Privacy Policy

We take the protection of your personal data seriously. This information applies to the processing of your personal data when you visit our website.

1. Responsible party and data protection officer

The responsible party within the meaning of the EU General Data Protection Regulation (‘GDPR’) is

Nexis GmbH 

Rudolf-Vogt-Str. 6 93053 Regensburg, Deutschland

Telefonnummer: +49 941 85097900

E-Mail: contact@nexis-secure.com

We have appointed a data protection officer. You can reach our data protection officer at privacy@nexis-secure.com

2. Processing on our website

The following personal data is processed in connection with your visit to our website.

 

2.1. Webhosting

When you visit our website, we process personal data in order to guarantee the smooth, functional and secure operation of our website. The following data may be processed (so-called log files)

·        Operating system and current IP address (last octet truncated) of the device you use to visit our website

·        Browser (type, version and language setting)

·        the amount of data retrieved

·        Date and time of access

·        the URL of the previously visited website (referrer)

·        the URL of the (sub)page that you access on the website

·        the internet service provider of the accessing system

The collection of log files is technically necessary in order to display our website to you and to ensure the stability and security of the website. This also constitutes our legitimate interest in data processing. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. This website is hosted by the service provider IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, with whom we have concluded a data processing agreement. Your data will be processed in a German data centre and deleted after 8 weeks.

 

2.2. Contacting us

If you contact us via our form or by e-mail, we will process your e-mail address, your name and any other personal data transmitted in your message. The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR in the context of initiating or implementing pre-contractual measures or on the basis of our legitimate interest in processing and responding to your other concerns in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Further information is not mandatory for establishing contact and is therefore provided voluntarily on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. Your personal data will be deleted – subject to statutory retention periods – as soon as the purpose of storage no longer applies, i.e. your request has been fully processed and no further communication with you is required or requested by you.

We work with Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland to provide our email inbox. The data is generally processed in the EU. However, as a data transfer to Microsoft Inc. in the USA (third country) cannot be completely ruled out, an order processing contract has been concluded with Microsoft using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Microsoft Inc. is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

 

2.3. Expert sessions and online events

When you participate in Expert Sessions and online events, we also process your name, email address, IP address and other technically required data, as well as any audio, video and text content you send, your telephone number and your profile picture. The webinars are part of your membership and the processing is therefore carried out to fulfil your membership contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. The provision of the information is necessary for participation in the webinars. We store your data for as long as it is necessary for the organisation of the corresponding event and delete it, subject to relevant statutory retention obligations, as soon as processing is no longer necessary.

We work with the Teams software provided by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, for the organisation of webinars and online events. The data is generally processed in the EU. However, as a data transfer to Microsoft Inc. in the USA (third country) cannot be completely ruled out, an order processing contract has been concluded with Microsoft using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Microsoft Inc. is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

 

2.4. Newsletter

If you register for our newsletter, we will process your e-mail address to inform you about news and offers. You can voluntarily subscribe to our newsletter at any time on our website. To send our newsletter, we work with the service rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany. We have concluded an order processing contract with the service provider. The legal basis for the processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you can revoke at any time and without giving reasons with effect for the future (e.g. via the corresponding link at the end of each newsletter). We store your data for as long as the consent for sending the newsletter exists.

 

2.5 Whitepaper download

You have the option of downloading various white papers via our website. To access our whitepapers, you consent to promotional contact using the contact information provided. We collect your name, email address and your company before downloading the content. The legal basis is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You have the option to withdraw your consent at any time with effect for the future and without giving reasons by using the unsubscribe link within the emails or by contacting us using the contact information provided here. We store your data for as long as you consent to the use of your data for advertising purposes and delete it as soon as you withdraw your consent or the purpose of the processing no longer applies.

