of a contract — Article 6(1)(b) GDPR).

• To send administrative communications, including status updates regarding your inquiry, scheduling of training sessions, and updates to this Privacy Policy (legal basis: legitimate interests — Article 6(1)(f) GDPR; legal obligation — Article 6(1)(c) GDPR).

• To send you marketing communications about new training programs, courses, and services that may be of interest to you, where you have provided consent (legal basis: consent — Article 6(1)(a) GDPR). You may withdraw consent at any time.

• To analyze how our Service is used and to improve our offerings (legal basis: legitimate interests — Article 6(1)(f) GDPR).

• To comply with applicable laws (including Romanian and EU laws) and respond to legal requests (legal basis: legal obligation — Article 6(1)(c) GDPR).

• To protect the security and integrity of our Service and prevent fraud or abuse (legal basis: legitimate interests — Article 6(1)(f) GDPR).

1. Will Your Information Be Shared with Anyone?

In Short: We may share your personal information with third parties only in the limited circumstances described below — primarily with service providers who assist us, when required by law, or with your consent.

We may share or disclose your personal information in the following situations:

• Service Providers and Vendors: We may share your personal information with third-party vendors, consultants, and other service providers who perform services on our behalf and require access to such information to do their work. This includes our website hosting provider (Wix.com, which hosts the Service), email service providers, analytics providers. We require such service providers to protect your information consistent with this Privacy Policy.

• Compliance with Laws: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, judicial proceedings, court orders, or legal processes (such as in response to a court order or subpoena, including in response to public authorities to meet national security or law enforcement requirements).

• Vital Interests and Legal Rights: We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, illegal activities, or as evidence in litigation in which we are involved.

• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

• With Your Consent: We may disclose your personal information for any other purpose with your explicit consent.

Other than as described in this Privacy Policy, we do not sell, rent, or trade your personal information to third parties for their independent marketing purposes.

1. Do We Use Cookies and Other Tracking Technologies?

In Short: Yes. We use cookies and similar tracking technologies to operate the Service, analyze usage, and improve your experience. You can control most cookies through your browser settings or our cookie preference center.

Cookies are small data files placed on your device when you visit a website. They allow the website to recognize your device and store information about your preferences and activities. We use the following categories of cookies on our Service:

• Strictly Necessary Cookies: These cookies are essential for the operation of the Service, including session management, authentication, security, and load balancing. They cannot be disabled.

• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences and display settings. They may be set by us or by third-party providers whose services we have added to our pages.

• Analytics and Performance Cookies: These cookies allow us to count visits and traffic sources, so we can measure and improve the performance of our Service. They help us know which pages are the most and least popular and see how visitors move around the Service. We use Google Analytics for this purpose. If you do not allow these cookies, we will not know when you have visited our Service.

Modern browsers include the ability to decline cookies. If you do not know how to do this, check the help file of the browser you are using. Please note that disabling cookies may affect the functionality of the Service.

Where required by applicable law (including under GDPR and applicable US state laws), we will obtain your consent before placing non-essential cookies on your device. You may withdraw your consent at any time by adjusting your browser settings or contacting us.

1. Is Your Information Transferred Internationally?

In Short: Yes. We may transfer, store, and process your information in countries outside of your country of residence, including in the United States and the European Economic Area (EEA), with appropriate safeguards.

Our hosting infrastructure (Wix.com) and certain other service providers may store and process your personal information on servers located outside Romania. When we transfer personal data outside the EEA or other jurisdictions with similar restrictions on international data transfers, we rely on appropriate safeguards as required by applicable data protection laws.

These safeguards include: (i) transfers to countries that have been deemed to provide an adequate level of protection by the European Commission (Article 45 GDPR); (ii) Standard Contractual Clauses (SCC) approved by the European Commission (Article 46 GDPR, specifically Commission Implementing Decision (EU) 2021/914); and (iii) for transfers to the United States, the EU-U.S. Data Privacy Framework (DPF) where the recipient is self-certified under the DPF.

1. How Long Do We Keep Your Information?

In Short: We keep your information only as long as necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), we will securely store your personal information and isolate it from any further processing until deletion is possible.

1. How Do We Keep Your Information Safe?

In Short: We implement appropriate technical and organizational measures to protect your information, but no method of transmission over the internet is 100% secure.

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process, including encryption (SSL/TLS) for sensitive data in transit. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Although we will do our best to protect your personal information, transmission of personal information to and from our Service is at your own risk. You should only access the Service within a secure environment.

1. Children's Privacy

In Short: Our Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children.

We do not knowingly solicit data from or market to children under 16 years of age (or under 13 in jurisdictions subject to the U.S. Children's Online Privacy Protection Act, "COPPA").

If we learn that personal information from users less than 16 years of age (or less than 13 in COPPA jurisdictions) has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under the applicable age, please contact us using the contact information provided below.

1. Your Privacy Rights

In Short: Depending on your location, you may have specific rights regarding your personal information, including the right to access, correct, delete, restrict, port, and object to the processing of your personal information.

Rights of EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under applicable data protection laws, including the GDPR (Articles 15-22) and the UK Data Protection Act 2018:

• Right to Access (Article 15): You have the right to obtain confirmation as to whether or not we process your personal data, and access to such data.

• Right to Rectification (Article 16): You have the right to request the correction of inaccurate or incomplete personal data.

