Privacy Policy
Effective Date: October 2026 | Last Updated: October 2026
This Privacy Policy describes how Naurits ("Naurits", "we", "us", or "our") collects, uses, processes, and safeguards personal data obtained through our corporate website and B2B communication channels. As a European entity operating in compliance with the General Data Protection Regulation (EU 2016/679) ("GDPR"), we are fully committed to protecting your privacy, ensuring data accuracy, and maintaining transparent commercial relationships.
1. Scope & Data Controller
This policy applies to all visitors, international trade partners, prospective B2B clients, and logistics operators interacting with our online platform and commercial inquiry services.
Data Controller:
Naurits
Estonia, European Union
Email: office@naurits.com
Phone: +372 52 66 001
2. Categories of Data We Collect
Depending on the nature of your interaction with our platform, we may collect and process the following categories of information:
Commercial Inquiries & Business Contact Data: When submitting requests for cocoa beans, cocoa mass, cocoa butter, cocoa powder, or cocoa nibs, we collect your full name, business email address, phone number, company name, job title, country of operation, and order requirements.
Technical & Log Data: Automatic server logs collected during your visit, including your Internet Protocol (IP) address, browser type, operating system, referrer URL, pages visited, and timestamp of access.
Cookie & Telemetry Data: Information gathered via essential technical cookies and optional performance/analytical storage mechanisms as described in Section 5.
3. Legal Bases and Purposes of Processing
We process your personal data strictly in accordance with lawful processing grounds under Article 6 of the GDPR:
Pre-Contractual & Contractual Performance (Art. 6(1)(b) GDPR): To respond to commercial inquiries, issue product price quotes, negotiate supply terms, and facilitate international freight and supply chain operations.
Legitimate Business Interests (Art. 6(1)(f) GDPR): To maintain network security, prevent unauthorized access or fraud, assess website traffic performance, and improve our B2B commercial presentation.
Legal Compliance (Art. 6(1)(c) GDPR): To adhere to applicable statutory tax, accounting, anti-money laundering (AML), and commercial record-keeping regulations in the European Union.
Consent (Art. 6(1)(a) GDPR): For non-essential tracking technologies activated via our cookie preference banner.
4. International Data Transfers & Security
As a global raw commodity trading provider, data processed in connection with supply contracts or freight logistics may be transferred to logistics partners, port operators, or customs brokers necessary to complete delivery obligations. Where data is transferred outside the European Economic Area (EEA), Naurits ensures appropriate safeguards are implemented, including standard contractual clauses (SCCs) approved by the European Commission.
We apply appropriate technical and organizational measures (TLS encryption, restricted access controls, and firewall systems) to protect your personal data against loss, misuse, or unauthorized alteration.
5. Cookies and Local Storage
Our website utilizes cookies and browser local storage mechanisms:
Strictly Necessary Cookies: Essential for standard page navigation, language options, and core system functionality. These do not require user consent.
Preference Storage: Local storage parameters used to store your cookie consent selection (e.g., storing your decision to accept or decline cookies).
Analytical Cookies: Optional cookies used to gather aggregated statistical insights about site usage. You may accept or reject these at any time via our consent banner.
6. Data Retention Period
Personal data collected for commercial inquiries is retained for the period necessary to fulfill your business request and maintain professional correspondence. Contractual and financial transaction data is stored in accordance with statutory Estonian accounting and commercial tax laws (typically 7 years).
7. Your Rights Under GDPR
Under EU data protection legislation, you possess the following rights regarding your personal data:
Right of Access: Request confirmation and access to personal data held by us.
Right to Rectification: Request correction of inaccurate or incomplete personal records.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when processing is no longer required or consent is withdrawn.
Right to Restriction & Objection: Restrict or object to data processing based on legitimate interests.
Right to Data Portability: Receive a copy of your personal data in a structured, commonly used electronic format.
To exercise any of these rights, please submit a written request to office@naurits.com. You also retain the right to lodge a complaint with the Data Protection Inspectorate (Andmekaitse Inspektsioon) in Estonia or your local supervisory authority.
8. Updates to This Policy
We reserve the right to modify this Privacy Policy periodically to reflect changes in legal, regulatory, or operational requirements. Any updates will be posted on this page with an updated revisions date.
9. Commercial Contact Information
For questions or requests regarding this Privacy Policy, please contact our administrative team:
Naurits
Email: office@naurits.com
Phone: +372 52 66 001