Privacy Policy

01Data controller

The data controller is Nuvia Eng ShPk, NIPT M62123045B, with registered office at Rruga Tufina Tirana, Albania.

For any privacy question you can write to info@nuviaeng.com.

02What data we collect

• Browsing data: IP address, browser type, pages visited, date and time, collected automatically by the servers to run and secure the website.
• Data you send us through the contact form: full name, company, email, phone (optional), topic and message.
• Data contained in emails you send to our addresses (sales@, support@, info@).
• Messages you write in the Nuvia AI chat: the text of the questions and answers in the current conversation.

We do not collect special categories of data (for example health data). Please do not include them in your messages, including the chat.

03Why we process data and on what basis

• Answering your requests and sending quotes: pre-contractual steps taken at your request and, where required, your consent.
• Keeping the website secure and preventing spam and abuse (including the Cloudflare Turnstile anti-spam check): our legitimate interest.
• Answering the questions you ask in the Nuvia AI chat: our legitimate interest in informing you about our services and, if you ask for a quote, pre-contractual steps taken at your request.
• Complying with legal, accounting and tax obligations: legal obligation.
• Aggregated, anonymous statistics on website use, without profiling cookies: our legitimate interest.

04How long we keep data

• Contact requests: up to 24 months after the last exchange, unless a contract follows.
• Contract and billing data: for the period required by applicable tax law.
• Server logs: no longer than 30 days, unless needed to investigate unlawful activity. They do not contain the chat text.
• Nuvia AI chat: our server does not store the conversation, which stays in your browser until you close the tab. The model provider processes it only to produce the answer and does not retain it.

05Who may receive the data

Data is processed by our authorised staff and by providers that help us deliver the service, appointed as data processors: email service Aruba, Cloudflare anti-spam protection, and Regolo for the chat's artificial intelligence, used with no data retention. The website and its data run on our own infrastructure: artificial intelligence is the only part entrusted to an external provider, and only for the time it takes to process.

We do not sell or share your data with third parties for marketing purposes.

06Transfers outside the EU

Nuvia Eng is based in Albania, a country outside the European Economic Area. When we process data of people located in the EU, we apply appropriate safeguards as provided by the GDPR, such as the standard contractual clauses approved by the European Commission. The same applies to any non-EU providers. Regolo, which provides the artificial intelligence, has data centres in the European Union: there is no transfer outside the EEA to Regolo.

07Artificial intelligence

The Nuvia AI chat is an automated assistant: it answers using an artificial intelligence model and can make mistakes. For prices, timelines and commitments, only what we write to you counts.

The models are provided by Regolo, a European service with data centres in the European Union, which we use with the no-data-retention option: the conversation text is processed to produce the answer and is not stored. What you write does not train any model, neither ours nor the provider's.

The website, the chat and the contact form do not make automated decisions that produce legal effects on you.

08Your rights

You can ask at any time to access, rectify or erase your data, to restrict processing, to receive your data in a portable format, and to object to processing based on legitimate interest. If you gave consent, you can withdraw it without affecting prior processing.

To exercise your rights write to info@nuviaeng.com. We reply within 30 days.

You can also lodge a complaint with the Albanian Commissioner for the Right to Information and Personal Data Protection, or with the supervisory authority of the EU country where you live.

09Security

The website only uses encrypted connections (HTTPS). Data is accessible only to authorised staff and protected by appropriate technical and organisational measures.

10Changes

We may update this policy. The date of the last update is shown at the top; we will flag important changes on the website.