CORPORATE PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA UNDER GDPR

Under the European Union General Data Protection Regulation (“GDPR”), your personal data is protected by Nartio Limited (“Nartio” or “Company”), acting as the data controller. The Company ensures the lawful processing and secure storage of personal data by utilizing technological and infrastructural measures and taking necessary technical and administrative precautions.

The purpose of this Privacy Notice is to:
(i) fulfill the obligation to inform under GDPR regarding the processing of personal data collected during the use of the website “https://nartio.com” (the “Website”), through activities like membership creation, newsletter distribution, and other interactions, and
(ii) provide transparency about the handling of personal data collected through communication channels such as the Nartio email address, LinkedIn, and Instagram social media accounts (“Communication Channels”).

This document explains how personal data is collected, for what purposes, and based on which legal grounds, and whether it is shared with third parties. It also informs data subjects about their rights under GDPR.

The Privacy Notice becomes effective as of the date it is published by Nartio and may be updated as necessary. Updates take effect immediately upon being published on the “https://nartio.com” website.

  1. Methods and Legal Grounds for Collecting Personal Data

The personal data specified in Section 3 titled “Categories and Types of Data” are processed in line with the legal grounds stated in Article 6/1 (b), (c), (d), (e), and (f) of GDPR, including:

  • when processing is necessary for compliance with a legal obligation,
  • when processing is required for the performance of a contract to which the data subject is a party,
  • when processing is necessary for the establishment, exercise, or defense of legal claims, or
  • when processing is based on legitimate interests pursued by the controller, provided such processing does not harm the fundamental rights and freedoms of the data subject.

If explicit consent is required, your personal data will only be processed within the scope of your freely given consent. Please note that you have the right to withdraw your consent at any time.

  1. Categories and Types of Data

Based on the legal grounds outlined above, the following categories of personal data are processed:

  • Location Information: Country and city information obtained from customers using the Website.
  • Transaction Security Information: System and user account information (username, log records, etc.), IP address data, and website login and logout details.
  • Marketing Information: Reports and evaluations reflecting user preferences and habits, targeting information, cookie records, and data derived from enrichment activities, as well as data from surveys, satisfaction polls, campaigns, and direct marketing efforts.
  • Feedback and Requests: Evaluations and requests submitted by you regarding our services.
  1. Purposes for Processing Personal Data

The personal data specified in Section 3 are collected and processed for the following purposes based on the legal grounds outlined in Section 2:

  • To perform necessary operational activities to provide required services.
  • To verify your identity.
  • To manage customer relationships and conduct activities aimed at enhancing customer satisfaction.
  • To provide information related to products and services.
  • To establish IT infrastructures and oversee security processes and operations.
  • To personalize and enhance your customer experience.
  • To conduct marketing analysis.
  • To manage advertising, campaigns, and promotions.
  • To manage and resolve your requests and complaints.
  • To define access permissions for business partners.
  • To prevent fraud and deception.
  • To present service history records as evidence in potential legal disputes.

Additionally, with your explicit consent, your personal data under the “Contact Information” category (e.g., email address) may be processed for purposes such as conducting marketing, promotional, and campaign activities, managing customer relationships, and carrying out customer satisfaction activities.

  1. Sharing Personal Data

Your personal data may be shared with:

  • Third parties providing products or services on our behalf to enable you to benefit from these products and services,
  • Authorized public institutions and private parties as required by law and within their scope of authority.
  1. Use of Cookies

To enhance your experience while visiting our online platforms, we use cookies, pixels, GIFs, and similar technologies (“Cookies”). The use of these technologies is carried out in compliance with applicable laws.
For more details, please refer to the “Cookie Policy” available on our website at “https://nartio.com.”

  1. Your Rights Under the GDPR

Under Articles 15 to 21 of the GDPR, regarding your personal data, you have the right to:

  • Learn whether the Company is processing your personal data and request information if it is,
  • Learn the purpose of processing and whether the data is being used in line with its purpose,
  • Learn whether your data is being transferred domestically or internationally and to whom,
  • Request the correction of any incomplete or inaccurate data,
  • Request the deletion or destruction of data as stipulated under applicable laws,
  • Request notification to third parties about the actions taken regarding correction, deletion, or destruction of your personal data,
  • Object to results arising solely from automated processing that produces unfavorable effects,
  • Seek compensation for damages incurred due to unlawful processing of your personal data.

Additionally:

  • Right of Access: You can request a copy of your personal data from the Company. A small fee may apply for this activity.
  • Right to Rectification: You can request corrections to inaccurate personal data and completion of incomplete personal data.
  • Right to Erasure (Right to Be Forgotten): In certain circumstances, you may request the deletion of your personal data.
  • Right to Restriction of Processing: Under certain conditions, you may request a restriction on the processing of your personal data.
  • Right to Object to Processing: In specific cases, you may object to the processing of your personal data.
  • Right to Data Portability: Under certain circumstances, you can request the transfer of your personal data to another organization or directly to yourself.

To exercise your rights, you can submit your requests in writing or electronically to the data controller.

GDPR-Specific Additional Information

If your personal data falls under GDPR (i.e., if you are located in the European Economic Area):
You have the right to access, rectify, or, if applicable, request the portability, restriction, or erasure of your personal data.

If personal data processing is based on your consent, you have the right to withdraw consent at any time. Withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal.

If you believe the Company’s data processing is not in compliance with GDPR, you have the right to file a complaint with the relevant regulatory authority.

Contact Information

  • Trade Name: Nartio Limited
  • Email Address: hello@nartio.com
  • Website: https://nartio.com
  • Address: 184 Shepherds Bush Road, Office 01-142, London, England, W6 7NL