PRIVACY AND PERSONAL DATA PROTECTION POLICY
The security of your personal data is extremely important to us. We act in your best interests and are transparent about how we process your personal data. Therefore, with this document, we want to inform you about the personal data we collect, who will process it and how, what we use it for, how long we will store it, and what measures we have taken to protect it. This policy applies to all information we process in connection with the operation of the website https://nik.group/
Who are we?
We are NIK ELECTRONICS Ltd, UIC 127072968, with registered office and address of management in Sofia, 1592, Slatina district, 11B Brussels Blvd. We are a personal data controller and, as such, we are responsible for the processing and storage of your personal data in accordance with Regulation (EU) 2016/679. You can contact the Administrator at the following address: Sofia, 1592, Slatina district, Brussels Blvd. No. 11B.
You can contact the Administrator at the following address Sofia, 1592, Slatina district, Brussels Blvd. No. 11B and by email at office.bg@nik.group
As a personal data controller, we are committed to processing and protecting your personal data as a natural person in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and this privacy policy. Please read it carefully and familiarise yourself with your rights.
In which cases do we process your personal data through https://nik.group/?
We process your personal data when:
- you submit a price enquiry via the electronic form regarding the goods and services offered on the website;
- you ask a general question and/or share your opinions, comments and remarks regarding the website using the contact form available at www.nik.grou/contact-us;
- you subscribe to our newsletter;
- use services offered by third parties through plugins and cookies operating on https://nik.group/ (for more information, please review the Cookie Policy);
- use services through an application or platform, including data generated by connected products (agricultural machinery and sensors).
What categories of personal data do we process?
Enquiries about the price of goods and services offered:
When you make an enquiry about the price of goods and services offered, we require you to provide us with:
- your full name;
- your email address;
- contact telephone number;
- place of residence.
At your discretion, you may also provide other personal data contained in your enquiry.
Contact
If you decide to contact us using the feedback form, which you can find in the "Contacts" section, you need to provide:
- full name;
- your email address;
- contact telephone number;
- place of residence.
At your discretion, you may also provide other personal data contained in your message.
Newsletter subscription
If you subscribe to our newsletter to receive the latest news related to NIK, current and future promotions, information about new products and services, you need to provide:
- your email address.
What are the purposes of processing your personal data?
Your personal data may be used:
- to provide you with the necessary customer service by responding to your enquiry about the price of our products and services;
- to respond to your questions submitted via the contact form;
- for direct marketing purposes, providing you with information about services, products, promotions and/or information about NIK ELECTRONICS Ltd. and/or its partners;
- if necessary for the purposes of official proceedings such as civil cases, administrative investigations, etc.;
- for other purposes when a specific applicable law requires us to perform such processing.
On what grounds do we process your personal data?
Personal data is collected and processed in accordance with the grounds provided for in the General Data Protection Regulation.
Article 6, paragraph 1, point (b) of the General Data Protection Regulation – "processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract".
These are cases of personal data processing (full name, email address, contact telephone number, place of residence) when submitting price enquiries for specific products and services and submitting enquiries of the same and/or other nature from the "Contacts" section of the website.
Art. 6, para. 1, item "c" of the General Data Protection Regulation - "processing is necessary for compliance with a legal obligation to which the controller is subject"
In certain cases, it is necessary to process personal data in connection with the Company's legal obligations, including the Company's obligations as a "data controller" to provide access to data generated by related products (agricultural machinery and software), to you as a user or to third parties designated by you, in accordance with Articles 4 and 5 of Regulation (EU) 2023/2854 (Data Act).
Article 6(1)(f) of the General Data Protection Regulation – "processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child"
In certain cases, personal data (e-mail address, names, contact telephone number) may be processed on the basis of legitimate interests, with the Company complying with the restrictions of the General Data Protection Regulation when processing on such grounds.
Article 6, paragraph 1, point (a) of the General Data Protection Regulation – "the data subject has given consent to the processing of his or her personal data for one or more specific purposes."
On the basis of free, specific, unambiguous and informed consent, personal data (email address) is processed when subscribing to our newsletter. You have the option to withdraw your consent at any time. When we use your personal data for the purposes of direct marketing, commercial newsletters and marketing communications about products, services, promotions and/or other offers that we believe may be of interest to you, you may object to the direct marketing conducted towards you at any time. You can exercise these rights:
- upon receipt of an email, by clicking on a single link to opt out of receiving promotional messages. The link is always visible and understandable in its purpose;
- by requesting withdrawal of consent for direct marketing purposes
Do we use cookies?
