1. Scope
This statement summarises the legal framework for personal-data processing carried out by A-Finance LLC in connection with the Vugrix ERP platform. The Law of the Republic of Azerbaijan "On Personal Data" (No. 998-IIIQ of 11 May 2010) applies as the primary instrument; for users in the European Economic Area, the EU General Data Protection Regulation (Regulation 2016/679, "GDPR") additionally applies.
Operational details — categories of data, retention, sub-processors — are set out in our Privacy Policy.
2. Data controller (operator)
- A-Finance LLC · Limited Liability Company
- Address: 27th street, building 14, Baku, Azerbaijan
- VÖEN:
2201420022· Reg. No.:1903023201 - Data-protection contact:
support@vugrix.com
3. Lawful bases for processing
We rely on the following lawful bases:
- Performance of a contract — account management, service delivery, billing.
- Legal obligation — accounting under the Tax Code of the Republic of Azerbaijan, lawful requests from competent authorities.
- Legitimate interest — information security, fraud prevention, service improvement.
- Consent — marketing communications, optional analytics.
4. Data-subject rights
Under the AZ Law on Personal Data and (where applicable) Articles 15–22 GDPR you have the following rights:
| Right | Description |
|---|---|
| Access | Confirm whether your data is processed and obtain a copy. |
| Rectification | Correct inaccurate or incomplete data. |
| Erasure | Request deletion of data, subject to retention obligations. |
| Restriction | Limit processing in certain circumstances. |
| Objection | Object to processing based on legitimate interest (including profiling). |
| Portability | Receive your data in a structured, machine-readable format. |
| Withdrawal of consent | Stop processing based on consent. |
| Not subject to automated decisions | Decisions producing legal effects shall not be based solely on automated processing. |
5. How to exercise your rights
Send a written request from the email address registered with your account to support@vugrix.com. We may ask for additional information to verify your identity. We respond within 30 calendar days of receipt. For complex or multiple requests this period may be extended by up to a further 60 calendar days, with prior notice explaining the delay.
6. Right to lodge a complaint
If a request is refused or remains unanswered, you may lodge a complaint with the competent supervisory authority of the Republic of Azerbaijan responsible for personal-data protection. EEA users also have the right to lodge a complaint with the data-protection authority of the Member State of their habitual residence.
7. International data transfers
Your data may be transferred outside the Republic of Azerbaijan for the purpose of delivering the service. Such transfers are carried out in accordance with Article 11 of the AZ Law — based on an adequate level of protection, your explicit consent, or appropriate safeguards such as the EU Standard Contractual Clauses.
8. Automated decision-making and profiling
We do not take or implement decisions producing legal effects on you that are based solely on automated processing. Some security measures (e.g. spam or fraud detection) may include automated components; in such cases you always have the right to request human review and to contest the decision.
9. Retention and security
Data is retained only for as long as necessary for the purposes of processing. Detailed retention periods and the technical / organisational measures we apply are set out in our Privacy Policy.
10. Updates
This statement may be updated from time to time. Material changes will be communicated at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the current version.