Effective Date: May 31, 2025
Headquarters: The Hague, Netherlands
Applies To: All users of OGC NewFinity’s services, platforms, and websites
Exceptions: Services are not available in countries sanctioned under European Union or United States laws
1. Introduction
At OGC NewFinity, we are committed to protecting your personal data and upholding your rights as a user. This Privacy Policy explains how we collect, use, share, store, and protect your information in compliance with applicable global data protection laws, including the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and, where applicable, the California Consumer Privacy Act (CCPA) (CCPA Official Site).
2. Who We Are
OGC NewFinity is a private technology company headquartered in The Hague, Netherlands. We offer digital, AI, blockchain, and consulting services globally, except in territories subject to active sanctions under European Union foreign policy regulations (EU Sanctions Map) and the United States Office of Foreign Assets Control (OFAC) (OFAC Sanctions Programs).
3. Data We Collect
We may collect the following categories of personal data:
- Identity Data: Name, username, email address, phone number
- Contact and Account Data: Billing address, login credentials
- Payment Data: Transaction records and billing details (via secure third-party processors)
- Technical Data: Device type, browser, IP address, session duration
- Usage Data: User interaction with our platform (pages visited, clicks, etc.)
- Communications: Support requests, messages, feedback forms
We do not collect sensitive personal data (e.g., health, race, religion) unless explicitly required and with your express consent as per Article 9 of the GDPR.
4. How We Use Your Data
Your data is used for the following lawful purposes:
- To deliver and maintain our services
- To manage your account and payment activity
- To analyze performance and user behavior
- To fulfill our legal obligations
- To send notifications and (if opted in) marketing communications
- To prevent fraud and enhance security
The legal basis for processing is determined under Article 6 of the GDPR, which includes your consent, contractual necessity, legal obligations, and our legitimate interests.
5. Data Sharing and Third Parties
We may share limited data with:
- Payment processors (e.g., Stripe, PayPal)
- Analytics and security providers (e.g., Google Analytics, Cloudflare)
- Cloud storage or database platforms (e.g., AWS, Google Cloud)
Each partner is contractually bound to follow GDPR Article 28 rules regarding processors (GDPR Article 28) and uses data solely for necessary service delivery.
6. International Transfers
If we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission.
More on EU-approved data transfers
7. Data Security
We use robust technical and organizational measures to secure your data, including:
- End-to-end encryption (HTTPS/SSL)
- Firewalls and intrusion detection systems
- 2FA for administrator accounts
- Regular audits and vulnerability scans
Security standards comply with GDPR Article 32, which mandates risk-based protection measures (GDPR Article 32).
8. Data Retention
We retain personal data only as long as necessary for the purposes listed above:
- Account-related data: Up to 5 years after service termination
- Financial records: Retained for 7 years (in accordance with Dutch tax law)
- Cookies and analytics: Typically no longer than 24 months
9. Your Rights
Under the GDPR (Articles 12–23) and CCPA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion (“Right to be Forgotten”)
- Restrict or object to processing
- Request a copy of your data (portability)
- Withdraw consent at any time
- Lodge a complaint with your supervisory authority
To exercise any of these rights, email: privacy@ogcnewfinity.com
10. Cookies and Tracking
Our platform uses cookies and similar tracking technologies to:
- Enhance user experience
- Analyze traffic and behavior
- Store user preferences
You can manage cookie settings in your browser or opt out via tools such as YourOnlineChoices.eu.
11. Children’s Privacy
Our services are not intended for use by children under the age of 16. In compliance with GDPR Article 8, we do not knowingly collect data from minors. If we learn that a child has submitted personal data without verified parental consent, we will delete it immediately.
12. Service Restrictions by Country
We strictly follow international regulations regarding service restrictions. Users from the following regions are blocked from accessing or using our services:
- Countries under EU sanctions (EU Sanctions Map)
- Countries under OFAC sanctions (OFAC Program List)
This includes, but is not limited to: Iran, North Korea, Syria, Cuba, and certain regions in Russia.
13. Policy Changes
We may update this Privacy Policy periodically. When we do, we will update the “Effective Date” above and notify users of significant changes via platform announcements or email. Continued use of our services after changes means you accept the revised terms.
14. Contact Us
If you have any questions, concerns, or complaints about this Privacy Policy or your data rights, please contact:
OGC NewFinity – Privacy Office
📍 The Hague, Netherlands
📧 Email: privacy@ogcnewfinity.com