This version of Privacy Notice was revised on 02.03.2026.
The previous version of Privacy Notice was published on 19.05.2025.
N-iX Ltd, a legal entity registered under the laws of the Republic of Malta, company registration number C 91362, registered address at 157, Archbishop Street, Office 3.4, Valletta VLT 1440, Malta, and/or any of its affiliated companies, referred to as “N-iX”, “we”, “us”, “our”, respect and realize importance of protecting your privacy, and N-iX is committed to protecting your privacy rights to the fullest possible extent.
Protecting your data and using it only in ways you expect is our highest priority. This Privacy Notice is designed to inform you about the processing of your personal data and your rights regarding this processing in accordance with applicable data protection laws.
We are the controller of your personal data, which means we are the organization legally responsible for deciding how and for what purposes your personal data is used, and therefore for the data processing described herein.
By using this website, you acknowledge that you have been informed about the processing of your personal data as described in this Privacy Notice. This statement also applies in other cases where we make specific reference to it, including: a) when we receive your personal data from third parties and are obliged to inform you about our use of it; b) when we first communicate with you via email or other means; c) when we process your personal data at our events or the events of our partners, and make specific reference to this Privacy Notice.
We may collect information that you voluntarily provide to us, our partners, affiliates, or other third parties via email or other direct contact. We may also collect information from your use of our website and information obtained from publicly available sources. This data is used for marketing and recruitment purposes, to fulfill contractual obligations, and for other purposes related to those mentioned above.
If you are a candidate for one of the positions open at N-iX, we collect and process the following personal data, either obtained directly from you or from public sources (such as LinkedIn): your full name, phone number, email address, location, information on your CV including education and professional experience, LinkedIn profile information, records of our communications with you, and video or audio recordings of your interview, if applicable. We may also collect a candidate image during an interview for human analysis and temporary storage to verify your identity and prevent fraud against us or our clients, in accordance with N-iX’s internal policies. Such data is collected and processed for recruitment purposes to attract, assess, and onboard potential team members. This processing allows us to match candidates with suitable roles and ensures a fair and efficient hiring process. It is guided by our legitimate business interest in hiring the best talent or your consent, including when you contact us directly through our website or at our events. We are committed to ensuring that all recruitment-related data processing respects the principles of fairness, transparency, accuracy, and confidentiality, always providing candidates with clarity and control over their data
For shortlisted or pre-approved candidates, we may collect and process personal data from you for background checks and to confirm your legal eligibility to work in a specific country, in accordance with applicable legal and business requirements. This may include: your citizenship; international passport data; information on temporary protection, residence permits/cards, work permits, visa status, asylum, or other legal stay documents relevant to the contracting country; and your tax number, to the extent applicable. We may also collect and process your travel history, including departure, entry, and transit data, in connection with your country of residence, where applicable.
Please note that, for our approved candidates at the contract-signing stage, we may collect personal data that is, by its nature, particularly sensitive, only if required by applicable law or if another appropriate legal basis exists.
If you are a contact person at a company that is our existing or potential client, we collect and process the following personal data, either obtained directly from you or from public sources (such as LinkedIn): your name, phone number, email address, location, LinkedIn profile information, your role/position, history of previous employment, and records of our communications with you. Such data is collected and processed to support proactive client acquisition initiatives and to cultivate and maintain strong, collaborative relationships with our clients. This includes, but is not limited to, facilitating communication on projects, organizing business trips and visits, and addressing any matters relevant to the successful cooperation between us and our clients. This processing is necessary for N-iX’s business operations, development, and growth, and ensures the efficiency and effectiveness of our client engagement processes. In this context, we rely on our legitimate interests when communicating with potential clients to engage them or secure new projects from existing clients, and on the legal basis of contract conclusion and execution for data used in communications during the contract conclusion and performance.
If you are a contact person at a company that is our existing or potential vendor or supplier, we collect and process the following personal data, either obtained directly from you or from public sources (such as LinkedIn or your company website): your name, phone number, email address, LinkedIn profile information, your role/position, records of our communications with you, and, in exceptional cases, video or audio recordings of our meetings. Such data is collected and processed primarily to procure goods and services that support our company’s operations. This processing is necessary for the performance of contracts, ensures smooth business operations, and is supported by our legitimate business interests in efficient resource allocation.