• Right to Erasure ("Right to be Forgotten") (Article 17): You have the right to request the deletion of your personal data in certain circumstances.

• Right to Restriction of Processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.

• Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

• Right to Object (Article 21): You have the right to object to the processing of your personal data, including for direct marketing purposes.

• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority. Residents of Romania may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). Other EEA residents may lodge a complaint with their local data protection supervisory authority.

To exercise any of these rights, please contact us at info@avmar.group. We will respond to your request within 30 days, or notify you if we need additional time as permitted by law.

1. U.S. Multistate Privacy Notice

In Short: Residents of certain U.S. states have additional rights under their state privacy laws. This section describes those rights and how to exercise them.

This section applies to residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana, and is intended to comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Utah Consumer Privacy Act (UCPA), the Texas Data Privacy and Security Act (TDPSA), the Oregon Consumer Privacy Act (OCPA), and the Montana Consumer Data Privacy Act (MCDPA) (collectively, the "US State Laws").

Categories of Personal Information Collected

Within the past 12 months, we may have collected the following categories of personal information about residents of these states: identifiers (such as name, email, IP address), commercial information (such as records of services inquired about), internet/network activity information (such as browsing history on our Service), and geolocation data (approximate).

Purposes for Collection

We use this information for the business purposes described in Section 2 of this Privacy Policy, including providing and improving our Service, responding to your inquiries, complying with legal obligations, and security.

Categories of Third Parties

We may share these categories with the third parties described in Section 3 of this Privacy Policy, including service providers (hosting, email, analytics), and as required by law.

Your Rights as a U.S. State Resident

Depending on the state in which you reside, you may have the following rights:

• Right to Know / Right to Access: The right to request information about the categories and specific pieces of personal information we have collected about you, the sources of such information, the business purposes for collecting it, and the third parties with whom we share it.

• Right to Correction: The right to request correction of inaccurate personal information we maintain about you (available in California, Virginia, Colorado, Connecticut, Oregon, Texas, and Montana; not available under Utah law).

• Right to Deletion: The right to request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.

• Right to Opt-Out of Sale or Sharing: The right to opt out of the sale or sharing of your personal information, including for targeted advertising. We do not sell personal information as that term is defined under the CCPA/CPRA. To the extent we share information for targeted advertising or cross-context behavioral advertising, you may opt out by contacting us using the information below.

• Right to Limit Use of Sensitive Personal Information: California residents have the right to limit the use of sensitive personal information to certain enumerated purposes. We do not currently use sensitive personal information beyond those permitted purposes.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights, including by denying services, charging different prices, or providing a different level of service.

• Right to Data Portability: Where applicable (California, Colorado, Connecticut, Oregon), the right to receive a copy of your personal information in a portable and readily usable format.

• Right to Appeal: Where applicable (Virginia, Colorado, Connecticut, Oregon, Montana), if we deny your request, you have the right to appeal our decision. Appeals may be submitted by contacting us at the email below.

How to Exercise Your Rights

To exercise any of these rights, please contact us at info@avmar.group. We will verify your identity before responding to your request, which may include asking you to provide certain personal information that we can match against our records. You may also designate an authorized agent to make a request on your behalf, subject to verification.

We will respond to verifiable requests within 45 days of receipt. If we need additional time (up to an additional 45 days), we will inform you of the reason and extension period in writing.

1. Marketing Communications and Opt-Out

In Short: You can opt out of receiving marketing communications from us at any time.

If we send you marketing emails or other promotional communications based on your consent, you may opt out at any time by: (i) clicking the unsubscribe link included in each marketing email; (ii) contacting us at info@avmar.group; or (iii) updating your preferences if account settings are available.

Please note that you will continue to receive transactional or administrative communications related to our Service even if you opt out of marketing communications.

1. Acceptance of terms and prohibition of misuse

By using the Platforms, you confirm your acceptance of the terms of this Privacy Policy and the Terms of Use. If you do not agree to this Privacy Policy or to the Terms of Use, you are not permitted to use the Platforms.

You may not use any software or application that may cause harm to the Platform or to other users thereof, including by means of "viruses", "crawlers", "robots", "spiders", spyware, scanning systems, malicious files, means intended to breach or circumvent security or authentication measures, to deny access to other users or to disrupt access to the Platform, to place a load on the Platform, and the like. You may not perform any reverse engineering, modification or update of the Platform, its components, its files, the data, information or content made accessible by it or associated with it.

Any action you make whatsoever on our Platforms is subject to the provisions of this document.

Any person performing any action whatsoever on our Platforms attests that they have read this Privacy Policy document carefully and thoroughly, and that they accept, without reservation and irrevocably, all of its provisions. This Privacy Policy constitutes a binding agreement for all intents and purposes between us and the users of the Platforms. If you do not agree to any of the Terms of Use, please refrain from using the Platforms.

1. Updates to This Privacy Policy

In Short: We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this policy indicates when it was last revised.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date and will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes on our Service or by directly sending you a notification (where we have your contact information). We encourage you to review this Privacy Policy periodically.

1. How Can You Contact Us About This Policy?

If you have questions or comments about this Privacy Policy, or wish to exercise any of your rights described herein, you may contact us at:

Avmar Group Ltd.

Romania

Email: info@avmar.group

Phone: +40 724 232 221