[t+c]s

nendo.engineering Data Protection Policy (hereafter, the "Privacy Policy")

[last updated] 26 January 2024

We, at nendo.engineering have defined the following Privacy Policy.
‍
In accordance with the applicable law, such as the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereafter, the "General Data Protection Regulation") and/or the Luxembourg Law of 1 August 2018 on the organisation of the National Data Protection Commission and the general data protection framework, the Privacy Policy aims to explain and describe the personal data we collect, for what purposes we do it, as well as your privacy rights and the way you can exercise them.
‍
This Privacy Policy applies to our use of personal data collected (as defined below), controlled and/or processed by us in relation to our website and online shop (www.nendo.engineering) (hereafter, the "Website"), newsletter and platforms (hereafter, "nendo.engineering Services") and/or any interaction you may have with nendo.engineering.
‍
In conformity with the General Data Protection Regulation and for the sake of good order, it is to be noted that nendo.engineering acts both as a data controller and a data processor depending on the circumstances. The present policy only applies to situations where nendo.engineering acts as a data controller.


‍
1. nendo.engineering processes two types of personal data:

  1. Data processed by nendo.engineering as processor (hereafter, the "End Users Data") and more precisely personal data concerning end users, i.e. individuals or entities using nendo.engineering Services or any other service provided by nendo.engineering and with whom nendo.engineering has no contractual relationship, collected by nendo.engineering’s clients or directly submitted by nendo.engineering Services' end users to nendo.engineering acting as data processor; and

  2. Data processed by nendo.engineering as controller  (hereafter, the "Other Data" ") and more precisely all data collected by nendo.engineering within the scope of this privacy policy other than End Users Data.


2. Which types of personal data does nendo.engineering collect about me?

We collect and/or process all personal data that you choose to communicate to us, such as your name, first name, home and/or office address, date of birth, profession, email address and mobile phone number as well as other information we collect related to your use of our nendo.engineering Services or our Website.

We also collect and/or process certain types of information automatically, whenever you interact with us in order to allow you to use the Website and/or nendo.engineering Services.

When you visit the Website and/or nendo.engineering Services, cookies may be installed on your browser software to obtain certain personal/usage data when your web browser accesses our Website and/or nendo.engineering Services.

Those usage data are the following:

  • the Internet protocol (IP) address used to connect your computer or mobile device to the Internet;

  • the location of your computer or mobile device during the use of our Website;

  • interface controls; and

  • system information.

nendo.engineering also collects the personal data of candidates interested in a vacancy with nendo.engineering. If the interested candidate is subsequently hired, the personal data will be retained for at least the duration of the employment relationship and without prejudice to the above paragraph. In case of refusal, the personal data of the interested candidates shall be deleted without delay, unless the interested candidate objects.


‍
3. Who are the recipients of the personal data collected about me? Does nendo.engineering share those data with third parties?

Depending on the concerned data, the persons occupying the following positions are the recipients of the personal data:

  • Management Positions

  • Security Officer

  • Legal Counsel

  • DPO

nendo.engineering may share and disclose personal data with third parties (i.e. outside nendo.engineering) on the following grounds:

  • With nendo.engineering’s subcontractors

nendo.engineering may share/ disclose personal data with its subcontractors that will perform services at nendo.engineering’s direction and on its behalf (for example, a company providing services in order to systematically track nendo.engineering’s Website activity and a company providing Cloud storage solutions). In this case, service providers are either subject to this Privacy Policy or follow privacy rules at least as protective as those stated therein.

  • If the disclosure is required or permitted by law

nendo.engineering may also share/disclose personal data if required or permitted by law, such as, for example:

  • in order to protect and/ or defend nendo.engineering’s rights, including comply with a law or regulation, enforcing agreements or policies;

  • to prevent fraud and/ or for safety reasons; and/or

  • to protect the vital interests of a person.

  • with your consent

If one or some of your personal data might be shared to third parties other than specified above, you will receive notice and will have the choice not to allow your data to be shared.

nendo.engineering may share your personal data when it collects your consent to do so.

