Legal
Privacy policy
Last updated: October 19, 2026
This policy explains what personal data we process when you visit this website or request early access to NFaktura, why we process it, and which rights you have. It is written to meet the EU General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of North Macedonia.
1. Who is responsible
The data controller is Kostadin Nakov, Piacenza, Italia (Natural person, no commercial registration). You can reach us at privacy@nakovsolutions.com for any question about your data.
2. What data we process
Early-access form: name, email address, firm or company (optional), your role, the number of companies you manage, an optional message, the language of the site you used, the time of your consent and whether you opted in to product updates.
Technical data: when you load the site, our hosting provider processes your IP address, browser type and the pages requested in short-lived server logs, for security and to deliver the pages. Our form endpoint also uses your IP address, in memory only, to limit abusive submissions.
Cookies: a cookie that remembers your language choice and a cookie that stores your cookie decision. No advertising or cross-site tracking cookies are used. See the cookie policy for details.
3. Why we process it and on which legal basis
- To contact you about NFaktura and the design partner programme — with your consent (GDPR art. 6(1)(a)). You confirm your request by clicking the link in the confirmation email (double opt-in).
- To send occasional product updates — only if you tick the separate box, with your consent; every email contains an unsubscribe link.
- To keep the site secure and prevent abuse of the form — our legitimate interest (art. 6(1)(f)).
- To understand which parts of the site visitors read — anonymous, aggregated analytics, only with your consent via the cookie banner.
4. Who receives your data
We use a small number of service providers acting on our instructions under data-processing agreements:
- Brevo (Sendinblue SAS, Paris, France) — stores contacts and sends the confirmation and follow-up emails. Data is hosted in the European Union.
- Cloudflare, Inc. (USA) — hosts and serves this website and forwards the emails sent to our addresses. Server logs may be processed in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses.
- Cloudflare Web Analytics (Cloudflare, Inc.) — privacy-friendly analytics without cookies or personal identifiers, loaded only if you allow analytics.
We do not sell personal data and do not share it with advertisers.
5. How long we keep it
- If you never confirm your request, it is not added to our contact list and the pending confirmation data is discarded automatically by our email provider.
- Confirmed contacts are kept until you withdraw consent or ask us to delete them, and at most 24 months after our last exchange.
- Server logs are kept by our hosting provider only for a short period (hours to a few days) unless we need them to investigate a security incident.
- The consent record (time, source page and language of your consent) is kept for as long as we rely on that consent, and afterwards as evidence for up to 3 years.
6. Your rights
You can ask us at any time to access, correct, delete or restrict your data, to receive it in a portable format, or to object to processing based on our legitimate interest. You can withdraw consent at any time; this does not affect processing that already took place.
Write to privacy@nakovsolutions.com. We answer within one month. You also have the right to lodge a complaint with a supervisory authority: in North Macedonia the Personal Data Protection Agency (Агенција за заштита на личните податоци), in Italy the Garante per la protezione dei dati personali, or the authority of your EU country of residence.
7. No profiling, no children's data
We make no automated decisions about you and do not build profiles. The site is aimed at businesses and professionals; we do not knowingly collect data from children.
8. Security
The site is served over HTTPS, access to contact data is limited to the founders, and providers are chosen for their security certifications and EU hosting where available.
9. Changes to this policy
If we change how we process data, we update this page and the date at the top. Material changes affecting existing contacts are communicated by email.