Private Policy

We are NOMIA DMCC and our company deals with automation for shops, restaurants and cafes. The website https://nomia.net is owned and operated by our company. We are committed to protecting your privacy and your personal information.

NOMIA DMCC is the controller of Personal Data (as defined below) collected on https://nomia.net.

This Policy further explains the various measures we take to ensure the security of your personal information and describes how the company may process your personal information, including information you provide when accessing and using:

• our website,
• our applications (including any of our mobile services and applications)
• or any of our other channels for providing banking services, valuable additional offers, information and promotions related to lifestyle (together - our channels).

This Policy explains what information we collect, why we collect it, with whom we share it, how long we keep it, and what rights you have in relation to this information. By providing us with information about other people, you confirm that they understand the information contained in this Policy about how we use it.

We are the controller of your personal data. If you have any questions about how we use your information, you can contact us using the email address at the bottom of this site.

Our Privacy Policy must be read together with any other legal notices or terms and conditions available on other pages of our Website.

This Privacy Policy (hereinafter referred to as the Policy) governs the relationship between NOMIA DMCC (hereinafter referred to as the Company) and the Personal Data Subject (hereinafter referred to as the User) related to the processing of information and personal data of employees, third parties and Users, when implementing activities of the Company, as well as when the User uses the Company's portal(s), website(s), equipment, domain(s), application(s), software listed in the next paragraph of this Policy.

This Policy applies to all goods, works and services of the Company sold via the Internet, including (but not limited to): those developed by the Company, owned by the Company, leased by the Company, used by the Company under exclusive rights, as well as all computer programs, web versions of programs and/or software products of the Company (hereinafter referred to as the Product), installed and/or opened by the User on the Internet information and telecommunications network, on a personal computer, mobile applications, POS terminals and/or kitchen terminals sold by the Company, other terminals approved in writing by the Company.

This Policy applies to all information, information and personal data of Subjects processed in the Company using automation tools and/or without the use of such tools.

The Policy is an open and publicly available document and is posted on the website https://nomia.net/

Before using any Product, the User must read this Policy as well as all applicable rules.

With each access to the Product, as well as registration and/or actual use of the Product, the User agrees to the terms of this Policy in the version that was in effect at the time of actual use of the Product.

When using the Product, the Parties assume the good faith of the participants in civil legal relations and the reasonableness of their actions is assumed until proven otherwise.

The User bears full responsibility for the accuracy and/or relevance of the data specified by the User, as well as for the consequences and/or possible losses of the User and/or third parties when the User uses the Products.

TERMS AND DEFINITIONS

The following terms and definitions are used in this Policy:

A data controller is a legal entity that, alone or jointly with others, determines the purposes (“why”) and means (“how”) of the processing of personal data. In most cases, we act as a Controller when processing your Personal Data - this means that we decide how we collect, process and use Personal Data in this role.

A processor is a legal entity that processes Personal Data on behalf of another legal entity, i.e. the Controller, and does so solely on the basis of instructions provided by the Controller. In some cases, the Company will act as a Processor when processing your Personal Data on behalf of another legal entity. In these cases, the Company will process Personal Data in accordance with the specific instructions of the Partner organization acting as the Controller.

Processing means any action performed on a set of Personal Data, such as viewing, collecting, using, storing, sharing, manipulating, printing, copying, archiving, etc.

personal data - any information relating to a directly or indirectly identified or identifiable individual (subject of personal data).

SUBJECTS OF PERSONAL DATA

The Company processes personal data of the following persons:

• employees and former employees of the Company;
• candidates for work in the Company;
• Partners, companies and/or Users with whom the Company has concluded agreements and/or contracts, including their clients and/or representatives;
• persons and/or Users with whom the Company is in negotiations, including their representatives and/or clients;
• registered Users of the Company Products;
• persons who visit and/or install the Company Products for informational or other purposes without registration.

PRINCIPLES, CONDITIONS AND PURPOSES OF PROCESSING PERSONAL DATA

When we collect personal information, we provide a secure and confidential environment across all of our delivery channels to ensure that your personal information remains confidential and is used for the purposes for which it is stored.

We are required by law to keep your information confidential, but we may disclose your information to third parties if:

we are required to do this by law; the disclosure of your data is required by a legal authority; or in circumstances where the disclosure is made with your express consent or through your designated representative.

The storage of personal data must be carried out in a form that allows identifying the subject of personal data, no longer than required by the purposes of processing personal data.

The Company has the right to entrust the processing of personal data to third parties on the basis of an agreement concluded with these persons.

Persons processing personal data on behalf of the Company undertake to comply with the terms of this Policy.

The Company may use information and personal data provided by related services for the purposes established by these services and within the framework specified by these Regulations.

The Company destroys or depersonalizes personal data upon achieving the purposes of processing or in the event of the loss of the need to achieve the purpose of processing.

