NIS2 · Malta

S.L. 460.41 — Measures for a High Common Level of Cybersecurity across the European Union (Malta) Order

Privacy notice

This notice explains what personal data nis2europe.eu collects, what we use it for and what your rights are (GDPR).

What we collect

What we use the data for

We use the data ONLY to provide the NIS2 compliance service: answering your inquiry, giving the applicability assessment and contacting you if you have given consent. Data is not sold or shared with third parties beyond partners necessary for providing the service (e.g., in exceptional cases, a local partner).

How long we keep the data

We keep the data for as long as necessary to provide the service, or until you ask us to delete it. The time of giving consent is recorded. Prefill: when you submit a form, we keep the contact and company details and the answers you entered on our server so that the next form is prefilled — for up to 30 days from the last change, and for up to 12 months if you have opened an order link sent to you by e-mail. These data are visible only to you (the same browser session or the link sent by e-mail), never on the basis of a registry code alone. You can delete them with the link «Delete my prefilled details» in the form or by writing to the address below. When you open the NIS2 Magic Button workspace, we record as evidence your e-mail address, the website address entered and the time of confirmation; if you grant an authorisation, also the authorised person's e-mail address. The legal basis is our legitimate interest (GDPR art 6(1)(f)) in proving that the requester's right and domain were checked before access to the company's data was granted. The evidence is kept for three years and then deleted automatically.

Cookies and browser storage

This website does not set any cookies — no preference cookies and no tracking or analytics cookies. Your choice of country or language is not stored. The site writes only five entries to your browser's local storage (localStorage): «nis2_ref» – an advisor's referral code, if you opened the site through an advisor's link; it is sent to us with your order or quote request so that it is linked to that advisor; «nis2_check_done» – a note that you have taken the free applicability check, so that we do not suggest it again; «partner_session» – an advisor's login session in the advisor workspace; «nis2_mb_session» – the NIS2 Magic Button workspace session after you have confirmed your connection to the company through the link sent by email. These entries are not used for tracking or advertising, and you can delete them in your browser settings. The site also writes one entry to your browser's session storage (sessionStorage): «nis2_bar_closed» — a mark that you closed the e-mail bar on a product page or sent yourself a summary from it, so that the bar does not appear again in this session; it is removed when you close the tab. The site also writes the entry «nis2_form_data» to the same session storage: the company's registry code and its public register data, the check answers you gave in this session, and a token that lets us prefill the next form with the details you entered earlier; the entry holds no contact details and is removed when you close the tab. The fifth local storage entry is «nis2_company» — the company registry code and country you entered last, so that the code is already in the form on your next visit; it holds no contact details.

Visit statistics

We count page views only as aggregate numbers: which page was viewed, in which language and how the visit reached the site (search, link or direct) – without cookies. We do not store a visitor's IP address in the statistics or in the access log. If a visit comes from a company network, we may identify that network's domain name (for example example.com): to do this we look up the name that belongs to the address in the DNS; we do not store the address itself and do not identify the person. If a request fails, the server may write the address to a technical error log, which we use only to investigate the fault.

Your rights

You have the right at any time to access your data (GDPR art 15), have it rectified (art 16) or erased (art 17), and to withdraw consent. To do so, write to the address below. For current board members of companies entered in the Estonian business register we process only the name and role; we do not collect personal identification codes, dates of birth or addresses. The data come from the open data of the Estonian business register (Centre of Registers and Information Systems), a publicly available source. We use them for one purpose: so that, in the questionnaire for documents ordered by a company, the management body member field is prefilled for the person who placed and paid for an order on behalf of that company. The legal basis is legitimate interest (GDPR Art. 6(1)(f)): the customer does not have to re-enter data that are already in the public register. The name and role are shown only in the questionnaire of a paid order of that company (not for a refunded or cancelled order); we do not publish them on the web or transfer them to third parties or outside the European Union. We do not use a register snapshot older than 60 days. You have the right to access your data, to have them corrected (data in the register itself are corrected by the business register), erased or their processing restricted, and to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Right to object: as a board member you may at any time require that we do not process your name. Write to the address below — we will delete the name from our system without delay, and it will not return there at the next refresh of the register data. In addition, you have the right to restriction of processing (art 18), to object to the processing (art 21) and to lodge a complaint with a data protection supervisory authority (art 77).

Data controller

The data controller is AIPOS OÜ (registry code 16966532, Pargi tn 1, Kabala küla, Türi vald, 72001 Järva maakond, Estonia), the operator of nis2europe.eu. For all data protection matters, write to: support@nis2europe.eu

S.L. 460.41 lays down the NIS2 requirements; the supervisory authority is Critical Infrastructure Protection Department. The early warning of a significant incident must be submitted within twenty-four (24) hours. The maximum administrative fine is up to 10 000 000 EUR. nis2europe.eu prepares the compliance documentation required under this law; it can be ordered and paid for directly on this site.

AIPOS OÜ · Registry code 16966532 · Estonia

NIS2 compliance document platform in 24 EU countries.

The platform prepares compliance documentation and does not provide legal advice or audits.

The service can be ordered and paid for directly on nis2europe.eu. About us