Privacy Policy

Effective Date: 13 February 2025

This Privacy Policy describes how Nicofy.com (“we,” “us,” or “our”) processes and protects the personal data of our customers in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the European Union.

1. Data Controller

The data controller responsible for processing your personal data is:

Nicofy.com
Kristian Kivi
Email: [email protected]

2. Data Protection Officer

The responsible contact person for the registry is:

Kristian Kivi
Email: [email protected]

3. Name of the Register

Customer information is stored in the Nicofy.fi customer register.

4. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation is:

• The individual’s consent (documented, voluntary, specific, informed, and unambiguous)
• A contract in which the data subject is a party
• Compliance with a legal obligation
• The legitimate interest of the data controller (e.g., customer relationship, employment relationship, membership)

The purpose of processing personal data is to communicate with customers, maintain customer relationships, and conduct marketing.

No automated decision-making or profiling is performed using customer data.

5. Data Content of the Register

The register stores the following personal data:

• Name
• Contact details (phone number, email address, postal address)
• Website addresses
• IP address of the network connection
• Usernames/profiles in social media services
• Details of ordered services and changes to them
• Billing information
• Other information related to customer relationships and ordered services

Nicofy.fi primarily uses collected data to fulfill customer orders. Data is stored as long as the customer relationship lasts.

6. Regular Data Sources

Personal data is obtained from customers via:

• Messages sent through website forms
• Email and phone communication
• Social media services
• Contract agreements

7. Regular Disclosures and Data Transfers Outside the EU or EEA

Personal data is not regularly disclosed to third parties. Data may be published only if agreed upon with the customer.

Data may be transferred outside the EU or EEA if necessary for service fulfillment, and adequate safeguards will be implemented in such cases.

8. Principles of Register Protection

The processing of the register follows careful data management practices. Data processed electronically is appropriately protected. When data is stored on Internet servers, the physical and digital security of the hardware is properly maintained.

The controller ensures that all stored data, server access rights, and other critical personal data security measures are handled confidentially and only by employees whose job duties require it.

9. Right of Access and Right to Rectify Data

Every individual in the register has the right to:

• Review their stored data
• Request corrections to incorrect or incomplete data

Requests for data review or correction should be sent in writing to the data controller. To ensure security, the controller may request proof of identity. Responses to requests will be provided within the timeframe stipulated by GDPR (generally within one month).

10. Other Rights Related to Personal Data Processing

Individuals in the register have the right to request:

• The deletion of their personal data (“right to be forgotten”)
• The restriction of processing in certain situations

Requests must be sent in writing to the data controller. The controller may require proof of identity. The request will be processed within the time limits set by GDPR.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience. You can manage your cookie preferences through your browser settings. More details are available in our [Cookie Policy].

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

13. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Email: [email protected]