Legal

Privacy Policy

Last updated: January 2025

1. Who We Are

NextStep European Consultants OÜ ("we", "us", "our") is registered in Estonia. We operate the website nsec.ee and provide advisory services. Contact: info@nsec.ee

2. Information We Collect

We collect information you provide directly: name, email address, and any details shared in contact forms or consultations. We do not collect sensitive personal data without explicit consent. We may collect basic usage analytics (pages visited, time on site) through privacy-respecting tools.

3. How We Use Your Information

We use your information to: respond to your enquiries, deliver services you have engaged us for, send relevant updates (with your consent), and improve our services. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis (GDPR)

We process your data on the basis of: (a) your consent when you contact us, (b) contractual necessity when you engage our services, and (c) our legitimate interests in running and improving our business. You may withdraw consent at any time.

5. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations. Contact enquiry data is retained for 2 years. Client service data is retained for 7 years for accounting and legal compliance purposes.

6. Your Rights (GDPR)

Under GDPR, you have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise any of these rights, contact us at info@nsec.ee.

7. Cookies

We use minimal, essential cookies necessary for website functionality. We do not use advertising or tracking cookies. You may disable cookies in your browser settings without affecting your ability to use our website.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

9. Contact

For privacy-related enquiries or to exercise your rights: info@nsec.ee. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).