Unless on the grounds specified above, nendo.engineering will not share your personal data with third parties. When nendo.engineering transfers personal data to an authorised recipient that is registered outside the European Economic Area, it will ensure that such data is transferred in accordance with this Privacy Policy and that the transfer is made in accordance with the General Regulation on Data Protection.



4. How long does nendo.engineering keep Personal Data?

nendo.engineering only keeps personal data for the time strictly necessary in order to enable the use of our services and/or to fulfil the purposes identified above, and/or to comply with any legal or regulatory obligations. This may imply retaining personal data after the termination of your contractual relationship with nendo.engineering and/or the deactivation of your personal or business account for the period of time needed for nendo.engineering to, for instance, demonstrate compliance with its legal or regulatory obligation, resolve dispute and/or enforce our agreements.If you have questions regarding the specific period of storage of your personal data, please contact us by email at gdpr@nendo.engineering.

‍
5. Are my personal data safe with nendo.engineering?

Your personal data are stored securely in accordance with the principles set out in the General Data Protection Regulation.

nendo.engineering will keep data, among others, in electronic form, and such data may only be stored for professional use, transferred to any other place of work of nendo.engineering or of the group to which nendo.engineering belongs to, including companies of the group that are established abroad, to subcontractors or other co-contractors of nendo.engineering, as well as to any public administration or authority, provided that legal obligations applicable to nendo.engineering require such a transfer, or  where the transfer is compliant with the purpose for which the data has been collected by nendo.engineering.

nendo.engineering uses administrative and software-based security safeguards (various security layers, such as passwords and restricted access rights) to provide reasonable protection for your personal data. All your personal data digitally stored are encrypted and protected by firewall and information access authorisation controls.



‍6. Who is responsible for processing personal data?

nendo.engineering is the processor of the End Users' Data. The controller of Other Data is nendo.engineering. If you have any questions on nendo.engineering’s Privacy Policy or on our privacy practices that are not addressed in this Privacy Policy, please contact us by email at gdpr@nendo.engineering.


‍7. What are my rights regarding my personal data?

Subject to limitations set out under European and Luxembourg law, you have:

  • the right to be duly informed about the use and processing of the personal data;

  • the right to access the personal data;

  • the right to rectify the personal data, the right to request erasure of the personal data, provided that constraints and legal obligations applicable to nendo.engineering do not conflict with such a request;

  • the right to object to the processing of the personal data, provided that no legitimate grounds for the processing exist which override your interests, rights and freedoms or unless the personal data is necessary for the legal defence of nendo.engineering’s interests.

  • the right to obtain in particular situations specified in the GDPR, the restriction of processing so that the personal data may only be processed with your consent (without prejudice to our right to store the data in accordance with the applicable legal provisions). The execution of this right does not impact any previous processing’s;

  • the right to receive in particular situations specified in the GDPR, all personal data relating to you and provided by you to nendo.engineering and to transfer this data to another controller (right to data portability). nendo.engineering reserves the right to charge a fee for such transfer, especially in case of frequent requests and / or in the event of a request deemed excessive in terms of volume of data to be transferred. You have to inform nendo.engineering in writing in due course before the end of the contract if you intend to make use of this right. Otherwise, nendo.engineering cannot be held responsible for the erasure of the personal data;

These rights may be exercised by contacting nendo.engineering by email at gdpr@nendo.engineering, together with a signed copy of your ID.


8. Changes to the Privacy Policy

We may revise this Privacy Policy from time to time to keep it in line with changes in our business, services or applicable law.

All changes to this Privacy Policy will be published on the Website. In case of substantial changes, we will also notify nendo.engineering Services users by email or through nendo.engineering Services. If you disagree with any future changes to this Privacy Policy, you should immediately stop using nendo.engineering Services and the Website and contact nendo.engineering.


‍Contact details: Any questions and requests relating to personal data should be addressed per e-mail to gdpr@nendo.engineering.