The personal data addressed in this Privacy Policy are processed only:

• to take action, at the request of an individual, prior to the conclusion of a contract;

• when necessary to comply with a legal or regulatory obligation to which PavEnergy's company(ies) are subject;

• where necessary for the purposes of the legitimate interests of PavEnergy's company(ies), except where the interests or freedom and fundamental rights of the individual(s) prevail over such interests; or

• (only when required by law) with the explicit consent of the individual.

In cases where the processing is based on consent and is subject to applicable local law, which may provide otherwise, you will have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal of consent.

Security of your personal data

We implement technologies and policies to protect your privacy from unauthorized access and misuse. We may use encryption, in particular, for some of our services and apply an authentication and verification process for access to Pavilion Energy group services, and we will regularly test and evaluate the effectiveness of our security measures.