GDPR Notice

1. Who this page is for

This notice supplements our Privacy Policy for users in the European Union and the EEA and lists the information required by the General Data Protection Regulation (GDPR).

2. Controller

The owner of nidium.com, Russian Federation. Contact: “Contact us” form, topic “Personal data”.

3. Data, purposes and legal bases

• Form data (name, email or Telegram, message, app details): to reply and handle your request. Legal basis: consent (Art. 6(1)(a) GDPR).
• Technical data (IP address, browser, request time): to protect the site from spam and attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Transfers outside the EU

Data is stored on a server in Russia. Notifications reach the operator via Telegram. There is no EU adequacy decision for Russia, so form data is transferred on the basis of your explicit consent (Art. 49(1)(a) GDPR).

5. Retention

Messages and requests: no longer than 3 years after your last message. Server logs: no longer than 6 months.

6. Your rights

To exercise your rights, use the “Contact us” form. We reply within one month, usually sooner.

• access your data and get a copy;
• rectify inaccurate data;
• erase your data;
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time (this does not affect processing before withdrawal);
• lodge a complaint with the data protection authority in your EU country.

7. Automated decisions

We do not make decisions with legal effects based solely on automated processing and do not profile users.