We work with the service rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany, for advertising contact. We have concluded an order processing contract with the service provider. In some cases, we also contact you via our Outlook e-mail system, provided by Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The data is generally processed in the EU. However, as a data transfer to Microsoft Inc. in the USA (third country) cannot be completely ruled out, an order processing contract has been concluded with Microsoft using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Microsoft Inc. is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

 

2.6. Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie. Cookies cannot execute programmes or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall. We use technically necessary cookies that are required for the provision of the website. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR i.V.m. § Section 25 para. 2 no. 2 TDDDG. Our legitimate interest lies in the technically flawless and user-friendly presentation of the website.

In the case of cookies that are not technically necessary, the processing is based on your consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) sentence 1 lit. a GDPR. We request your consent as part of our cookie banner. You can revoke your consent at any time and without giving reasons with effect for the future by removing the tick you have set for consent in the cookie banner under the respective category and then saving the settings. You can open the cookie banner at any time via the overlay displayed in the bottom left-hand corner of your screen. You can find more information about the cookies used on this website in our cookie banner.

 

2.7. Borlabs Consent Management

We use the Borlabs Consnet Manager to store your consents. The provider is Borlabs GmbH Hamburger Str. 11, 22083 Hamburg Germany. This software enables us to request consent on our website. Your IP address and your corresponding decisions are processed and stored in the Consent Manager. The legal basis for the processing is Art. 6 para. 1 lit. c GDPR i.V.m. § 25 para. 1 sentence 1 TDDDG.  Borlabs stores the consent you have given in a cookie on your end device. Your data will be stored for a maximum of 6 months. You can adjust and revoke your consent at any time using the button under 2.2. or at the bottom left of your screen.

 

2.8. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The cookie used for this purpose enables us to analyse the use of our website. Google uses this information on our behalf to analyse the use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The information generated by the cookie may also be transmitted to a Google LLC server in the USA and stored there. On our website, Google Analytics has therefore been extended by the code ‘anonymizeIp’ to ensure anonymised collection of IP addresses (so-called IP masking). This means that the IP address of the user is first truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (third country) and truncated there. The IP address transmitted by the browser used as part of Google Analytics is not merged with other Google data. We have concluded an order processing contract with Google using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Google is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

The legal basis for the use of Google Analytics is your consent in accordance with Section 25 (1) sentence 1 TDDDG, Art. 6 (1) sentence 1 lit. a GDPR, which you can give via the cookie banner and also revoke at any time without giving reasons with effect for the future in cookie management. The personal data processed by Google Analytics is stored for 14 months and then automatically deleted.

 

2.9. Google Tag Manager

We use the Google Tag Manager service provided by Google of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager enables us to integrate scripts and plug-ins into our website faster and in a more user-friendly way. We have concluded an order processing contract with Google. Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures the loading of other components, which in turn may collect data. The Google Tag Manager does not access this data. The legal basis is your voluntary consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via our consent management with effect for the future. The data is generally processed in the EU. However, since a data transfer to Google in the USA (third country) cannot be completely ruled out, we have concluded an order processing contract with Google using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Google is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

 

2.10. Google Ads Conversion Tracking

We use the online advertising programme ‘Google Ads’ on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click on an advert placed by Google, a cookie for conversion tracking is stored on your computer. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers.

The information obtained with the help of the conversion cookie is used to compile statistics on the effectiveness of our adverts. This tells us the total number of users who clicked on one of our adverts and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified. Google Ads Conversion Tracking is used with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. Art. 6 para. 1 lit. a GDPR. Your personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. Your processed personal data will be deleted by us after 90 days.

Your data may be transferred to the USA. We have therefore concluded an order processing contract with Google using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Google is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

 

2.11 YouTube

YouTube Videos on our website

We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. YouTube is a Google service and is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit our website and play a video, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, further information about the use of this online service (including your IP address) is transmitted to a YouTube server and stored there. This takes place regardless of whether you have a YouTube user account and are logged in there or not. If you are logged in to YouTube, your data will be assigned directly to your account. If you do not want this information to be assigned to your user account, you must log out before visiting websites with integrated YouTube content. YouTube stores data as user profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising. YouTube is used with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future.

