Privacy Notice
Last Updated: 20 May 2026
Welcome to https://niftify.art, operated by Noctra s.r.o., a company registered in the Republic of Czechia under company number 437129, with its registered office at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czechia (“Noctra s.r.o.”, “we”, “us”, or “our”). This Privacy Notice outlines how we collect, use, disclose, and safeguard your personal information when you access or interact with our Website and related services.
By using our Platform, you acknowledge that you have read and understood this Privacy Notice and agree to the practices described herein. If you do not agree with any part of this Notice, please refrain from using our services.
Data Controller Information
Noctra s.r.o., registered under number 437129, VAT number CZ 19316801, with its legal address at Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czechia.
(referred to as the “Company,” “we,” or “us”), is the data controller responsible for the processing of your personal data.
As the data controller, we determine the purposes and means of processing the personal information collected through our Platform. We are committed to ensuring that your data is handled lawfully, fairly, and transparently in accordance with applicable data protection laws.
If you have any questions or concerns regarding how we process your personal data, you may contact us at: 📧 [email protected]
Information We Collect
We may collect, use, and process the following categories of personal data when you interact with our Platform:
(a) Account Information — Details such as your profile ID, login credentials, account settings, activity logs, photos, avatars, and any content you voluntarily share through your account.
(b) Contact Information — Includes your email address, phone number, and physical address.
(c) Identity Data — Your full name, identification details (e.g., passport number or government-issued ID), and other verification-related information.
(d) Shared Content — Any content, files, or data you upload, submit, or generate through the use of our services.
(e) Transaction Information — Details related to your orders, purchase history, transaction records, and current account balance.
(f) Payment Details — Information relating to your payments, such as bank account numbers, credit/debit card information, payment method used, and transaction status.
(g) Legal Compliance Data — Data required to fulfill legal obligations, including those related to Anti-Money Laundering (AML), Counter-Terrorist Financing (CFT), and Know Your Customer (KYC) regulations.
(h) Technical Data — Device-related information such as IP address, browser type and version, operating system, device identifiers, and configuration settings.
(i) Communication Records — Logs of interactions including email exchanges, chat transcripts, and call recordings.
(j) Marketing Information — Your preferences regarding marketing communications, participation in loyalty or promotional programs, and engagement metrics.
(k) Customer Support Data — Information provided when you contact support, including the nature of your inquiry, resolution status, and support communications.
(l) Visitor and Video Surveillance Data — CCTV recordings and related footage from visits to our physical premises, collected for facility and personnel security purposes.
Purpose of Using Collected Information
We process your personal data for a variety of clearly defined purposes, each supported by an appropriate legal basis in accordance with applicable data protection laws:
(a) Service Delivery — To provide the services you request and ensure they are delivered efficiently and to your satisfaction. Legal Basis: Performance of a contract
(b) Legal Compliance — To meet our obligations under applicable laws and regulations, including AML, financial reporting, data protection, and other statutory requirements. Legal Basis: Legal obligation, public interest
(c) Account Management — To establish, maintain, and manage your user account and ensure seamless access to our services. Legal Basis: Performance of a contract
(d) Identity Verification — To verify your identity and protect your account from unauthorized access or fraudulent activity. Legal Basis: Legal obligation, legitimate interests
(e) Order Processing — To process and fulfill your orders, including payment handling and delivery coordination. Legal Basis: Performance of a contract
(f) Transaction Management — To facilitate accurate and secure financial transactions through our Platform. Legal Basis: Performance of a contract, legitimate interests
(g) Customer Communication — To communicate with you, provide support, and address any inquiries, concerns, or complaints. Legal Basis: Performance of a contract, legitimate interests
(h) Service Enhancement — To analyze usage data and improve the quality, functionality, and effectiveness of our services. Legal Basis: Legitimate interests
(i) Risk Management — To monitor and manage potential operational, legal, or financial risks to our business. Legal Basis: Performance of a contract, legal obligation, legitimate interests
(j) Marketing — To send marketing communications, promotional content, and personalized recommendations, where you have provided consent. Legal Basis: Consent, legitimate interests
(k) Technical Support — To identify, diagnose, and resolve technical issues affecting the delivery and operation of our services. Legal Basis: Performance of a contract
(l) Security — To protect our systems, infrastructure, and data against unauthorized access, breaches, or other threats. Legal Basis: Performance of a contract, legal obligation, legitimate interests
(m) Fraud Prevention — To detect, prevent, and respond to suspected fraud, misuse, or unlawful activities. Legal Basis: Legal obligation, legitimate interests
(n) Dispute Resolution — To manage and resolve disputes, enforce contractual rights, and comply with legal obligations. Legal Basis: Performance of a contract, legal obligation, legitimate interests
If you have any questions regarding the purposes for which we process your personal data, please contact us at [email protected].
