Privacy Policy

1. Introduction

GreenEcoGenius OÜ (registration number: 16917315), operating under the trade name NovaPulse Creative, is committed to protecting the privacy of users of its website novapulse-creative.com.

This privacy policy describes how we collect, use, store, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and Estonian data protection legislation.

By using our website, you agree to the practices described in this policy. If you do not agree with these terms, please do not use our website.

2. Data Controller

The data controller for personal data is:

• Legal name: GreenEcoGenius OÜ
• Trade name: NovaPulse Creative
• Registration number: 16917315
• Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145, Estonia
• Manager: Ervis Ago
• Email: contact@novapulse-creative.com
• Website: novapulse-creative.com

3. Data Collected

We may collect the following categories of personal data:

3.1. Data provided via the contact form

• First and last name
• Email address
• Phone number (where applicable)
• Message content

3.2. Navigation data (analytics)

• IP address (anonymized)
• Browser type and version
• Operating system
• Pages visited and visit duration
• Referral source
• Screen resolution and device type

3.3. Data collected via cookies

For more information about the cookies we use, please refer to our Cookie Policy.

4. Processing Purposes

Your personal data is processed for the following purposes:

• Responding to your requests: Processing and responding to messages sent via the contact form.
• Improving our website: Analyzing website usage to improve its content, performance, and user experience.
• Communications: Sending you information about our services, only if you have given your explicit consent.
• Legal obligations: Fulfilling our legal and regulatory obligations.

5. Legal Basis for Processing (GDPR Art. 6)

The processing of your data is based on the following legal grounds:

• Consent (Art. 6.1.a): When you fill out the contact form or accept cookies, you give your consent to the processing of your data for the stated purposes.
• Legitimate interest (Art. 6.1.f): Anonymous analysis of website traffic to improve our services constitutes a legitimate interest.
• Performance of a contract (Art. 6.1.b): Processing may be necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request.

6. Data Retention

Your personal data is retained for the following periods:

• Contact form data: 3 years from the last contact.
• Analytics data: 26 months maximum.
• Cookies: In accordance with the durations specified in our Cookie Policy.

Beyond these periods, your data is deleted or irreversibly anonymized.

7. Data Recipients

Your personal data may be shared with the following recipients:

• Vercel Inc. — Website hosting.
• Stripe Inc. — Payment processing (where applicable).

We never sell, rent, or share your personal data with third parties for commercial or advertising purposes.

8. Transfers Outside the European Union

Some data may be transferred to servers located in the United States, particularly through our hosting provider Vercel Inc.

These transfers are governed by adequate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Additional technical and organizational measures ensuring a level of protection equivalent to that guaranteed by the GDPR.

9. User Rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of access: Obtain confirmation that your data is being processed and receive a copy.
• Right to rectification: Request the correction of inaccurate or incomplete data.
• Right to erasure: Request the deletion of your data under the conditions provided by law.
• Right to data portability: Receive your data in a structured, commonly used, and machine-readable format.
• Right to object: Object to the processing of your data on legitimate grounds.
• Right to restriction of processing: Request the restriction of processing under certain circumstances.
• Right to withdraw consent: Withdraw your consent at any time, without affecting the lawfulness of processing based on consent given prior to its withdrawal.

To exercise these rights, please contact us at: contact@novapulse-creative.com

You also have the right to lodge a complaint with the competent supervisory authority:

• Andmekaitse Inspektsioon (Estonian Data Protection Authority)
• Website: www.aki.ee
• Email: info@aki.ee

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

• SSL/TLS encryption: All communications between your browser and our website are encrypted.
• Restricted access: Only authorized individuals have access to your personal data.
• Continuous monitoring: We regularly monitor the security of our systems.

11. Policy Changes

We reserve the right to modify this privacy policy at any time. Any changes will be published on this page with the updated date indicated at the top of the document.

We encourage you to regularly check this page to stay informed about how we protect your data.

12. Contact

For any questions regarding this privacy policy or the management of your personal data, you may contact us:

• Email: contact@novapulse-creative.com
• Address: GreenEcoGenius OÜ — Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 5, 10145, Estonia