Privacy Policy

1. What this policy covers

This policy explains how NERQAVI™ and Alra s.p. process personal data when you visit this website, use the NERQAVI™ Personal System Audit, or submit information through a NERQAVI lead form or other contact channel.

2. Data we may collect

• Name and email address when you submit a form or request.
• Information you voluntarily provide when completing the Personal System Audit.
• Technical information necessary to operate and secure the website, such as browser, device and basic server information.
• Information contained in messages you send to us.

We do not ask the Personal System Audit to provide medical records or other information that is not necessary for the audit.

3. Why we process data

• To provide the requested Personal System Audit and related results.
• To respond to requests and communicate about your submission.
• To operate, maintain and secure the website and services.
• Where applicable, to send communications you have requested or consented to receive.
• To meet legal obligations and establish, exercise or defend legal claims where necessary.

4. Legal bases

Depending on the situation, processing may be based on your request or a contract/pre-contractual steps, your consent, our legitimate interests where permitted by law, or a legal obligation. Where processing relies on consent, you may withdraw that consent at any time; withdrawal does not affect processing carried out before withdrawal.

5. TikTok lead forms

If you submit a NERQAVI lead form on TikTok, the information you provide is used by Alra s.p. for the purposes described in this policy. TikTok separately processes information under its own privacy terms. We receive the lead information made available to us through the relevant TikTok lead-generation service.

6. Service providers and recipients

We may use service providers that process data on our behalf, such as website hosting, email delivery, analytics or form/lead infrastructure. Access is limited to what is reasonably necessary for the service. We may also disclose information where required by law or necessary to protect legal rights.

7. International transfers

Some service providers may process data outside the European Economic Area. Where applicable, we will use a lawful transfer mechanism required by GDPR, such as an adequacy decision or appropriate safeguards.

8. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to maintain records of requests, comply with legal obligations, resolve disputes and enforce agreements. Specific retention periods may vary by data type and purpose.

9. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent where consent is the legal basis. You may also lodge a complaint with the competent data-protection supervisory authority.

For Slovenia, the supervisory authority is the Information Commissioner (Informacijski pooblaščenec).

10. Cookies and similar technologies

This initial website is designed to operate without requiring advertising cookies. If analytics, advertising pixels or other non-essential technologies are added later, this policy and the relevant consent mechanism will be updated as required.

11. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

12. Changes to this policy

We may update this policy when our services, processing activities or legal requirements change. The current version will be published on this page with an updated effective date.

13. Contact

Questions or requests concerning personal data can be sent to privacy@nerqavi.com.

This document is a practical privacy-policy draft prepared for the NERQAVI™ website. Before public launch, it should be reviewed against the final tools, processors, analytics, TikTok configuration and actual data flows used by Alra s.p.