The types of information we may collect from you, depending on how you use our Products, include:

• your nickname
• your name;
• Your e-mail address;
• your address (work and personal);
• your landline and mobile phone numbers (work and personal);
• any other information you choose to provide to us when filling out a contact form or on our product;
• your geographic location (the country/territory where your device is located);
• your job title, role and name of your employer or organization;
• the market sector in which you operate;
• the country or countries, industry sectors and areas of our services in respect of which you wish to receive communications (where you are registered in our applications).

The Company may process data that becomes available to it during the use of the Product, including using analysis or statistical processing of anonymized data.

• Our business purposes - We may also use your information for our business purposes, such as:
• record keeping, statistical analysis, internal reporting and research purposes;
• to ensure network and information security;
• notify you about changes to our services;to investigate any complaint you make;
• to provide evidence in any dispute or purported dispute between you and us;
• customize various aspects of our Products to improve your experience;
• to host, maintain and otherwise operate our Product;
• for risk management purposes;
• for business and disaster recovery (for example, for creating backups);
• for storing documents;
• for database management;
• to protect the rights, property and/or safety of the Company, its personnel and other persons; And to ensure the quality of the services we provide to our Users.

In addition, we may use your information for additional specific purposes set forth in the collection point on certain pages of our Product.

If you choose not to provide the information we request, we may not be able to provide you with the information and/or services you requested or otherwise fulfill the purposes for which we requested the information. Other than that, your visit to our Product will remain unchanged.

LEGAL BASIS FOR COLLECTING AND USING INFORMATION

We rely on your consent to process your personal information in relation to marketing and event information we may send to you (where this is made clear to you at the time you provide your information). In other cases, we process your personal information where necessary:

comply with our legal and regulatory obligations;

for our legitimate interests in:

• answers to your requests;
• providing you with services and/or information;
• our internal business objectives as stated above.

Processing cookies

Cookies are small pieces of data that websites request from the browser used on the User's computer or mobile device. Cookies are stored locally on the Internet user's device. The Company collects and processes cookies in relation to Users visiting the Product, about which a corresponding warning appears when entering the site.

If the User does not agree with this Policy or with the processing of cookies, he must immediately stop using the Product.

THE COMPANY PRODUCTS USE THE FOLLOWING TYPES OF COOKIES

1) strictly necessary cookies / technical cookies: these cookies are necessary for the operation of the site and the provision of Products to the User; among other things, they allow the Company to identify the User’s hardware and software, including browser type;

2) statistical / analytical cookies: these cookies allow us to recognize users, count their number and collect information such as transactions performed on sites, including information about web pages visited and the content that the User receives;

3) technical cookies: these cookies collect information about how users interact with the site, which allows us to identify errors and test new features to improve the performance of the Product;

4) functional cookies: these cookies enable the provision of certain functions to make the use of websites easier, for example by storing preferences (such as language and location);

5) (third-party) tracking files/advertising cookies: these cookies collect information about traffic sources, pages visited and advertisements displayed to the User. They allow the display of advertisements that may be of interest to the User, based on the analysis of information collected about the User. They are also used for statistical and research purposes.

Cookies are processed by the Company solely for the purposes set out above in the text of this Policy, under the conditions and in the manner defined by this Policy, in particular on the basis of data obtained using cookies, the Company develops the most useful functionality for the Product available to the User, conducts statistical research, corrects errors in the Product and tests new functions to improve the performance of the Product, personalizes and displays information that is most relevant to the User.

Information collected using cookies placed on the User's device may be transferred and available to the Company and/or third parties specified in this Policy, as well as companies providing analytics services, as well as other connected services.

The user can refuse the processing of cookies in their browser settings. In this case, the Company’s services will use only those cookies that are strictly necessary for the functioning of such a service and the provision of its functionality.

Processing and transmission of information

Accounts and other data of Users are not transferred to any third parties, except in cases expressly provided for by this Policy, as well as applicable law.

The Company may transfer User data to third parties, in compliance with the purposes and if there are grounds specified in this Policy. Such third parties may include:

• persons who participate in the provision of services;
• persons who have legal grounds to process data, for example, if the transfer of data to such persons is carried out with the consent of the User, including if the data is necessary to provide the User with the relevant service or to fulfill a certain agreement or contract concluded with the User;
• third parties in respect of whom an assignment of rights or obligations has been made, or novation under a relevant agreement;
• any government or local government body to which the Company is obliged to provide information in accordance with applicable law upon request.

In order to provide high-quality, multifunctional, easy-to-use and focused on the personal needs and interests of Users of the Product, the Company develops, improves, optimizes the current and introduces new functionality of the Product (information, communication, advertising, educational, entertainment and other nature), including with the participation of partners and/or affiliates.

