Privacy Policy

We, Nirvana Privacy OÜ, located at Sepapaja 6, Lasnamäe linnaosa, Tallinn Harju maakond, Estonia, 15551, strive to comply with your rights and the requirements established by the applicable law for the processing of your personal data. This Privacy Policy (hereinafter referred to as the Policy) is aimed at informing you about how your personal data is processed by us.

If you do not agree with this policy as a whole or any part of it, you should not . Capitalized terms that are not defined in this policy shall have the meaning specified in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter – GDPR).

The current policy is very simple because we just started business.

If you have any questions about how we use your information, please contact us: dpo@nirvana-privacy.com or send mail to post address.

  1. Terms and Definitions Used in the Policy
Personal Data - any information related to an individual directly or indirectly determined or determined individual (Personal Data Subject) (your data, data);

Personal Data Controller- a person who independently or jointly with other persons organizes and (or) carries out the processing of personal data, as well as determines the purposes of processing personal data, the composition of personal data to be processed, actions (operations) performed with personal data (we, Nirvana Privacy);

Personal Data Processor - a person who processes personal data on behalf of the Personal Data Controller;

Personal Data Subject - a person the data of which is processed (you);

Personal Data Processing - any action or set of actions performed using automation tools or without using such tools with personal data, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, destruction of personal data;

Supervisory Authority - a state or other body authorized by virtue of applicable law;

2. Principles of Personal Data Processing
When processing your personal data, we shall comply with the following principles:

Lawfullness and fairness and transparency - the processing of personal data should be carried out on a legal and fair basis;

Limitation by purpose - the processing of your data is limited to the achievement of specific, predetermined and legitimate goals, and is carried out only if such goals exist;

Data minimization - the content and amount of processed personal data are consistent with the processing goals, the amount and content of processed personal data shall not exceed the minimum necessary to achieve the processing goals;

Accuracy, sufficiency and relevance - when processing your data, we shall take the necessary measures to delete or clarify incomplete or inaccurate data.

Storage limitation - your data is stored in a form that allows you to be identified, no longer than is necessary to achieve the stated processing goals, unless otherwise provided by law, by a contract to which the personal data subject is a beneficiary or surety;

Integrity and confidentiality - when processing your data, we ensure the security of personal data, including protection against accidental loss, destruction or damage, using appropriate technical and organizational measures.

3. Children's Data Processing
We shall not process personal data of persons under 13 years of age.

We shall take reasonable measures to control the age limit of our Users.

If you become aware of the use of the our services by a person under 13 years old, please let us know via dpo@nirvana-privacy.com.

4. Information about the Processing of Personal Data
4.1. Scope of the Data We Process
When you complete the contact form on website we collect the following personal data:
  • Your name
  • Your business or personal email
  • Your position at the company you represent
Some of the information that may be provided by You to the Nirvana Privacy when you complete the contact form, when you put the information in the fields of the form You should not violate the rights, freedoms and legitimate interests of such persons.

4.2. Data Processing Purposes
We shall process Your personal data for the following purposes:
  • to respond to your requests via contact form and to provide customer service
  • to establish business relations and deliver our services.

4.3.
Lawfulness of Personal Data Processing
The grounds for the processing of personal data is our legitimate interest to develop our business and to provide excellent customer service.
When we discuss possible relations or future projects we process your data on the basis of contract or or in order to take steps at the request of the data subject prior to entering into a contract.

4.4. Terms of processing and storage of Your data

We process your personal data on the basis of legitimate interest for no more than three months. It takes time to analyse your request and match it with our business strategy.
As to personal data gained from business relations, we do not store these data for longer than the duration of the contract. If for any reason, we terminate our relations prior to the contract being concluded, we delete your data within one month.

4.5. Data Transfer
We do not transfer your personal data outside the European Economic Area.

5. Your Rights
As a Data Subject, you have the right to:
  • Access to the data about you that we process:
    • about the purposes of processing your personal data;
    • about the categories of personal data processed about You;
    • about recipients or categories of recipients to whom personal data is transferred;
    • on the timing of the processing of Your data;
    • about the right to demand from us the correction or deletion of personal data or the restriction of the processing of Your personal data, or to object to the processing;
    • if the data is not collected from You, then information about the source of receipt;
    • information about the right to file a complaint with a regulatory authority;
    • information on guarantees of transfer to third countries
    • Information about the existence of an automated decision-making process, including profiling, and, when available, information about the logic, as well as the significance and expected consequences of such processing for you.
  • The claim from the Controller to clarify his personal data, to block or destroy it if the personal data is incomplete, outdated, inaccurate, illegally obtained or not necessary for the stated purpose of processing, as well as take legal measures to protect their rights
  • Appeal against the actions of an Controller or processor;
  • Protection of their rights and interests in the form provided for by applicable law;
  • Erasure (right to be forgotten) of your personal data;
  • Restriction of the processing of personal data
  • Transferring your data to another Controller with the possibility of technical implementation;
  • Objection to data processing if there are grounds established by applicable law;
  • To object to a decision based solely on the basis of automated processing;
  • The right to withdraw consent;
You can exercise your rights by contacting us in necessary cases for implementation: dpo@nirvana-privacy.com.

6. Personal Data Security
We shall take all necessary technical and organizational measures to ensure the availability, integrity and confidentiality of your data, relevant data categories.

7. Amendments to the Privacy Policy
We are entitled to amend the Privacy Policy unilaterally. In case of amendments You will see the notification on our website.