Privacy Policy
This Privacy Policy explains how Nedivix OÜ (“Nedivix”, “we”, “us”) collects, uses and protects personal data when you visit our website, contact us or engage us for an IT infrastructure project. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
1. Data controller
The controller responsible for your personal data is:
- Nedivix OÜ (registry code 17505365)
- Pärnu mnt 26, Kesklinn, 10141 Tallinn, Estonia
- Email: info@nedivix.com
2. What personal data we collect
We collect only the data needed to communicate with you and deliver our services:
- Contact & enquiry data — name, business email, company name and the content of your message submitted via our contact form or by email.
- Project & correspondence data — information you share about your IT environment, requirements, and ongoing communication during an engagement.
- Business & billing data — company details, contact persons and information required to issue invoices and meet accounting obligations.
- Technical data — limited server log information (such as IP address, browser type and pages requested) generated automatically when you visit the website.
3. Purposes and legal bases
- Responding to enquiries — to answer your questions and prepare proposals. Legal basis: our legitimate interest and steps taken at your request prior to a contract.
- Providing services — to perform an agreed project under an individual service agreement. Legal basis: performance of a contract.
- Invoicing and accounting — to issue invoices and retain records. Legal basis: compliance with a legal obligation.
- Website operation and security — to keep the website available and secure. Legal basis: our legitimate interest.
4. How we use the data
We use personal data solely for the purposes above. We do not sell personal data, and we do not use it for automated decision-making or profiling. We do not run advertising or marketing tracking on this website.
5. Recipients and processors
We share personal data only where necessary to operate our business, with providers acting on our behalf or under their own controls:
- Infrastructure providers — computing resources used to deliver projects are procured from third parties such as Hetzner, OVH and Cloudflare, primarily within the EU/EEA.
- Email and hosting providers — used to receive your messages and host this website.
- Accounting and professional advisers — used to meet legal and financial obligations.
- Public authorities — where disclosure is required by law.
Where a provider is located outside the EEA, we ensure appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) are in place.
6. Data retention
We keep personal data only as long as necessary for the purpose for which it was collected. Enquiry data is kept for the duration of the correspondence and a reasonable period afterwards. Project and accounting records are retained for the periods required by Estonian law (accounting records are generally retained for 7 years). After these periods data is securely deleted or anonymised.
7. Your rights
Subject to the GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data where applicable;
- request restriction of, or object to, processing;
- receive your data in a portable format where applicable;
- lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee/en).
To exercise any of these rights, contact us using the details below.
8. Cookies
This website does not use advertising or analytics tracking cookies. Only technically necessary requests are made to operate the site. Web fonts are loaded from Google Fonts, which may receive your IP address as part of serving those fonts.
9. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls and encryption in transit.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version and its “last updated” date are always published on this page.