Under data protection law (GDPR) and as the data controller, we at Nova Inc. would like to explain how your personal data is processed. This notice tells you what we collect, why, and what rights you have.
1. Data Controller
Nova Inc. — New York, USA. Contact: privacy@nova.example
2. Personal Data Processed
- Identity information (first name, last name, date of birth).
- Contact information (e-mail, phone, address).
- Customer transaction information (orders, invoices, payment history).
- Marketing information (shopping preferences — only with explicit consent).
- Transaction security information (IP, log records, device information).
3. Purposes of Data Processing
- Carrying out membership, order and delivery processes.
- Fulfilling legal obligations (invoicing, tax).
- Improving service quality.
- Marketing activities (only with explicit consent).
4. Data Transfers
Your personal data may be shared to a limited extent with shipping companies, payment providers and legal authorities. Transfers abroad are made in line with the conditions of the applicable data protection law.
5. Your Rights (GDPR Art. 15–22)
- To learn whether your personal data is being processed.
- To learn for what purpose it is processed and with whom it is shared.
- To request the correction of incomplete / incorrect data.
- To request deletion or destruction.
- To object to a result against you arising from analysis by automated systems.
- To claim compensation if you suffer damage.
6. How to Apply
To exercise your rights you can send a written request to privacy@nova.example. We may ask you to verify your identity before we act on it. Requests are answered within one month at the latest.