Please note that we DO NOT collect personal data that is, by its nature, particularly sensitive. This includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic data; biometric data for the purpose of uniquely identifying a natural person; data concerning health; or data concerning a natural person’s sex life or sexual orientation.
We use your personal data for several purposes, including:
Your personal data may be stored in our secure internal CRM system or other secure internal databases.
We process your personal data on the following lawful bases and for the following purposes:
| Your consent | We rely on your consent when we process your personal data to optimize and enhance the operation of our website, develop new features and services (including where such data is collected as part of aggregated data), and provide you with relevant advertising materials, to the extent permitted by your device or browser’s personalization and privacy settings. We also rely on this lawful basis when responding to your inquiries, for example, regarding open vacancies or cooperation opportunities, as well as when you attend our events. You have the right to withdraw your consent to processing of your personal data at any time. Please note that withdrawal of consent does not mean that any processing carried out before the withdrawal is unlawful. Also take into account that if you withdraw your consent, we may be limited in our ability to respond to you and/or provide you with certain services or job opportunities. |
| Compliance with our legal obligations | We rely on this lawful basis to identify you and verify your identity (where relevant), to help prevent and detect fraud against you or us, to protect the security of systems and data, and for disclosures or other activities necessary to comply with legal and regulatory obligations applicable to our business. Examples include recording and demonstrating evidence of your consents, retaining HR and recruitment data, processing data related to contract execution, and verifying your legal stay and right to work in your country of residence. Applicable laws, depending on the relationship between you and us, may affect the scope of personal data we collect, the ways in which we process your personal data, our ability to maintain the confidentiality of your data and limit its disclosure, the duration of its retention, etc. |
| For the performance of a contract with you or to take steps at your request before entering a contract | We may rely on this lawful basis to provide certain services to you, to receive certain services from you, or to engage in employment or other contractual relationships with you or the company that you represent. |
| To perform a task carried out in the public interest | We may rely on this lawful basis to report to the police or other competent enforcement agencies if we discover fraud, violations of applicable law, or suspicious behavior or actions during your interaction with us, as well as in other cases where the disclosure of your personal data is required by law. |
| For our legitimate interests or those of a third party | We may rely on this lawful basis to: contact you regarding potential cooperation between you and/or the company you represent and us; inform you about our open vacancies; verify your lawful departure, entry, and transit in connection with your country of residence; make non-marketing communications to you about changes to our terms or policies or to provide other important notices; enable or administer our business, including quality control, consolidated reporting, customer service, transfer of ownership, etc. |
When we receive your explicit consent, we may use automated decision-making tools or software, including those based on aggregated data, and may use the personal information we collect about you for profiling.
Where you have opted in to receive marketing communications from us, we may use your personal data to send you emails or messages about our services, job opportunities, and exclusive offers, promotions, or new features. In doing so, we rely on your consent as the lawful basis for processing.
Any marketing email sent to you will include information on how to opt out of receiving such notifications in the future.
We implement appropriate organizational, technical, and security measures to protect your personal information, such as usernames, passwords, transaction data, and other information stored on our website, against unauthorized access, alteration, disclosure, or destruction. Personal data processed for any purpose will not be kept longer than necessary for that purpose, including to comply with legal requirements. If you withdraw your consent, we may retain certain personal information for the period required by applicable law, to resolve disputes and/or enforce our rights and agreements.
It may sometimes be necessary for us to share your personal data with N-iX affiliate companies (including those outside the UK and EEA, such as the U.S., Ukraine, or Colombia), clients, or service providers. In such cases, we will comply with applicable laws designed to protect your personal data.
Under data protection laws, we may transfer your personal data to third countries on the basis of an adequacy decision, or, where such a decision is not available, under legally approved standard data protection clauses recognized or issued under applicable law. If we are unable, or choose not, to rely on either of these mechanisms, we will not transfer your personal data to third countries unless an alternative mechanism permitted by data protection authorities is available.
