1. Who is responsible for your data
The controller is NIVEN LLC (Товариство з обмеженою відповідальністю «НІВЕН»), Ukrainian company code 20874646, trading as NIVEN. Registered address: Apt 48, 33-A Pivdenna Street, Mykolaiv, Mykolaiv region, 54018, Ukraine.
This notice covers NIVEN’s corporate information website, its Ukrainian and English versions, enquiry forms and related correspondence. The site presents the company and its products. It is not an online shop or marketplace, does not take payments and does not accept online orders.
For privacy matters, contact NIVEN’s appointed responsible personnel at team@niven.com.ua (subject: “Personal data”), by telephone on +38 096 565 59 64, or in writing to the registered address. You may use these contacts to exercise your rights.
2. Information we collect
A form submission includes the selected topic, your name, country and either an email address or phone number. You may also provide your company, product interest, dimensions or fraction, estimated volume, destination, message and other relevant requirements. We receive the source page, language, receipt time and acknowledgement of the applicable version of this notice.
If you contact us by email, telephone or WhatsApp, we receive your contact details and the information you choose to share. If you represent a company, provide other people’s details only where you are authorised to do so for the enquiry. Do not use the form to send card details, passwords, identity documents, health information or other sensitive data. The form does not accept attachments.
3. Technical data and form protection
When you visit the site, the hosting infrastructure processes your IP address, request time and URL, browser and device information, and data needed to serve pages, diagnose errors and prevent abuse. Do not put personal information in a page address or link parameters.
To limit repeated submissions, the server uses a pseudonymous code derived from the IP address, a counter and an expiry time. The code is not anonymous data. The limit is five enquiries per 15 minutes; expired records are removed during subsequent form checks. These records contain no name, phone number, email address or enquiry text. Form content is not placed in URLs or sent to advertising analytics.
4. Purposes and legal bases
We use enquiry data to provide the information requested about availability, product specifications, documents, collection and cooperation, clarify the enquiry and reply through the selected contact method. We rely on NIVEN’s and the enquirer’s legitimate interest in responding to a voluntary request, provided that the individual’s rights and freedoms do not override that interest. Processing is limited to necessary information and reasonably expected correspondence.
Website operation, security and spam prevention also rely on legitimate interests. Compliance with mandatory legal requirements and handling data protection requests rely on the relevant legal obligation. These bases are provided by Article 11 of Ukraine’s Law on Personal Data Protection and, where applicable, GDPR Article 6(1)(f) or 6(1)(c).
NIVEN does not use enquiry data for advertising, mailing lists, newsletters, advertising audiences or the sale of data. Replying to your specific question and asking necessary follow-up questions does not subscribe you to future messages.
The checkbox acknowledges that you have read this notice. It is not consent to advertising, unrestricted disclosure or a waiver of rights. Submitting the form is not an order, acceptance of an offer or conclusion of a contract, and does not in itself create contractual duties for NIVEN to sell, reserve or supply goods. Any contractual relationship is established separately. This does not remove the company’s data protection duties or other statutory obligations.
5. Required and optional information
Required fields are marked with an asterisk. The form requires a topic, name, country, one contact method and acknowledgement of this notice. You do not need to supply both a phone number and an email address. Without the required information the form cannot be submitted; you can instead call or email us. Complete the remaining fields only to the extent useful for a relevant reply.
6. Who may receive the information
Authorised NIVEN personnel or service providers may access an enquiry where needed to respond. The site runs on ChatGPT Sites (OpenAI), using Cloudflare infrastructure. Form content passes through the server handler and Microsoft Graph to Microsoft 365 at team@niven.com.ua; a copy may be retained in Sent Items. Infrastructure providers and their subprocessors process information as necessary to provide their services.
We do not sell data or share it with advertisers. An information enquiry does not automatically disclose your details to carriers or other businesses. Other disclosure requires a specific lawful basis, including a binding lawful request from a competent authority. Opening a WhatsApp or Google Maps link also involves interaction with that independent service.
