1. Controller and contact
Alvau LLC
1270 Avenue of the Americas, floor 8
New York, NY 10020 US Alvau LLC controls its own correspondence and publishing activities. Send privacy requests to editorial@jluxu.com or the postal address above, identifying the request in the subject. Contact · editorial@jluxu.com. This page prepares a message in your email application; send it from there. Message preparation does not prove sending or receipt. This notice is information, not blanket consent to processing.
2. Data, sources and local functions
Page delivery involves the connection address and requested resource; delivery/security infrastructure may generate technical records. Emails contain sender details, content and voluntary attachments. Contributions involve author identity, contact, work, rights and agreed payment records; publication subjects and complaints may come from contributors, public sources or the persons concerned. Search, calculations, drafts and contact preparation operate locally, without a message endpoint or writes to cookies, localStorage, sessionStorage or IndexedDB by the supplied scripts. Copying, printing, downloads and session recovery remain under device controls. Contact details are voluntary, but a personal reply needs a reply route. Do not send passwords or unnecessary sensitive information.
3. Purposes and legal bases
Information is used for delivery, replies, accepted work, publication, security, complaints, corrections, rights records and legal duties. Where GDPR/UK GDPR applies, the relevant basis is contractual necessity, a specific legal duty, required valid consent, or properly balanced legitimate interests in publishing, communication, security and claims. Consent may be withdrawn; legitimate-interest processing may be challenged. Journalistic exceptions require assessment of the particular activity. ALVAU MAGAZINE’s data-use rules prohibit selling reader data, cross-context behavioral advertising, combining it with ALVAU profiles, and automated decisions with legal or similarly significant effects. A new purpose requires the applicable notice, basis and choices before it begins.
4. Recipients, external services and countries
Information access must be limited to personnel/collaborators and relevant hosting, delivery, email, security, professional-adviser and recordkeeping providers who need it. Lawful disclosure may involve authorities or claim participants; providers may also act for their own purposes. YouTube activation loads an external iframe and iframe API, sending requests to Google/YouTube; ordinary external links open separate services. Common ownership alone does not authorize data combination. Alvau LLC is a U.S. publisher; sending it mail from abroad involves international communication, and providers may operate in several countries. Legally required transfer safeguards or exceptions must apply before transfer. You may request the applicable basis and relevant safeguards from the privacy contact. No particular certification or contractual safeguard is asserted. See Cookies and external media.
5. Retention and security criteria
Local inputs are not persisted by the supplied scripts. Correspondence is kept through handling and necessary follow-up, then reviewed for deletion/redaction unless a specific legal duty or live claim requires it. Contributor/payment records follow applicable statutory recordkeeping periods and unresolved claims. Publication-supporting records remain while necessary to substantiate the publication or a lawful archive. Technical records, where kept, are limited to delivery/security/investigation needs and reviewed when the event closes. A legal hold restricts use to its proceeding and ends with that need. Deleted backup data must not return to ordinary use and expires through backup replacement. Access and security must be proportionate; complete security is not guaranteed.
6. Rights, signals and responses
Applicable law may provide access/copy, correction, deletion, restriction, portability, objection, consent withdrawal and opt-outs. GDPR/UK GDPR responses ordinarily take one month; permitted extensions need timely reasons. Where CCPA applies, access/deletion/correction ordinarily have 45 days with lawful extensions; opt-outs have their own deadlines. Applicable sensitive-data limits, nondiscrimination, other regional rights and required appeals remain available. Refusals must give reasons and available review/complaint routes. Identity checks must be proportionate, without passwords or unnecessary ID documents. GPC differs from Do Not Track: this version has no page-script handler storing or relaying either into YouTube. Legally required opt-outs remain binding; requests may be sent to the privacy contact, and external players can be left unloaded.
7. Children, complaints and updates
The site has no reader-registration or child-account function. Avoid unnecessary children’s data; report a child-data concern to the privacy contact for assessment under applicable rules. Complaints may go to the competent EEA authority, UK ICO or applicable U.S. authority. Source protection, others’ rights and lawful retention can limit a specific request, not exempt all activity. Material changes must be disclosed as required before new incompatible processing; earlier consent does not extend automatically. Publication reports follow Reporting and copyright complaints; corrections follow Editorial standards and corrections.
Advertising and PayPal payments
For advertising, we process business contact and billing details, bookings and terms acceptance, invoice numbers, transaction references and payment status to manage contracts, accounting and claims. PayPal processes checkout information under its own privacy notice. Loading the form or opening PayPal sends connection and device data to PayPal, which may use cookies or similar technologies. ALVAU MAGAZINE does not collect card numbers, CVV or PayPal passwords. Contractual necessity, legal duties and applicable lawful bases, retention criteria and rights described in this policy apply; no new analytics or reader profiling is added by this feature. The PayPal form starts loading automatically on the Advertising page and may involve provider-controlled cookies, as explained in our Cookies and external media notice.