By interacting with us, you consent to the transfer of the information we collect about you, including personal data, to any country in which we, our clients, or our service providers are located.
We may share your personal data with the following recipients: our affiliated companies, professional advisers, third-party service providers, partners, contractors, and employees, for the purposes described in this Privacy Notice or otherwise notified to you.
We engage service providers which help us operate, support, and develop our business and website and which understand how it is used. These services include cloud hosting, content delivery, customer and technical support, recruitment and HR services, background checks, migration services, insurance services, marketing, analytics, event hosting, etc. We share your personal data with these service providers only as necessary to enable them to provide their service to us.
As a global company, we are supported by certain entities within our corporate group. These entities process your personal data as necessary to provide functions such as data storage, security, research and development, analytics, and customer and technical support.
In addition, we may share your information with competent law enforcement bodies, regulatory or government agencies, courts, or other third parties where such disclosure is necessary to comply with a legal obligation, or to protect your vital interests or those of another person.
N-iX services and products are not intended for use by children. We do not knowingly collect or solicit personal information from children under the age of 13 or 16, depending on the applicable requirements in a particular EU member state. If N-iX becomes aware that personal data of a child has been provided to us, we will delete it from our databases. If you are a parent or guardian and believe that we have collected personal data from your child, please contact us using the information provided in the “Contact us” section, and we will delete it as soon as possible.
This website may automatically collect information about you in several ways, including tracking your activities through your IP address, computer settings, most recently visited URL, operating system, date and time, preferences and choices, and saved options, subject to your browser settings. We may use your IP address to help diagnose server issues and to administer the website.
Our website may contain links to third-party websites. N-iX Ltd is not responsible for the privacy practices or the content of these websites.
We recommend that you review the privacy policies and the terms and conditions of any third-party websites you visit.
We may use AI-based service solutions to improve our processes and optimize time and cost efficiency, e.g., platforms for interview transcript summarization or job description analysis and creation using large language models (LLMs) such as OpenAI’s ChatGPT (see OpenAI Privacy Policy), other similar service solutions, or learning management system (LMS) platforms with AI integration.
We do NOT use AI for the following purposes:
We may update this Privacy Notice from time to time at our sole discretion by publishing a new version on this website. Any changes will be posted on the website so that you are always aware of the information we collect, how we may use it, and under which circumstances we may disclose it.
The date of the last modification of this Privacy Notice is stated at the beginning of this document.
You are encouraged to review the most recent version of this Privacy Notice regularly, as well as each time you visit our website. We will also make reasonable efforts to notify you of any material changes, either via email (if we have your email address) or other appropriate means.
Like most websites, our website uses cookies to help provide you with the best possible browsing experience.
Cookies are small pieces of data stored on your computer that allow us to recognize your device on subsequent visits. Cookies automatically (without requiring registration) collect aggregated non-personal information, such as your browser type, operating system, domain names, website visits, average visit duration, and pages per visit.
There are two main types of cookies: session cookies and persistent cookies. Session cookies are deleted from your computer when you close your browser, while persistent cookies remain on your computer until deleted or until they reach their expiry date.
For more information, please refer to our Cookie Policy.
Cookies may also be used to display remarketing advertisements based on your previous visits to https://www.n-ix.com/ across the internet.
Remarketing advertisements are served through the Google Display Advertising Network. You can opt out of Google’s use of cookies at any time by visiting the Google Ads Preferences Manager page.
We may collect analytics information or use third-party analytics tools to measure traffic and usage trends, and to better understand user demographics and behaviors, including how users interact with our services.
Third-party analytics tools and retargeting cookies are used to collect information about user activity on our website. This information helps us analyze web browsing behavior, provide ads that match users’ interests, and measure the effectiveness of remarketing and advertising campaigns.
We currently use the following third-party tools: LinkedIn Insight, Facebook Pixel, Google Ads Remarketing code, Google Ads Conversion code, Google Tag Manager, Google Analytics, Global Site Tag, Microsoft Advertising UET, Influ2, RB2B, Zoho, Twitter Pixel Base, and Reddit Pixel.