We use cookies to improve the quality of the services and products offered on the website. More information about the use and management of cookies is available in the Cookie Policy.
To whom may personal data be disclosed?
- Competent public authorities in compliance with legal provisions;
- Companies providing services to the Administrator for IT system maintenance and security;
- Third parties specified by you in accordance with your right to portability and access;
- Subcontractors – personal data processors.
How long do we store your personal data?
The Company stores personal data for the minimum time necessary:
- required by law;
- necessary to perform a contract (including an order) and the responsibilities under it;
- necessary to fulfil the purpose for which the data was collected and processed; or
- until requested by the individual for its deletion or objection to processing on the basis of "consent", after which it is destroyed without undue delay.
In all cases, NIK ELECTRONICS Ltd. ensures that at least once a year, the personal data collected and processed is reviewed and those that fall under any of the above scenarios are deleted without undue delay.
How do we process children's personal data?
The use of our services by persons under the age of 18 is permitted only with the express consent of a parent/guardian/carer (person with parental responsibility).
What rights do you have as a data subject?
You have the following rights, which the Administrator will assist with at any time:
- Right to information
You have the right to receive information at the time of collection of your personal data about the data that the Administrator collects, who will process it, for what purposes and on what grounds.
- Right of access
You have the right to request access to your personal data stored by the Controller at any time. This includes the right to request a free copy of your personal data that is being processed.
- Right to rectification
You have the right to request that your personal data be corrected so that it is up to date and accurate.
- Right to erasure (right to be forgotten)
You have the right to request that your personal data be erased once it is no longer necessary for the purposes of processing or once the grounds for processing no longer apply.
- Right to restriction of processing
In certain cases, you have the right to request the restriction of the processing of your personal data.
- Right to data portability
You may request to receive your personal data in a structured, commonly used and machine-readable format (i.e. in digital form), as well as request the transfer of your data to another controller specified by you, if this is possible and feasible.
- Right to withdraw consent
When the processing of your personal data is based on consent, you may withdraw it at any time. The Controller is then obliged not to process your personal data in the future.
- Right to lodge a complaint
You have the right to seek protection of your rights through the Commission for Personal Data Protection (CPDP). The CPDP is an independent state body that monitors the legality of personal data processing activities. Complaints to the CPDP can be submitted in person or by letter to the following address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2; or electronically to the CPDP's email address – kzld@cpdp.bg. More information about the procedure can be found at: https://www.cpdp.bg/ .
How can you exercise your rights?
You can exercise any of the listed rights by sending a written notification in free form to the following address: Sofia, 1592, Slatina District, 11B Brussels Blvd. and by email to office.bg@nik.group with the subject line "Request for personal information".
The notification should contain at least the following: name, address, description of the request, preferred form of communication and actions under Articles 15-22 of Regulation (EU) 2016/679, signature, date of submission of the request and correspondence address. If the request is submitted through a representative, a power of attorney should also be attached.
What measures have we taken to protect your personal data?
The Administrator understands how important it is that your personal data is processed correctly and protected. The Administrator's team has implemented adequate technical and organisational measures to protect your personal data.
We use appropriate business systems and procedures to protect and ensure the security of the personal data you provide to us. We use security procedures and technical and physical restrictions on access to and use of personal data on our servers. Only authorised personnel have access to personal data for the purposes of their work related to providing a service to the relevant customer/user.
These measures, among other things, ensure compliance with the principles underlying the processing of personal data by ensuring that your personal data is:
- Processed lawfully, fairly and in a transparent manner in relation to you as the data subject ("lawfulness, fairness and transparency");
- Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes ("purpose limitation");
- Relevant, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation");
- Accurate and kept up to date. We have taken all reasonable steps to ensure that inaccurate personal data is deleted or corrected in a timely manner, taking into account the purposes for which it is processed ("accuracy");
- Stored in a form that allows the data subject to be identified for no longer than is necessary for the purposes for which the personal data are processed ("storage limitation");
- Processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures ("integrity and confidentiality");
- The controller is responsible for and able to demonstrate compliance with the basic principles relating to the processing of personal data ("accountability").
When can we change this Policy?
We may change this Privacy Policy. To be aware of the most current version, you can always find it on this website. If we make any changes that directly affect you, we will notify you of those changes before taking any new action.
Version of the Privacy and Personal Data Protection Policy dated 18.03.2026
