GDPR compliant · EU data residency

Privacy policy

How we collect, use, and protect personal data in connection with our services.

Effective date: March 3, 2026

Data we collect

We collect personal data you provide directly: name, email address, company name, job title, and the content of inquiries submitted via forms or direct communication. We may also collect basic technical data such as IP address and browser type for security and fraud prevention purposes.

How we use your data

We use submitted information to respond to your inquiry, scope potential engagements, send relevant service updates (you may opt out at any time), and prevent fraudulent or abusive use of our systems. We do not use your data for automated profiling or algorithmic decision-making.

Legal basis for processing

We process personal data on the basis of legitimate interest for handling B2B contact inquiries (GDPR Art. 6(1)(f)), consent where you have given it (Art. 6(1)(a)), and contractual necessity for active client engagements (Art. 6(1)(b)). You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data sharing

We do not sell, rent, or trade personal data. Data is shared only with service providers strictly necessary for delivery — including Microsoft Azure (region-aligned hosting and infrastructure) and Vercel Analytics (anonymised usage statistics, only with your consent) — under data processing agreements with appropriate safeguards. No data is shared with advertising networks.

Data retention

Contact inquiries are retained for up to 24 months from the date of last interaction. Data relating to active client engagements is retained for the duration of the contractual relationship plus applicable legal retention periods. On request, personal data will be deleted or anonymised, subject to legal obligations.

Your rights

Under GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure (the 'right to be forgotten'); obtain a copy of your data in a portable format; restrict or object to processing; and lodge a complaint with your local supervisory authority. The competent supervisory authority for Nexqion is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (LfDI RLP). To exercise any of these rights, contact us at the address below.

Cookies

We use strictly necessary session cookies for authentication and secure access — these require no consent. With your consent, we use Vercel Analytics to collect anonymised, aggregated usage statistics (pages visited, browser type, referrer). Vercel Analytics does not use advertising cookies and does not track individuals across sites. You can withdraw or change your consent at any time via the Cookie Settings link in the footer.

International transfers

Personal data is processed and stored in the Azure region that corresponds to your location. Data residency options are available and confirmed in writing before onboarding begins. No data is transferred outside your jurisdiction without explicit written agreement and appropriate safeguards in place.

Privacy contact

For privacy questions, data subject requests, or to exercise your rights, contact us directly. We aim to respond within 30 days.

contact@nexqion.com

Active clients may request a Data Processing Agreement (DPA) or additional privacy documentation under their contractual terms.