Taking into account the foregoing, as well as taking into account the Company’s compliance with the processing purposes specified in this Policy, the User agrees and instructs the Company to carry out the following actions:

processing, including collection, recording, systematization, accumulation, storage, clarification (updating, changing), comparison, extraction, use, blocking, deletion/destruction of User data;

transfer of data to partners and/or affiliates, and their processing by partners and/or affiliates on the basis of instructions from the Company (in the ways specified in this paragraph), as well as joint processing by partners and/or affiliates of Other data with data available to partners and/or affiliates;

collection (receipt) from partners and/or affiliates of the results of data processing together with data at the disposal of partners and/or affiliates, including in the form of integer and/or text values and identifiers.

Taking into account the nature and functional features of the Product, the Company can contribute to the activities of market research for goods and services, including assessing demand and supply, promoting goods, analyzing the effectiveness of information, advertising and marketing campaigns by generating anonymized analytical information based on data on the use of the Product.

When the User uses data from personal accounts of third-party services (Apple ID, VK ID, Google, mail, etc.), the data may be transferred to the relevant third parties - the owners of these services, provided that these services are integrated or associated with the Products, and also if access to these third parties is provided by the User himself.

The Company may share the User’s data with the above services, as well as external services that use the specified tools to provide the User with the necessary access and capabilities. For example, if the User decides to log in to the Product using a tool from a third-party service, then by starting to use such Service/tool/its individual functions, the User agrees to such data transfer to the extent necessary for the operation of the Service/tool. Thus, the User also agrees and accepts the User documentation of such a Service and/or its tool in full, without any reservations or exceptions. If the User does not agree with any of the provisions of the User Documentation of the Service/tool, the User does not have the right to use such Service/tool.

DATA STORAGE

Storage periods for Information. The data is stored by the Company for the duration of the agreement between the User and the Company on the use of the Product, and after termination of such an agreement - for the period required and established by current legislation.

The termination of data processing is carried out when the goals of data processing are achieved, the Company stops processing data in one of the ways provided for by law, as well as in the event of receiving from the subject of personal data a withdrawal of consent to the processing of personal data, as well as in other cases established by current legislation.

Termination of data processing is also possible in the event of termination of activity (reorganization/liquidation) of the Company, achievement of the goals of processing personal data or loss of the need to achieve these goals, expiration of the consent or withdrawal of the consent of the subject of personal data to the processing of his personal data, termination of contracts with the subjects.

LIMITATION OF LIABILITY OF THE COMPANY

The User is solely responsible for the level of security of the password he has set, as well as for its safety outside the Product. The Company does not have any access to the password and does not store it.

The User undertakes to ensure the confidentiality and security of the password and not to transfer access to third parties, and not to provide third parties with access or the ability to view the User’s confidential information through his account.

The user undertakes to set a password that will be known only to him and will provide a high level of security. The recommended password must contain lowercase and uppercase letters, numbers and symbols and be at least 6 characters long.

The user may transfer his logins and passwords to third parties or his other representatives only at his own peril and risk. In case of transfer of the specified information, the User bears full financial responsibility for the consequences that arise.

The Company is not responsible for the disclosure and dissemination of information about the User by other Users of the Product or other Internet users, or other third parties if such persons have access to the specified information in accordance with the password chosen by the User or the level of security for access to credentials, or in case of violation by the User of the security of his login and/or password or other data necessary for authorization.

The Company is not responsible for the accuracy, relevance or other characteristics of the information filled in by the User in the Product.

The Company's liability under this Regulation is limited by the current legislation of the UAE and cannot exceed the cost of using the Product for one calendar month or for a one-time service.

APPEALS

Requests must be made in writing to the email address listed at the bottom of this site.

The user has the right to withdraw consent to the processing of his personal data by sending an official written statement to the Company in accordance with the requirements of current legislation.

SECURITY

We employ appropriate security measures to help protect your Personal Information and guard against access by unauthorised persons. Information storage is on secure computers in a locked and certified information centre and information is encrypted wherever possible. We undergo periodic reviews of our security policies and procedures to ensure that our systems are secure and protected. However, as the transmission of information via the Internet is not completely secure we cannot guarantee the security of your information transmitted to our Website.

CONFIDENTIALITY

We acknowledge that the information you provide may be confidential. We do not sell, rent, distribute or otherwise make Personal Information commercially available to any third party, except that we may share information with our service providers for the purposes set out in this Privacy Policy. We will maintain the confidentiality of and protect your information in accordance with our Privacy Policy and all applicable laws.

CHANGES AND ADDITIONS TO THIS POLICY

The Company reserves the right to make changes and additions to this Policy with notification to the User, including by posting a new version of the amended Policy on the website. The new version of the Policy comes into force on the day following the day it is posted on the website. The User undertakes to regularly familiarize himself with new editions of the Policy.

This Policy shall be governed by and construed in accordance with the laws of the UAE. Issues not regulated by this Policy shall be resolved in accordance with the laws of the UAE.

The provisions of this Policy apply to all Products, goods, works and/or services of the Company, unless otherwise provided by other agreements and documents of the Company.This Regulation comes into force from the moment of its publication.