Privacy Policy

Who we are

The data controller is Fintro Europe LTD, registered at Georgi Benkovski Street no 14, Sofia, Bulgaria. For any question about your data or to exercise your rights, write to us at contact@niva.fit.

What data we collect

When you fill in the contact form, we collect the data you provide plus a little technical data needed for security:

• Name
• Email address
• Phone number (if you provide it)
• Subject (if you provide it)
• Instagram and TikTok handle (if you provide them)
• Approximate follower count (if you select it)
• Your message
• IP address and browser type (collected automatically, as proof of consent and for security)

Why we use the data

We use the data for two purposes:

• Contact form data: to reply to your message and discuss the services you might use
• Meta Pixel data, only if you accept cookies: to measure which ads bring people to the site and to show our ads to people who may be interested

We do not send you marketing without your separate consent.

Legal basis

We process the data based on your consent (Art. 6(1)(a) GDPR), which you give by ticking the box in the form. You can withdraw your consent at any time by writing to the address above. Withdrawal does not affect processing carried out before withdrawal. For the Meta Pixel, the basis is the consent you give by clicking “Accept all” in the cookie banner; you can withdraw it at any time from “Cookie settings” in the site footer.

Who we share data with

We do not sell your data. We only share it with providers who help us run the service, under contract:

• Hosting and infrastructure providers that run the site and our database
• Slack - we receive an internal notification when you submit the form so we can reply quickly
• Meta Platforms Ireland Ltd - only if you accept cookies, through the Meta Pixel (details below)
• If you become a customer, we also use Stripe and Revolut for payments and Oblio for invoicing; they process the data needed for those services

Meta Pixel (only with your consent)

If you accept cookies in the site banner, we use the Meta Pixel, a tool from Meta Platforms Ireland Ltd. It sends Meta the pages you visit, whether you send the demo form, your IP address, browser details and an identifier stored in a cookie. We use this to measure which ads bring people to the site and to show our ads to people who may be interested. The legal basis is your consent, which you can withdraw at any time from “Cookie settings” in the site footer. Meta may transfer the data to the United States under the EU-US Data Privacy Framework. For collecting this data on the site and sending it to Meta, we and Meta are joint controllers (Art. 26 GDPR), under Meta's Controller Addendum (facebook.com/legal/controller_addendum). Meta is responsible for what it does with the data afterwards. You can exercise your rights with us or directly with Meta. For Meta's own processing, Meta's privacy policy applies (facebook.com/privacy/policy).

Transfers outside the European Economic Area

Some of our providers may process data outside the European Economic Area. In those cases we make sure appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

How long we keep the data

We keep the form data for a maximum of 24 months from the last contact, after which we delete or anonymise it, unless we have a legal obligation to keep it longer.

Your rights

Under the GDPR, you have the following rights over your data:

• The right to access your data
• The right to rectify inaccurate data
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object to processing
• The right to withdraw consent at any time

You can exercise any of these rights by writing to us at contact@niva.fit.

Automated decisions

We do not make automated decisions with legal or similarly significant effects on you. If you accept the Meta Pixel, Meta may use the data to decide who sees our ads.

Right to lodge a complaint

If you want to lodge a complaint about how we process your data, you can contact the supervisory authority in Bulgaria - the Commission for Personal Data Protection (CPDP) - or the authority in Romania, where you live - the National Supervisory Authority for Personal Data Processing (ANSPDCP).