Privacy Policy
This Privacy Policy explains how NICK Digital Agency (“NICK Digital”, “we”, “us”, or “our”) collects, uses, and protects personal data when you visit nickdigital.agency (the “Website”) or otherwise interact with us. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable national law.
Contents
1. Controller & contact
The controller responsible for the processing of your personal data is:
- Legal entity: Limited Liability Company “NICK DIGITAL AGENCY” (LLC “NDA”)
- Registered address: 1 Mykhaila Kotsiubynskoho St., Office 313, 01054 Kyiv, Ukraine
- Registration code (EDRPOU): 46084816
- Email: [email protected]
- Data protection contact: [email protected]
We have not appointed a statutory Data Protection Officer, as we are not required to do so under Art. 37 GDPR.
2. EU representative (Art. 27 GDPR)
As NICK Digital is established outside the European Union but offers services to, and monitors the behaviour of, individuals located in the EU, we are required under Art. 27 GDPR to designate a representative within the Union. Our designated EU representative is:
- Tamara Strelnikova
- Columbusstraße 88, 68309 Mannheim, Germany
- [email protected]
You may contact our EU representative on all matters relating to the processing of your personal data.
3. What data we collect
3.1 Data you provide
- Contact & enquiry data — name, email address, phone number, company, and the content of your message when you submit a contact form, request a quote, or email us.
- Recruitment data — information in any CV or application you send us.
3.2 Data collected automatically
- Server log data — IP address, browser type and version, operating system, referring URL, date and time of access. This is processed by our hosting provider to deliver and secure the Website.
- Usage & device data via cookies — only where you have given consent (see Section 5).
4. Purposes & legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Delivering, operating and securing the Website | Art. 6(1)(f) — legitimate interest in a functioning, secure site |
| Responding to enquiries and contact forms | Art. 6(1)(b) — steps prior to a contract; or Art. 6(1)(f) |
| Negotiating and performing client contracts | Art. 6(1)(b) — performance of a contract |
| Analytics (Google Analytics 4) | Art. 6(1)(a) — your consent |
| Advertising & remarketing (Meta Pixel, Google Ads, LinkedIn Insight Tag) | Art. 6(1)(a) — your consent |
| Complying with legal obligations | Art. 6(1)(c) — legal obligation |
5. Cookies & tracking
We use cookies and similar technologies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG. All non-essential cookies — including analytics and advertising technologies — are only set after you give consent via our cookie banner, in line with Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future. For full details and the list of providers, see our Cookie Policy.
6. Sharing & processors
We do not sell your personal data. We share data only with:
- Service providers (processors) acting on our instructions under Art. 28 GDPR data processing agreements — e.g. our hosting provider, email provider, and the analytics/advertising providers listed in the Cookie Policy.
- Public authorities where required by law.
7. International transfers
Some of our providers (including Google, Meta and LinkedIn) are based in the United States or process data outside the European Economic Area. Where this happens, transfers are safeguarded by the European Commission’s Standard Contractual Clauses and/or the providers’ certification under the EU–U.S. Data Privacy Framework. You may request a copy of the relevant safeguards using the contact details above.
8. Retention
We keep personal data only as long as necessary for the purposes set out above or as required by law. Enquiry data is generally deleted within 24 months of last contact unless a contractual or statutory retention period applies. Consent and cookie records are kept as required to demonstrate compliance.
9. Your rights
Subject to the conditions of the GDPR, you have the right to: access (Art. 15); rectification (Art. 16); erasure (Art. 17); restriction (Art. 18); data portability (Art. 20); and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal (Art. 7(3)).
To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence or workplace (Art. 77).
10. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, including TLS encryption of the Website.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in our processing or legal requirements. The current version is always available on this page, with the “Last updated” date at the top.
