Privacy policy
How personal data is handled on nioki.studio.
This notice covers the company website nioki.studio and enquiries sent to the company. It does not describe the data handling of future mobile apps; each app will need a notice reflecting its own functionality.
1. Controller
Studio Nick Jokic UG (haftungsbeschränkt)
Email: apps@nioki.studio
Registered address and legal representation: Imprint.
2. Website delivery and server logs
When you visit this static website, the server receives the connection data needed to deliver it, including your IP address, the requested URL, and technical request headers. Depending on the server configuration, timestamps, response status, browser information, and any referrer sent by your browser may be recorded in server logs.
The purpose is to deliver the website, maintain availability, and detect or investigate misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a functional and secure company website.
Hosting provider: HITROST.COM d.o.o., Cesta železarjev 8b, 4270 Jesenice, Slovenia.
HITROST.COM's published privacy and security notice says personal data are retained only as long as needed for each processing purpose. Security, access, login and technical data are retained according to their purpose, security needs, and applicable legal and internal schedules. Data in system backups are removed through normal rotation or expiry of the backup retention period.
HITROST.COM's published processing terms state that, when processing services end, active copies are returned or deleted at the controller's choice; backup copies are removed through normal rotation or expiry.
3. Contact by email
If you email us, we process your email address, message, and any details or attachments you choose to send so that we can deal with your enquiry. Providing these details is voluntary, but we need sufficient contact information to respond. This website has no contact form and does not send email itself; an email link opens your email application.
The legal basis for general correspondence is Article 6(1)(f) GDPR, reflecting our legitimate interest in responding to company enquiries. Where a message concerns a contract or steps requested before a contract, Article 6(1)(b) GDPR applies. Legally required retention is based on Article 6(1)(c) GDPR.
Email service provider: HITROST.COM d.o.o., Cesta železarjev 8b, 4270 Jesenice, Slovenia.
Correspondence is retained for as long as needed to handle the enquiry and meet applicable legal record-keeping or claim-related obligations. It is then deleted unless another lawful reason requires continued retention.
HITROST.COM processes hosted email as the service provider. Its published processing terms state that active copies are returned or deleted at the controller's choice when processing services end, and backup copies are removed through normal rotation or expiry.
5. Optional page controls
Animations run in your browser and do not send usage information to an animation provider.
Project previews are locally hosted images. Selecting a project changes the preview without loading its external website. Following a project link opens that destination, whose privacy information then applies.
6. Recipients and international transfers
Hosting and email providers can receive the data necessary to provide their respective services. Authorised persons acting for the company process correspondence, and disclosure to public authorities or professional advisers may be necessary where required by law or to establish, exercise, or defend legal claims.
HITROST.COM's public information identifies Ljubljana, Slovenia, as its primary hosting location. Its processing terms allow subprocessors needed to provide ordered services, require notice and an opportunity to object when a relevant subprocessor changes, and make the current list available in the customer account or on request. Its privacy notice says some partner services, such as domain registration and SSL certificates, may involve recipients outside the EEA; such transfers are subject to GDPR Chapter V. The provider can supply details of the recipients and safeguards applicable to a specific service.
7. Your rights
Subject to the legal conditions, you have the following rights. Contact the controller using the email above or the postal address in the linked legal notice to exercise them.
You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR). If processing relies on consent, you may withdraw it for the future without affecting the lawfulness of earlier processing.
- Access to your personal data (Article 15 GDPR).
- Correction of inaccurate data (Article 16 GDPR).
- Erasure (Article 17 GDPR).
- Restriction of processing (Article 18 GDPR).
- Data portability where applicable (Article 20 GDPR).
8. Complaints and automated decisions
You may lodge a complaint with a data-protection supervisory authority under Article 77 GDPR, in particular in the place of your habitual residence, workplace, or the alleged infringement. The authority in Berlin is the Berlin Commissioner for Data Protection and Freedom of Information.
This website does not use automated individual decision-making or profiling within the meaning of Article 22 GDPR. External links are ordinary links, not embedded services; the destination's privacy information applies when you follow them.
Last updated: 27 September 2026