Privacy Policy
01Controller
The data controller responsible for personal data processed in connection with this website is:
Questions concerning this policy or the processing of personal data may be sent to the email address above.
02Scope
This policy applies to personal data processed through novalinesystems.eu and through direct business correspondence with Novaline Systems OÜ, including email inquiries, institutional or B2B supply discussions and resulting commercial relationships. The website does not currently provide customer accounts, online payments, a contact form or a newsletter.
03Categories of personal data
Depending on how you interact with Novaline, the following categories of personal data may be processed:
- Business contact details — name of the contact person, business email address, and phone number if you choose to provide one.
- Company and professional information — company name and job title or role.
- Inquiry and correspondence — the content of emails and any related correspondence exchanged with Novaline.
- Contractual or commercial information — details relating to a potential or existing supply relationship, orders, or agreements.
- Technical data — IP address, approximate access time, browser type, and standard server log data generated by visiting the website.
Novaline does not knowingly collect payment card details, government identification numbers, or health data through this website, and this website does not request them.
04Purposes and legal bases
- Responding to inquiries and conducting B2B communications — Novaline's legitimate interest in developing and managing business relationships, Article 6(1)(f) GDPR.
- Taking steps before entering into a contract and performing a contract — Article 6(1)(b) GDPR, where the individual concerned is personally a party to the contract.
- Managing relationships with representatives of business partners — Novaline's legitimate interest in concluding, administering and performing commercial agreements, Article 6(1)(f) GDPR.
- Operating and securing the website, maintaining technical logs and preventing misuse — Novaline's legitimate interest in ensuring the availability and security of its systems, Article 6(1)(f) GDPR.
- Establishing, exercising or defending legal claims — Article 6(1)(f) GDPR.
- Compliance with legal obligations, including applicable accounting and record-keeping requirements — Article 6(1)(c) GDPR.
05Recipients of personal data
Novaline does not sell personal data. Personal data may be disclosed only to the following categories of recipients, where necessary to operate the website, handle business correspondence, or comply with legal obligations:
- Hosting provider — GoDaddy, which hosts the website infrastructure.
- Email provider — email correspondence is handled through a mail server operated on Novaline's hosting infrastructure with GoDaddy.
- Security and content delivery provider — Cloudflare, used for website security and content delivery.
- IT and security service providers assisting with the operation and protection of Novaline's systems.
- Typeface delivery provider — Google, where Google Fonts resources are loaded directly by the visitor's browser.
- Accounting and legal advisers, where access to relevant data is necessary for their engagement.
- Public authorities, only where disclosure is required by applicable law.
06International data transfers
Some service providers used by Novaline, including GoDaddy and Cloudflare, operate global infrastructure and may process personal data outside the European Economic Area.
Where personal data is transferred to a country covered by an adequacy decision of the European Commission, the transfer is based on that decision. Transfers to participating organisations in the United States may also be based on the EU–US Data Privacy Framework.
Where no adequacy mechanism applies, transfers are protected by appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where required, supplementary contractual, technical and organisational measures.
Information about the applicable safeguards may be requested by contacting office@novalinesystems.eu.
07Retention periods
- Inquiries that do not lead to a business relationship — retained for up to 24 months from the last communication, then deleted.
- Active business relationships — retained for the duration of the relationship, and afterward for as long as required by applicable law or necessary to establish, exercise or defend legal claims.
- Accounting documentation — retained in accordance with applicable statutory retention requirements.
- Server logs — retained only for as long as reasonably necessary to operate, secure and diagnose the website, subject to the retention settings applied by the relevant hosting and security providers.
08Your rights
Subject to the conditions set out in applicable data protection law, you have the right to:
- request access to the personal data Novaline holds about you;
- request rectification of inaccurate or incomplete data;
- request erasure of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability, where technically applicable;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact office@novalinesystems.eu.
09Right to lodge a complaint
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority — including in your country of residence, place of work, or the place of the alleged infringement. For Estonia, the competent authority is:
10Cookies
This website does not currently use analytics, advertising, or profiling cookies. Essential technical data may be processed by the hosting and security infrastructure (GoDaddy and Cloudflare) as part of delivering and protecting the website. This page will be updated if that changes.
11Server logs, security and external resources
Standard technical server logs (such as IP address, access time, and browser type) are generated automatically by the hosting and security infrastructure for the purpose of operating and protecting the website. This website loads typeface files from Google Fonts, which may cause your browser to connect directly to Google's servers when the page is loaded.
12Automated decision-making
Novaline does not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.
13Changes to this policy
Novaline may update this policy from time to time to reflect changes in its practices or in applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. For questions about this policy, contact office@novalinesystems.eu.