1. Introduction
This Privacy Policy explains how we collect, use, and protect personal data when you visit this website or contact us by email. We aim to handle information responsibly and transparently in line with applicable data protection law, including the EU General Data Protection Regulation (GDPR).
2. Data Controller
Controller: Nikita Wokurka, operating under the business designation niwo systems
Email: [email protected]
Address: Germany; external business address being finalized
If you have questions about this Privacy Policy or your personal data, you can contact us using the details above.
3. Data We Collect
a) Information you provide voluntarily
When you contact us by email, we may process:
- Your email address
- Your name or signature, if you include it
- Your company name, phone number, or other contact details, if you include them
- The content of your message and any attachments you send
This information is used solely to review and respond to your inquiry.
b) Automatically collected data
When you visit the website, basic technical data may be processed automatically by hosting infrastructure, such as your IP address, request metadata, browser information, and access logs needed for secure delivery of the site.
4. Purpose & Legal Basis
We process personal data to operate the website securely, respond to inquiries, and protect our systems against abuse or misuse. Depending on context, the legal basis is either our legitimate interests under Article 6(1)(f) GDPR or steps taken at your request prior to entering into a contract under Article 6(1)(b) GDPR.
5. Data Storage & Retention
Unsuccessful business inquiries are normally deleted within six months after the last communication. Correspondence relating to an active client engagement is retained for the duration of the engagement and afterwards only where necessary to establish, exercise, or defend legal claims or comply with legal obligations. Contracts and invoices are archived separately under applicable statutory retention requirements rather than kept indefinitely in the ordinary mailbox. For privacy or security requests, we retain only the limited evidence needed to document and resolve the matter, and delete it when it is no longer reasonably required.
6. Use of Third-Party Providers
AWS hosting and content delivery
Amazon Web Services (AWS) provides Amplify Hosting, CloudFront content delivery, CloudWatch operational logging, and S3 media storage. AWS may process IP addresses, requested URLs, timestamps, user-agent information, request headers, and delivery or security metadata to provide and protect the website. The Amplify deployment and media-storage origin are located in Frankfurt, Germany (eu-central-1), while CloudFront uses a global edge network. Amplify compute logs are retained for 90 days. Amplify Hosting access logs are retained by AWS until the Amplify app is deleted. Separate access logging for the media CloudFront distribution is disabled.
Email communication
Business email is provided through Proton Mail by Proton AG in Switzerland. When you contact [email protected], [email protected], or [email protected], Proton may process sender and recipient addresses, message metadata, message content, signatures, and attachments to transmit and store the correspondence. Proton states that Proton Mail data is stored in encrypted form on servers in Switzerland, Germany, or Norway and that encrypted offline backups may be retained for up to 30 days.
Fonts
The website uses locally hosted fonts. No font requests are sent to third-party font providers when loading the site.
8. Your GDPR Rights
Under the GDPR, you may have the right to:
- Request access to your personal data
- Request correction or deletion of your data
- Request restriction of processing
- Object to processing in certain circumstances
- Lodge a complaint with a supervisory authority
To exercise these rights, contact [email protected].
9. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. However, no internet transmission or storage system can be guaranteed to be completely secure.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be published on this page.
12. Contact
If you have questions about this Privacy Policy or about how your personal data is handled, contact [email protected].