GDPR

Introduction

nom.eu, run by Nomeu OÜ, processes personal data in line with the General Data Protection Regulation (GDPR). This page is a short guide to your rights and to how you can use them. The full description of what we collect, why, who receives it and for how long is in our Privacy Policy.

Who is responsible

Nomeu OÜ, Ahtri tn 12, 15551 Tallinn, Estonia, registry code 17644003, is the data controller. Requests about your personal data go to registry@nom.eu.

What we process, in brief

• Account and billing details: your name, email address, postal address and phone number, to run your account and to issue invoices.
• Holder details: the same details, recorded at the registry as those of the holder of your names. For .nom.eu names we are the registry. For a name under another ending, its registry receives them and processes them under its own rules.
• Your country of citizenship, only if you live outside the countries that qualify for a .nom.eu name on their own, to show that you may hold one.
• Phone verification: your phone number goes to our messaging provider, Twilio, to send you a confirmation code.
• Payment references at Stripe, our payment provider. We never see or hold your card number.
• Technical and security data, such as IP addresses and sessions.
• Abuse reports: if you report a name, the details you give us and your email address, so that we can look into it and answer you.
• Requests to be told when an ending opens: your email address, until we have told you.

What is public

Holders of .nom.eu names are private individuals, so the public record of a name (the lookup page and the RDAP service) does not show your name, address, phone number or email address. It shows the name, its status and dates, the registrar and the name servers.

Your rights

You have the right to access, correct and erase your personal data and to receive a copy of it, to restrict or object to its processing, and to withdraw a consent you have given. You also have the right to complain to a data protection authority: the one of the country you live in, or the Estonian Data Protection Inspectorate (www.aki.ee).

How to use them

• Correct your details: change them under My account, My details. We pass the change on to the registry.
• Change your email address: under My account, Security. We send a code to the new address, and it only changes once you have entered that code.
• Change your password: under My account, Security.
• Change your language: with the language picker at the bottom of every page. It is saved on your account.
• Get a copy of your data: download it under My account, Privacy. You confirm with your password and get one file, at once, with everything we hold about you: your account details, your names, your orders and invoices, and what was sent to us with your email address. Your invoices as PDF are under My account, Orders and invoices. If you cannot sign in, write to registry@nom.eu from the email address on your account.
• Close your account and erase your data: do it yourself under My account, Privacy, with your password, or write to the same address. An account can be closed once no name is left on it and no order is still open. A name is off the account once it has been moved away or, after it was given up or has expired, once it has been released. Closing removes your name, email address, phone number and postal address from the account, and it cannot be undone. Orders and invoices, with the copy of your details on them, are kept for the period that accounting and tax law requires. Closing your account does not delete two things that are kept under duties of their own: the record at the registry of who held a name, which is kept for as long as it is needed to settle disputes about that name, and the records our payment provider, Stripe, holds about your payments, which it keeps for as long as the law requires of it.
• Anything else: write to registry@nom.eu. We answer within one month.

How we protect your data

We use encryption in transit, store passwords only in hashed form and restrict access to staff who need it. Where one of our providers processes data outside the European Economic Area, we rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

Changes to this page

We update this page when our practices or the law change. The date shown on the page is the latest revision.

Contact us

For more about how we handle personal data, or to make a complaint, write to registry@nom.eu.