Privacy Policy — Marvus Advisory

1. Who is responsible for your data

Marvus Advisory Corp., trading as Marvus Advisory, is the controller of personal data collected through marvus.agency. The company is an International Business Company registered in the Republic of Seychelles under number 251849, with its registered office at Suite 10, 3rd Floor, La Ciotat, Mont Fleuri, Mahé, Seychelles.

Because we work with companies and candidates located in the European Economic Area, this policy is written to meet the standard of the EU General Data Protection Regulation (GDPR) alongside the data protection law of the Republic of Seychelles.

Data protection enquiries: info@marvus.agency.

2. What data we collect

Enquiry data. The name, email address, company name and message you enter in the enquiry form, together with the date and time of submission.
Recruitment data. Where you take part in a search, the professional information you send us: work history, certificates of competency and endorsements, sea service records, references, and contact details.
Correspondence. Emails and messages you exchange with us, and our notes of calls and interviews.
Technical data. Server access logs kept by our hosting provider, which may include IP address, browser type and the pages requested. This site loads no analytics and no third-party tracking.

We do not knowingly collect data from anyone under 16, and we ask you not to send us special category data (such as health or biometric information) unless we have asked for it and explained why it is needed.

3. Why we process it, and on what legal basis

Answering your enquiry — the processing is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR), or rests on our legitimate interest in responding to business correspondence (Article 6(1)(f)).
Providing recruitment, consulting and training services — performance of a contract with you or your employer (Article 6(1)(b)).
Presenting a candidate to a client company — our legitimate interest in operating a recruitment practice (Article 6(1)(f)); where local law requires it, or where we keep your profile on file for future roles, we rely on your consent (Article 6(1)(a)).
Keeping records and meeting legal obligations — compliance with a legal obligation (Article 6(1)(c)) and our legitimate interest in defending legal claims (Article 6(1)(f)).
Site security and availability — our legitimate interest in operating the website safely (Article 6(1)(f)).

Where processing rests on consent, you may withdraw that consent at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.

4. Who we share it with

We do not sell personal data and we do not share it for advertising. Data is disclosed only to:

Client companies, where you are a candidate in an active search and only to the extent needed to consider your application. We tell you which company before we present you.
Service providers acting on our instructions, such as our website hosting provider and our email provider, under written terms that restrict their use of the data.
Professional advisers and authorities, where we are required to disclose by law or need to establish or defend a legal claim.

5. International transfers

We operate across the Black Sea, Mediterranean and Asia-Pacific regions, and the company is registered in the Republic of Seychelles. Personal data may therefore be transferred outside the European Economic Area. Where data originating in the EEA is transferred, we put appropriate safeguards in place, normally the European Commission’s Standard Contractual Clauses, together with technical and organisational measures suited to the transfer. A copy of the safeguards used can be requested at the address above.

6. How long we keep it

Website enquiries that do not lead to an engagement — up to 12 months from the last contact.
Candidate profiles — up to 24 months from the last contact, after which we delete the profile or ask whether you wish it to remain on file.
Client and assignment records — for the duration of the engagement and for up to 6 years afterwards, to meet accounting and limitation requirements.
Server access logs — as set by our hosting provider, normally no more than 12 months.

7. Your rights

Subject to the conditions in applicable law, you have the right to request access to your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing, including processing based on legitimate interests; to receive your data in a portable format; and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.

To exercise a right, write to info@marvus.agency. We answer within one month and may ask for information to confirm your identity. There is no charge for a reasonable request.

8. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), access limited to the people who need it, and regular review of the accounts that hold personal data. No transmission over the internet can be guaranteed completely secure; please do not send sensitive documents by email unless we have agreed a secure route.

9. Cookies

This website sets no advertising or analytics cookies. The only value stored in your browser records your response to the cookie notice. See the Cookie Policy for details.

10. Changes to this policy

We may update this policy as our services or legal obligations change. The version published on this page is the one that applies, and the date at the top shows when it was last changed. Material changes affecting existing candidates or clients will be notified directly.