Privacy Policy

1. Who is responsible for your data

NimboTech OÜ, registered in Estonia under registry code 17594081 (VAT EE103027809), with its registered address at Kotkapoja tn 2a-10, 10615 Tallinn, Estonia, acts as Data Controller for the personal data processed through this website. We follow the European Union General Data Protection Regulation (GDPR — Regulation EU 2016/679).

2. Data we process

• Data you send us: When you contact us by email, we process the information you voluntarily share, such as your name, corporate identification, email address, and message content.
• Browsing data: For security and technical reasons, server logs and analytical tools may automatically process your IP address, device/browser details, pages visited, and timestamp.

3. How we use this information

We process this data exclusively to:

• Reply to your enquiries, evaluate partnership proposals, and manage commercial communications;
• Maintain the operational stability, firewall telemetry, and security of our website;
• Analyze aggregated site traffic to improve browsing usability and performance.

4. Legal basis and cookies

We process your data under the following legal bases:

• Consent: When you voluntarily reach out to us via email;
• Legitimate Interest: To respond to corporate enquiries, secure our network infrastructure, and measure technical metrics.

Cookies

This website uses strictly necessary cookies to ensure basic functioning and security (such as HTTPS connection integrity). Analytics cookies or third-party performance scripts are only executed with your consent or on an anonymized basis. You can manage or block cookies directly in your browser settings at any time.

5. Data sharing and international transfers

NimboTech OÜ does not sell or rent personal data. We only share information with:

• Essential IT and cloud service providers (hosting platforms, email systems, and security/firewall services) bound by strict confidentiality obligations;
• Strategic business partners, strictly when necessary to move forward with a business proposal or commercial project requested by you.

International transfers

Because our server architecture and service providers operate globally, data may be stored outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are implemented in compliance with the GDPR, such as Standard Contractual Clauses (SCCs).

6. Data retention

We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or to comply with statutory and legal retention periods. Once the purpose ends or legal limits expire, data is securely erased or anonymized.

7. Your rights

Under the GDPR, you have the right to request access to, correction of, or erasure of your personal data, as well as the restriction of processing, data portability, and the right to withdraw your consent or object to processing based on legitimate interest.

You also have the right to lodge a complaint with a data protection authority, including the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon — www.aki.ee).

To exercise any of these rights, contact us at: admin@nimbotech.org

8. Data security and minors

We apply appropriate technical and organizational measures (including HTTPS/SSL encryption) to protect your data against unauthorized access, loss, or misuse. This website has a strictly institutional purpose and is not intended for individuals under 16 years of age.

9. Integration with Google Ads API

NimboTech OÜ uses the Google Ads API to manage, analyze, and optimize performance across our advertising accounts and campaigns.

Data accessed

Through the Google Ads API, we access operational campaign parameters (such as campaign structures, ad group configurations, ad creative performance, impressions, clicks, conversion metrics, and account diagnostic logs).

Data usage and non-disclosure

Data obtained through the Google Ads API is used exclusively for internal reporting, campaign optimization, and account management within NimboTech OÜ. We do not sell, rent, transfer, or share data retrieved via the Google Ads API with external third parties or for unauthorized commercial purposes outside the scope of campaign management.

10. Updates to this policy

This policy may be revised periodically. The date of the most recent version will always be indicated at the top of this page.