Privacy Policy

I. About this Privacy Policy

This policy is issued by NomieRest LLC (filed as NOMIEREST LLC), a limited liability company registered in the State of Delaware in the United States of America ("NomieRest", "we", "us" and "our"). The Director of the company is Sevda Doner. Our Principal Place of Business — where the records of the company are kept — is 319 Compton Ln, Schaumburg, IL 60194, US. This policy is addressed to individuals outside our organisation with whom we interact, including individual clients, representatives of client organisations, visitors to our website, and users of our services (together, "you"). Defined terms used in this Policy are explained in the following section (Section II) below.

This policy explains how we may collect, use, disclose, and safeguard your information when you visit our website nomierest.com (the "Site"). Please kindly be informed that this policy may be amended or updated from time to time to reflect changes in our practices with respect to the processing of personal data, or changes in applicable law. Please regularly check this page to review any changes we might make to the terms of this policy.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Site.

II. Definitions

• Standard Contractual Clauses means template data transfer clauses approved by the European Commission or by a Data Protection Authority for the purpose of transferring data outside of the EEA or the United Kingdom.
• Adequate Jurisdiction means a jurisdiction that has been formally designated by the European Commission or the United Kingdom Government as providing an adequate level of protection for Personal Data.
• Controller means the entity that decides how and why Personal Data are Processed.
• Cookie means a small text file that is placed on your device when you visit a website, including the NomieRest website.
• Data Protection Authority means an independent public authority that is tasked, by law, with overseeing compliance with applicable data protection laws.
• EEA means the European Economic Area, namely the European Member States, together with Norway, Liechtenstein and Iceland.
• Personal Data means information that is about any individual, or from which any individual is directly or indirectly identifiable.
• Process, Processing or Processed means anything that is done with any Personal Data, whether or not by automated means.
• Processor means any person or entity that Processes Personal Data on behalf of the Controller (other than employees of the Controller).
• Sensitive Personal Data means Personal Data about race or ethnicity, political opinions, religious or philosophical beliefs, trade union membership, physical or mental health, sexual life, any actual or alleged criminal offences or penalties, national identification number, or any other information that may be deemed to be sensitive under applicable law.
• Site means any website operated, or maintained by us or on our behalf.

III. Collection of Personal Data

We may collect or obtain Personal Data about you: (i) directly from you (e.g., where you contact us); (ii) in the course of our relationship with you; (iii) when you make your Personal Data public; (iv) when you visit our Sites; (v) when you register to use any of our services; or (vi) when you interact with any third-party content or advertising on a Site. We may also receive Personal Data about you from third parties (e.g., law enforcement authorities).

We may collect Personal Data about you from the following sources:

• Data you provide: when you contact us via email, telephone, or any other means.
• Relationship data: in the ordinary course of our relationship with you.
• Data you make public: including via social media.
• Site data: when you visit any of our Sites or use features available on them.
• Registration details: when you use, or register to use, any of our sites or services.
• Content and advertising information: when you interact with third-party content or advertising on a website.
• Third-party information: from third parties who provide it to us (e.g., law enforcement authorities).

IV. Categories of Personal Data We May Process

• Personal details: Given name(s); preferred name; and photograph.
• Demographic information: Gender; date of birth; age; nationality; salutation; title; and language preferences.
• Identifier information: Passport or national identity number; utility provider details; bank statements; tenancy agreements.
• Contact details: Correspondence address; telephone number; email address; and details of your public social media profile(s).
• Matter details: Personal data included in correspondence, transaction documents, evidence or other materials processed in the course of providing our services.
• Attendance records: Details of meetings and other events organised by or on behalf of NomieRest that you have attended.
• Consent records: Records of any consents you have given.
• Payment details: Billing address; payment method; bank account number or credit card number; cardholder or accountholder name; card or account security details; card "valid from" date; and card expiry date; invoice records; payment records.
• Data relating to our Websites: Device type; operating system; browser type; browser settings; IP address; language settings; dates and times of connecting to a Site; and other technical communications information.
• Views and opinions: Any views and opinions that you choose to send to us, or publicly post about us on social media platforms.

V. Sensitive Personal Data

We do not seek to process Sensitive Personal Data through this Site. Where it becomes necessary, we rely on one of the following legal bases:

• Compliance with applicable law.
• Detection and prevention of crime (including the prevention of fraud).
• Establishment, exercise or defence of legal rights.
• Consent obtained in accordance with applicable law.

VI. Purposes of Processing

We may process Personal Data for: providing our website and services to you; compliance checks; operating our business; communicating with you; managing our IT systems; health and safety; financial management; conducting surveys; ensuring the security of our premises and systems; conducting investigations where necessary; compliance with applicable law; improving our website and services; fraud prevention; and recruitment.

VII. Disclosure of Personal Data to Third Parties

We may disclose your Personal Data to: legal and regulatory authorities; our external advisors; our processors; any party as needed in connection with legal proceedings; any party necessary for investigating, detecting or preventing criminal offences; any purchaser of our business; and any third-party providers of advertising, plugins, or content used on our Sites in accordance with applicable law and subject to applicable professional and regulatory requirements regarding confidentiality.

VIII. International Transfer of Personal Data

We may transfer your Personal Data to recipients in other countries. Where we transfer Personal Data from the EEA or the UK to a recipient outside the US, the EEA or the UK that is not in an Adequate Jurisdiction, we do so on the basis of Standard Contractual Clauses.

IX. Data Security

We implement appropriate technical and organisational security measures designed to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. Because the internet is an open system, the transmission of information via the internet is not completely secure.

X. Data Retention

We retain copies of your Personal Data only for as long as is necessary in connection with the purposes set out in this policy, unless applicable law requires a longer retention period.

XI. Your Legal Rights

Subject to applicable law, you may have the following rights:

• The right not to provide your Personal Data to us.
• The right to request access to, or copies of, your Personal Data.
• The right to request rectification of any inaccuracies.
• The right to request erasure or restriction of processing.
• The right to data portability.
• Where we process based on consent, the right to withdraw that consent.
• The right to lodge complaints with a Data Protection Authority.

XII. Cookies

When you visit a website, we may place Cookies onto your device, or read Cookies already on your device, subject always to obtaining your consent, where required, in accordance with applicable law. See our Cookie Policy for details.

XIII. Direct Marketing

We may process your Personal Data to contact you via email, telephone, direct mail or other communication formats to provide you with information regarding services that may be of interest to you. You may unsubscribe from our promotional email list at any time by clicking the unsubscribe link included in every promotional email we send.

XIV. Contact Us

If you have any comments, questions or concerns about data privacy, including the processing of personal data carried out by us or on our behalf, please contact us at:

• NomieRest LLC (filed as NOMIEREST LLC, State of Delaware)
• Director: Sevda Doner
• Email: info@nomierest.com
• Principal Place of Business (records): 319 Compton Ln, Schaumburg, IL 60194, US
• Operations (in-person visits): 630 N Franklin St, Chicago, IL 60654, US

Thank you for visiting NomieRest. We appreciate your trust and are committed to protecting your privacy.