Further information on the purpose and scope of data collection and processing by YouTube can be found in their privacy policy, as well as further information on rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

Your data may be transferred to the USA. We have therefore concluded an order processing agreement with Google using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Google is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

YouTube-Kanal

We process personal data together with YouTube as part of our YouTube channel https://www.youtube.com/@Nexis_GmbH). When operating our channel, YouTube processes users’ personal data in order to provide us with analyses of our viewers and videos. We gain insight into the following information about our viewers as part of YouTube’s analytics service

·        Number of total video views and average video views per person and their trend (by how much decreasing/increasing)

·        Number of subscribers and their trend

·        Number of visitors to the channel

·        Interactions of viewers (likes, comments, shared content)

·        Time spent by visitors on the channel, with videos or until they subscribe

·        The reach of the video

·        The percentage of videos that a user watches on average from the videos

We have no influence on the analysis of user data for this purpose. Further information on the processing of personal data, such as the legal basis and the storage period of this information by YouTube, can be found here: https://policies.google.com/privacy?hl=de. To exercise your rights, you should therefore contact YouTube directly.

We only process personal data for the operation of the YouTube channel when interacting with our viewers. We respond to comments and interact with viewers via the comment function. The legal basis for the processing is our legitimate interest in interacting with our viewers and the appealing presentation of Nexis GmbH on popular online platforms in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. You can contact us at any time to exercise your rights in connection with the processing steps of Nexis.

 

3. NEXIS 4 User Group

We offer customers of NEXIS 4 software who do not represent a partner company the opportunity to join the NEXIS 4 User Group. The NEXIS 4 User Group offers exchange opportunities via a group’s own Teams channel, invitations to virtual & on-site meetings and the sending of the latest news and innovations relating to NEXIS 4 by e-mail. First name, surname, email address, company, chat messages and audio and video data are processed for the NEXIS 4 User Group. The legal basis for the processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you can revoke at any time and without giving reasons with effect for the future. We store your data for as long as your consent to the processing exists and it is necessary for the fulfillment of the processing purpose. If you withdraw your consent, we will delete your data, which means that it will no longer be possible to continue providing the benefits of the NEXIS 4 User Group.

For the provision of information via the Teams channel and for virtual meetings, personal data is transferred to Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The data is generally processed in the EU. However, since a data transfer to Microsoft Inc. in the USA (third country) cannot be completely ruled out, an order processing contract has been concluded with Microsoft using the EU standard contractual clauses. The EU standard contractual clauses are available on the website of the European Commission. In addition, Microsoft Inc. is certified in accordance with the EU-US Data Privacy Framework. The adequacy decision of the European Commission therefore applies to transfers of personal data.

If you are interested in the NEXIS 4 User Group, please get in touch with your contact at Nexis.

 

4. Storage period

Unless otherwise stated in the descriptions of the individual processing activities, we generally process your data for as long as is necessary to fulfill the purpose of the processing. We delete your data in compliance with the statutory retention periods (retention for up to 10 years where applicable) as soon as the purpose of the processing no longer applies or this is required by law.

 

5. Your rights

You have the right to request confirmation as to whether personal data concerning you is being processed by us. If this is the case, we will be happy to provide you with information about this personal data and the information listed in Art. 15 GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object to processing (Art. 21 GDPR) under the respective legal requirements. If the processing is based on your consent, you have the right to withdraw this consent at any time (Art. 7 para. 3 GDPR); however, the lawfulness of the processing carried out on the basis of the consent and until the withdrawal remains unaffected.

To exercise your rights as a data subject, please contact the address stated in section 1.

You also have the right to lodge a complaint with a competent supervisory authority at any time if you are of the opinion that the processing of your personal data by us violates data protection regulations (Art. 77 GDPR).

 

6. Updating and amending the privacy policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations.

Current status is: November 2024