This Privacy Policy explains how Neb Lex Advisory Oy

(“we”, “our”, or “us”) collects, uses, and protects your personal data. It also outlines your rights under the General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).

By accessing or using our websites (neblex.fi) you agree to the terms of this Privacy Notice. If you do not agree with any part of this Notice, please do not use our websites.

WHO WE ARE
Neb Lex Advisory Oy is a Finnish business entity with the registered business ID 3147576-2. For the purposes of data protection laws, we are the data controller responsible for processing your personal data.

WHAT PERSONAL DATA WE COLLECT
We may collect and process the following categories of personal data:
1. If you only access our website as a visitor, it is most likely that we don’t collect any of your personal data. However, our website uses cookies, so you might wish to read our Cookies Policy to know what exactly we do and how you can manage your cookies settings.
2. If you submit a consultation request via our website, we may receive from you:
• your name,
• phone number,
• email address, and
• data on your request;

HOW WE USE YOUR DATA
We may use your personal data for the following purposes:
• to respond to your inquiries and consultation requests;
• to provide our legal services;
• to process job applications;
• to comply with legal obligations;
• for the organization of notarial translation of documents;
• for legal evaluation of documents;

We will only process your data where we have a legal basis to do so, including:
• your consent;
• our legitimate interests (e.g., communication, service improvement);
• compliance with legal obligations;
• performance of a contract with you.

SHARING YOUR DATA
We do not sell your personal data. We may share your information with trusted third-party service providers who help us operate our business, for example:
• IT support,
• web hosting
• CRM tools,
• email automations,
• marketing analytic services;
• for notarization and document translation;
• during the preparation and verificdtion of applications.

These providers are bound by confidentiality and data protection agreements and may only process your data in accordance with our instructions. Analytics service providers may use their own cookies to collect information about the usage of our website.
We may also disclose data if required by law or to protect our legal rights.

TRANSFER OUTSIDE THE EEA
If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection through standard contractual clauses or other safeguards approved by the European Commission.

SPECIAL CATEGORIES OF PERSONAL DATA
We don’t collect and don’t process special categories of personal data, namely data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person's sex life or sexual orientation.

DATA SECURITY
We implement appropriate technical and organizational measures to protect your data. However, no method of transmission over the Internet is completely secure. We cannot guarantee the security of any information transmitted via the internet, and you do so at your own risk.

YOUR RIGHTS
Under the GDPR you have certain rights in relation to your personal data:
• The right to be informed: our obligation is to inform you that we process your personal data (and that's what we're doing in this Notice);
• The right of access: your right to request a copy of the personal data we hold about you;
• The right of rectification: your right to request that we correct personal data about you if it is incomplete or inaccurate;
• The right to erasure (also known as the 'right to be forgotten'): under certain circumstances, you may ask us to delete the personal data we have about you (unless it remains necessary for us to continue processing your personal data for a legitimate business need or to comply with a legal obligation as permitted under the GDPR, in which case we will inform you);
• The right to restrict processing: your right, under certain circumstances, to ask us to suspend our processing of your personal data;
• The right to data portability: your right to ask us for a copy of your personal data in a common format (for example, a .csv file);
• The right to object: your right to object to us processing your personal data (for example, if you object to us processing your data for direct marketing);
• Rights in relation to automated decision-making and profiling: our obligation to be transparent about any profiling we do, or any automated decision-making.
These rights are subject to certain rules around when you can exercise them.
To exercise your rights, contact us at nikolaisemenov@neblex.fi We may ask for verification of your identity before responding.

DATA RETENTION
We retain your personal data only for as long as necessary for the purposes outlined in this Notice. The retention period depends on the nature of the data and our legal or contractual obligations. Data collected on the basis of your consent will be retained until consent is withdrawn.

THIRD PARTY WEBSITES
From time to time, our website, newsletters, or emails may include links to external websites. The personal information you share on those sites is not governed by this Privacy Notice, and we are not accountable for how your personal data is handled by those websites.

CHANGES TO THIS NOTICE
We may update this Privacy Notice from time to time. Any material changes will be posted on this page with an updated “last revised” date.

CONTACT US
For any questions or concerns regarding this Privacy Notice or our data practices, please contact us: nikolaisemenov@neblex.fi
Data Controller: Neb Lex Advisory Oy
Business ID: 3147576-2
Last update: April 2025.