Who would control your data
Pending before launch: NIVX’s verified legal entity, registered address and controller contact details have not yet been approved for publication.
Interim pre-launch contact: business@getnivx.com. This address is not represented as a designated Data Protection Officer contact.
Proposed waiting-list use
Data: name and email are required to join the waiting list.
Purpose: manage the pre-launch waiting list and contact participants about NIVX availability.
Proposed legal basis: consent under Article 6(1)(a) GDPR. Consent must be freely given, specific, informed, unambiguous and withdrawable.
No health, biometric or wearable-generated data is requested by this waiting-list form.
Retention, recipients and transfers
Pending before launch: a defined retention period, approved hosting location, named processors or recipient categories, deletion workflow, and any safeguards for transfers outside the European Economic Area.
Because the prototype does not transmit form data, it currently has no waiting-list database, recipients or international data transfer.
Your data-protection rights
If the waiting list becomes operational, applicable law may give you rights to:
- be informed about how your personal data is used;
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- request erasure or restriction in the circumstances provided by law;
- receive eligible data in a portable, machine-readable format;
- withdraw consent at any time, without affecting prior lawful processing;
- object to direct marketing; and
- lodge a complaint with the competent data-protection authority.
Requests should receive a response without undue delay and, in principle, within one month. Identity verification may be required where necessary.
Automated decisions and marketing
The proposed waiting-list flow does not use automated decision-making or profiling. It does not authorize unrelated advertising or disclosure to third parties for their own marketing.
Any materially different purpose would require an updated notice and an appropriate legal basis before processing begins.
Official sources
This draft was structured using official EU material. Only the GDPR text creates legal rights and obligations.
Regulation (EU) 2016/679 — EUR-Lex European Commission — Information for individuals European Data Protection Board — Process personal data lawfully