Methods of Information Collection
(a) Direct Interaction — We collect information directly from you when you register for an account, make a purchase, use our services, communicate with us, or otherwise engage with the Platform.
(b) Automated Technologies — We use cookies and similar technologies to automatically collect certain technical and usage data as you navigate our Website. For more details, please refer to our Cookie Notice available on the Website.
(c) Third-Party Sources — We may also receive personal data from trusted third-party sources, including business partners, payment service providers, public databases, and governmental authorities, where legally permissible.
Information Provision Necessity
Some personal information is required in order for us to provide you with access to our services or to fulfill specific requests. If you choose not to provide this mandatory information, it may restrict your ability to access certain features or functionalities of the Platform.
Other types of information are optional, and you have control over what you choose to share with us. You can manage your preferences for optional data at any time through your account settings or by contacting our support team at [email protected].
Information Sharing and Disclosure
We may share your personal data with trusted third parties where necessary to deliver our services or where required by law. All data sharing is performed responsibly and in full compliance with applicable data protection regulations.
We may disclose your information to: service providers and business partners who support our operations, such as payment processors, hosting providers, and analytics tools; affiliates and subsidiaries involved in the development or administration of our services; regulatory and law enforcement authorities, where such disclosure is required to comply with legal obligations, respond to lawful requests, or protect our rights and the rights of others.
We take appropriate measures to ensure that all parties with whom we share your data maintain the same level of privacy and security that we apply internally.
If you have any questions or concerns about how your personal data is shared, please contact us at [email protected].
International Data Transfers
While our data processing activities are primarily carried out within the European Economic Area (EEA), there may be occasions when your personal data is transferred to and processed in countries outside the EEA. In such cases, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and adequacy decisions where available.
If you have any questions or concerns about how your data is protected during international transfers, please contact us at [email protected].
Your Rights
As a data subject, you have the following rights under applicable data protection laws: (a) Right of Access, (b) Right to Rectification, (c) Right to Erasure, (d) Right to Restrict Processing, (e) Right to Object, (f) Right to Data Portability, and (g) Right to Withdraw Consent.
To exercise any of these rights, please contact us at [email protected]. We may request verification of your identity before fulfilling your request.
Security Measures
We implement encryption of data during transmission, access controls, and regular security audits. We also recommend users follow best practices: use strong passwords, enable Two-Factor Authentication (2FA), regularly update passwords, be cautious of phishing attempts, and keep software updated. For assistance, contact [email protected].
Data Retention
We retain your personal data only for as long as necessary. Legal/regulatory compliance data is retained for five (5) years; data relevant to legal disputes up to ten (10) years; operational data for the duration of your relationship with us plus a reasonable period thereafter. Contact [email protected] for more information.
Automated Decision-Making and Profiling
We do not engage in automated decision-making that produces legal or similarly significant effects. We may use limited profiling to personalize your experience on our Platform.
Complaints and Dispute Resolution
Contact us at [email protected] with any concerns. You also have the right to file a complaint with the supervisory authority in Czechia:
Office for Personal Data Protection (ÚOOÚ) Address: Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czechia Website: www.uoou.cz
Updates to This Notice
We may update this Privacy Notice periodically. Your continued use of the Website after updates constitutes acceptance of the revised terms. Material changes will be communicated by email or prominent notice on the Website.
Contact Us
📧 Email: [email protected]
Noctra s.r.o. Korunní 2569/108, Vinohrady, 101 00 Praha 10, Czechia Company No.: 437129 | VAT: CZ 19316801
All content on this website is generated by artificial intelligence (AI). The outputs are synthetic and do not depict real people, events, or facts. Any resemblance to actual persons, living or dead, is purely coincidental. Users are responsible for how they use AI-generated content, and misuse for impersonation, harassment, or misleading purposes is strictly prohibited.