7. Processing outside Ukraine
The cloud and mapping services described here may process data outside Ukraine, including in the United States and the European Economic Area, depending on the service, contract and settings. ChatGPT Sites does not provide a guaranteed choice of data storage country. We do not claim that all information remains in Ukraine or the EU.
International transfers require the legal grounds and safeguards prescribed by Article 29 of Ukraine’s Law on Personal Data Protection and, where applicable, Chapter V of the GDPR. Submitting a form is not a substitute for these safeguards. Using the contacts in section 1, you may request information about recipients, processing locations and the safeguards applicable to your data, including a copy or an explanation of how to access them.
8. How long information is kept
Correspondence is kept while an enquiry is being handled and while clarification of the requested information remains reasonably necessary. Once the interaction ends, data is deleted or anonymised unless a specific lawful basis justifies further retention. The period depends on the enquiry, the last substantive communication, outstanding questions, statutory requirements or a specific dispute. Submitting a form is not a basis for indefinite retention.
Submission rate-limit records expire after 15 minutes and expired records are removed during subsequent form checks. Retention of technical logs, email copies and backups also depends on provider policies and settings. Deletion from active email does not immediately remove backups. Access to those copies is restricted and their retention must be justified. Ask the contacts in section 1 about the retention period for a particular enquiry.
10. Your rights and requests
You can ask about the sources, purposes, processing conditions, storage location, controller, processors and recipients of your data; obtain access; submit a reasoned objection; request correction of inaccurate data or deletion of unlawfully processed data; withdraw consent where processing relied on it; and seek a remedy through the Ukrainian Parliament Commissioner for Human Rights or a court.
Email team@niven.com.ua with “Personal data” in the subject and explain the enquiry and right concerned. Your contact email or phone number and an approximate enquiry date are usually enough to locate it. If the law or reasonable identity verification requires additional information, we will explain what is needed and how to provide it securely. Do not send a passport copy unless specifically requested.
Requests are handled within the periods set by applicable law. Under Ukrainian law, an access response is provided within 30 calendar days unless a statutory exception applies; a reasoned request concerning unlawful processing or inaccurate data is considered within 10 days. If a request is restricted or refused, we explain the legal reasons and available complaint procedure.
11. Additional rights where the GDPR applies
Where particular processing falls within the GDPR’s territorial scope, including in connection with intentionally offering goods or services to people in the EEA, the relevant additional safeguards apply. The availability of an English-language page alone does not determine whether the GDPR applies to every enquiry.
Subject to the GDPR’s conditions, you have rights to erasure, restriction, data portability, objection to processing based on legitimate interests and a complaint to a competent supervisory authority, including where you habitually live or work or where an alleged infringement occurred. We respond without undue delay, generally within one month; a lawful extension requires notification of the reasons. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
Where processing falls under the UK GDPR and Data Protection Act 2018, the corresponding UK rights apply, including the right to complain to the Information Commissioner’s Office (ICO). This notice does not restrict mandatory protections under other applicable national laws. A visitor’s location or an English translation does not automatically make every foreign law applicable.
12. Security and automated decisions
The site uses HTTPS, server-side validation and submission limits. Microsoft 365 credentials are kept on the server and are not sent to client code. Appointed responsible personnel handle enquiries, with access limited according to their duties. No transmission or storage method guarantees absolute security; report suspicious messages or possible disclosure to NIVEN using the contacts in section 1.
The form automatically checks input validity and signs of repeated or automated submissions. These checks may stop a form submission; telephone and email remain available. NIVEN does not use enquiry data for profiling or solely automated decisions producing legal or similarly significant effects on individuals.
13. Changes to this notice
This version is dated 9 September 2026. The current notice is published in Ukrainian and English. If purposes, recipients or processing methods materially change, we will update the notice before that processing begins and meet any other applicable legal requirements. Ukrainian is the source version for factual review; this does not limit your rights under applicable law.