NextMinder

    Privacy & Cookies Policy

    Website Privacy Notice

    Version: 1.0

    Last Updated: April 2025

    Controller: NextMinder

    1. Data Controller

    NextMinder, operated by Iota Impact ("we," "us," or "our"), is the data controller responsible for the processing of your personal data collected through this website. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

    Contact Information:

    Iota Impact
    Email: dpo@nextminder.com
    Data Protection Officer: dpo@nextminder.com

    2. Data We Collect

    When you visit our website, we may collect the following types of personal data:

    • Identity Data: First name, last name, username or similar identifier.
    • Contact Data: Email address, telephone number, mailing address.
    • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
    • Usage Data: Information about how you use our website, products, and services.
    • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

    We do not collect any Special Categories of Personal Data (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data) through this website.

    3. Purposes of Processing

    We process your personal data for the following purposes:

    • To provide and maintain our service: Including responding to your inquiries, processing requests for information, and managing your account.
    • To improve our website: Analyzing how visitors use our website to enhance user experience and optimize content.
    • To communicate with you: Sending you updates, newsletters, marketing materials, and other information that may be of interest to you (with your consent where required).
    • To comply with legal obligations: Meeting regulatory requirements and responding to lawful requests from public authorities.
    • To protect our rights: Detecting, preventing, and addressing fraud, security issues, and other potentially prohibited or illegal activities.

    4. Legal Bases for Processing (under GDPR)

    We process your personal data based on the following legal grounds:

    • Consent: You have given clear consent for us to process your personal data for specific purposes (e.g., subscribing to our newsletter).
    • Contractual Necessity: Processing is necessary to perform a contract we have with you or to take steps at your request before entering into a contract.
    • Legal Obligation: Processing is necessary for us to comply with the law.
    • Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests. Our legitimate interests include operating and improving our website, conducting analytics, and direct marketing.

    5. International Data Transfers

    Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country.

    Specifically, our website servers and third-party service providers may be located in the European Union, the United States, and other jurisdictions. This means that when you submit personal data via our website, your data may be transferred to these locations.

    We have taken appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws. These safeguards include implementing the European Commission's Standard Contractual Clauses for transfers of personal data between our group companies and third-party service providers, which require all recipients to protect personal data they process in accordance with European data protection law.

    6. Your Rights as a Data Subject

    Under applicable data protection laws, you have the following rights regarding your personal data:

    • Right of Access: You have the right to request copies of your personal data.
    • Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
    • Right to Erasure: You have the right to request that we erase your personal data, under certain conditions.
    • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
    • Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
    • Right to Object: You have the right to object to our processing of your personal data, under certain conditions.
    • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

    To exercise any of these rights, please contact us at dpo@nextminder.com. We will respond to your request within one month of receipt.

    You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes applicable data protection laws.

    7. Data Retention

    We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

    When we no longer require your personal data for these purposes, we will securely delete or anonymize it in accordance with our data retention policy and applicable legal requirements.

    8. Security Measures

    We have implemented appropriate technical and organizational security measures designed to protect the security of any personal data we process. These measures include:

    • Encryption of data in transit and at rest using industry-standard protocols.
    • Regular security assessments and vulnerability testing.
    • Access controls to ensure that only authorized personnel can access personal data.
    • Employee training on data protection and security best practices.
    • Incident response procedures to address potential data breaches promptly.

    However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

    9. Cookies and Tracking

    Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand where our visitors are coming from.

    What are cookies?

    Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the website owners.

    Types of cookies we use:

    • Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, and accessibility.
    • Analytics Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this information to improve our website and user experience.
    • Marketing Cookies: These cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user.

    Managing cookies:

    Most web browsers allow you to control cookies through their settings preferences. You can set your browser to refuse cookies or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

    For more information about cookies and how to manage them, please visit www.allaboutcookies.org.

    10. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational, legal, or regulatory reasons. When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

    We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of our website after any changes to this Privacy Policy will constitute your acceptance of such changes.

    11. Contact and Complaints

    If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how we handle your personal data, please contact our Data Protection Officer:

    Data Protection Officer
    Iota Impact
    Email: dpo@nextminder.com

    We will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal data in accordance with this Privacy Policy and applicable data protection laws.

    If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. Within the European Union, you can find contact details for your local data protection authority at https://edpb.europa.eu/about-edpb/board/members_en.