We ensure that your personal data is not retained for longer than necessary for the purposes for which it is processed. To ensure compliance with this principle, we define retention periods applicable to each processing activity. The following factors are considered when determining the retention period:
Different retention periods may apply to different types of personal data. The retention period for each type of data is determined based on applicable legal requirements in the relevant jurisdictions. At the end of the relevant retention period, we will delete or anonymize your personal data.
We are committed to ensuring the effective exercise of your rights as a data subject. In most cases, you can exercise these rights free of charge. However, we reserve the right to charge a reasonable fee if we receive a large number of repetitive requests.
Your principal privacy rights include: the right to be informed about the collection and use of personal data; the right to access your personal data; the right to rectification; the right to erasure; the right to restrict processing, the right to object to processing; the right to data portability; the right to complain to a supervisory authority; and the right to withdraw consent.
To exercise any of these rights, please use the contact details provided in the “Contact us” section.
When submitting a request, please specify, as far as possible, the scope of your request, the type of right you wish to exercise, the personal data processing concerned, and any other relevant information to help us process your request efficiently. In cases of reasonable doubt, you may be asked to verify your identity.
We will make every effort to respond to your request as soon as possible or within a reasonable timeframe, taking into account the complexity of the request. If we are handling a large number of requests, processing may take longer than expected.
If you believe that the personal data we process about you is incorrect or incomplete, you may submit a request to access, correct, transfer, or delete this information by contacting us at dataprotection@n-ix.com.
You may also withdraw your consent or object to the processing of your personal data at any time by contacting us at dataprotection@n-ix.com. Please note that if you withdraw your consent, this will not affect the lawfulness of processing based on your consent prior to its withdrawal.
If you have any questions or concerns about our use of your personal data, or if you wish to exercise any of your privacy rights, please contact us at:
N-iX Ltd
157, Archbishop Street, Office 3.4, Valletta VLT 1440, Malta
Data Protection Officer (DPO): dataprotection@n-ix.com
If you are not satisfied with how your personal data is being processed, you have the right to lodge a formal complaint with a supervisory authority:
The UK’s Information Commissioner can be contacted via link or by telephone at 0303 123 1113.
For a list of EEA data protection supervisory authorities and their contact details, see here.
If you are a California resident, this Privacy Notice applies to you, subject to the additional information provided below regarding the processing of your personal data under the California Consumer Privacy Act (“CCPA”), which became effective on January 1, 2020.
Under the CCPA, you have the following rights regarding your personal information:
Right to know what personal information we collect about you and the purposes of that collection, as well as how your personal information is used. You have the right to know what personal information we collect about you, the sources from which it is collected, and the purposes for which we collect and use it.
Right to know with whom we share your personal information. You have the right to know whether we share your personal information with third parties. We may share your personal information with third parties who assist us in operating our business.
Right to know whether any of your personal information is sold. We do not sell or rent your personal information.
Right to opt out of the sale of your personal information. As we do not sell your personal information to third parties, we do not provide an opt-out mechanism for the sale of personal information.
Right to access and receive your personal information. You have the right to request information about the personal information collected about you and to receive a copy of such information. We will disclose and deliver the required information in accordance with the CCPA upon receipt of a verifiable consumer request.
Right to request deletion of your personal information. You have the right to request deletion of your personal information from our systems, subject to the exceptions provided under the CCPA.
We will not discriminate against you for exercising any of your rights under the CCPA. Please contact us if you have any questions regarding your rights (see the “Contact us” section for contact details). Your request must constitute a verifiable consumer request relating to your personal information. It must provide sufficient information to allow us to reasonably verify that you are the person about whom we collected personal information (or an authorized representative) and must describe your request with sufficient detail to enable us to properly understand, evaluate, and respond to it. All requests should include “California Resident Request” in the subject line.
We cannot respond to your request or provide personal information if we are unable to verify your identity or authority to make the request and confirm that the personal information relates to you. We will use the personal information provided in a verifiable consumer request solely to verify your identity or authority. We will respond within 45 days of receiving your request. If additional time is required (up to a total of 90 days), we will inform you in writing of the reason for the extension and the extended response period. Our written response will be delivered electronically.