NILE WIND KS LTD ("we", "us") respects your privacy. This policy explains what personal data we collect through this website, why, and the rights you have under the EU/Cyprus General Data Protection Regulation (GDPR).
Data controller
NILE WIND KS LTD, Lordou Vyronos 2, Office 101, 1096 Nicosia, Cyprus. For any privacy request, contact us at office@nile-wind.com.
What we collect
Contact form: when you submit our contact form we collect the name, email address, and any company, phone number and message you provide.
Technical data: when you visit the site, our web-services provider, which hosts the site, and Cloudflare, which delivers and protects it, process standard technical data, such as your IP address, the pages you request, your browser type and the referring page, to deliver the website and keep it secure. Your browser may also send Cloudflare automatic reports of network errors that occur while it loads the site. Cloudflare states that it does not log your IP address from these reports.
Website statistics: we use Cloudflare Web Analytics to see how often pages are viewed, where visits come from and how quickly the site loads. Depending on our settings, Cloudflare may not collect these statistics from visitors who connect through its data centres in the European Economic Area, the United Kingdom or Switzerland. Where it runs, it records technical information about each page view, including the page address (Cloudflare states that it does not log any query string), the referring page, an identifier generated for that page view, your browser, operating system and device type (with their version numbers), the country you visit from, and performance measurements such as how quickly the page loads and responds to clicks and key presses. It does not use cookies or any other storage on your device. Cloudflare states that Web Analytics does not fingerprint visitors and that Cloudflare does not track individual visitors across its customers' websites. For these statistics, Cloudflare states that it discards your IP address at the Cloudflare data centre nearest to you and does not store it.
Spam protection: when you click or move into the contact form, hCaptcha processes your IP address, device information and interaction data, such as mouse movements, scrolling and key presses, to confirm that you are a person.
How and why we use it
We use contact-form data solely to respond to your enquiry and to follow up on a potential engagement. We do not sell your data or use it for advertising.
We use website statistics only in aggregate, to understand which content is useful and to keep the site fast and reliable.
Legal basis
We process contact-form data on the basis of your consent (by submitting the form) and our legitimate interest in responding to business enquiries. We use spam protection on the basis of our legitimate interest in keeping the form secure and free of automated abuse. We process technical data and website statistics on the basis of our legitimate interest in delivering a secure, reliable website and in understanding, in aggregate, how it is used.
Service providers
Contact-form submissions are delivered to our mailbox by Web3Forms (Web3Creative, India), and the form is protected by hCaptcha (Intuition Machines, Inc., United States). The website is hosted on a server in Europe operated on our behalf by our web-services provider. The website is delivered and protected by Cloudflare, Inc. (United States), which also provides our website statistics. Cloudflare processes the content passing through its network, and the logs and statistics it makes available to us, on our behalf under its Data Processing Addendum. For other personal data it collects about visitors, Cloudflare states that it acts as a controller, for example to run, secure and improve its services and to compile aggregated traffic statistics, as described in its privacy policy. hCaptcha may also use the data it receives to detect abuse and to improve its own services, as described in its privacy policy. We do not use advertising providers on this site.
Retention
We keep enquiry data only as long as necessary to handle your request and any resulting business relationship, after which it is deleted or anonymised. Web3Forms stores a copy of each submission for a period set in our account, and then deletes it. hCaptcha states that it may keep technical data for up to one year after a cookie expires, usually in de-identified form, and longer where it detects abuse. Cloudflare states that it keeps detailed website statistics for 7 days and a reduced, aggregated set after that, which we can see for six months. Separately, Cloudflare's security analytics of requests to the site, which can include IP addresses, cover up to the last 31 days.
Your rights
Under the GDPR you may request access to, rectification or erasure of your data, restrict or object to processing, and request data portability. You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
To exercise any right, email office@nile-wind.com.
International transfers
Web3Forms, hCaptcha and Cloudflare are based outside the European Economic Area and may process data in the United States. Cloudflare operates a global network and states that it mainly stores information in the United States and the EEA, but may access and process it in other countries where it operates. hCaptcha states that it relies on Standard Contractual Clauses and the EU-U.S. Data Privacy Framework for its own transfers. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, and its data processing terms include Standard Contractual Clauses for transfers that the Framework does not cover.