Data Protection and GDPR Policy

1. Purpose

McWhite Solutions S.R.L. respects the privacy of individuals and is committed to protecting personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR).

This policy outlines how personal data is processed, protected, and managed within the company.

2. Scope

This policy applies to all personal data processed by McWhite Solutions in the course of its business activities, including data relating to employees, contractors, clients, and business contacts.

3. Principles of Data Protection

McWhite Solutions processes personal data in accordance with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation – data is collected only for legitimate business purposes
• Data minimization – only necessary personal data is processed
• Accuracy – reasonable steps are taken to ensure data is accurate and up to date
• Storage limitation – personal data is retained only as long as necessary
• Integrity and confidentiality – appropriate security measures are applied

4. Types of Data Processed

Depending on the nature of the engagement, McWhite Solutions may process limited personal data such as:

• business contact details (name, email address, phone number)
• professional information related to project work
• communication records necessary for service delivery

The company does not intentionally collect sensitive personal data unless required for legal or contractual purposes.

5. Data Security

McWhite Solutions implements technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction.

Security measures include secure access controls, encrypted communications where appropriate, and responsible data handling practices.

6. Data Sharing

Personal data may be shared only when necessary for legitimate business purposes, such as:

• fulfilling contractual obligations to clients
• complying with legal requirements
• collaborating with authorized project partners

McWhite Solutions does not sell or distribute personal data to third parties for marketing purposes.

7. Data Subject Rights

Individuals whose personal data is processed by McWhite Solutions may exercise their rights under GDPR, including:

• the right to access personal data
• the right to correct inaccurate information
• the right to request deletion where applicable
• the right to restrict or object to processing in certain circumstances

Requests regarding personal data may be directed to the company through official contact channels.

8. Policy Updates

This policy may be updated periodically to reflect legal requirements or operational changes.