Data controller
Nexxom OÜ, registered at Ahtri tn 12, 15551 Tallinn, Harju maakond, Estonia, is responsible for the processing described on this page. Register number: 17423710. Telephone: +1 (207) 744-7556. Processing is governed by the GDPR and, depending on the visitor’s situation, the Swiss Federal Act on Data Protection.
Data collected
Contact and project forms collect the information you provide: first and last name, professional contact details, telephone number, company, job title where applicable, subject, project timeframe and message. The website may also process technical data required for security, including the IP address, requested URL, browser information and timestamps.
Purposes and legal bases
The data is used to answer requests, assess and follow up projects, secure the website and meet legal obligations. Processing connected with a requested project is necessary to take pre-contractual steps. General enquiries and website security rely on Nexxom’s legitimate interests in managing its professional relationships and protecting its services. Legal obligations apply where required.
Recipients and retention
Data is accessible only to authorized Nexxom personnel and to OVH SAS when strictly necessary for infrastructure hosting. Contact and project requests are retained for up to three years after the last exchange. Technical logs are retained for no more than twelve months. Data subject to a legal retention requirement may be archived for the applicable period.
Hosting and transfers
The website, Strapi back office and form data are hosted on OVH infrastructure located in France. Nexxom does not intend to transfer this data outside the European Economic Area. If a transfer becomes necessary, it will be governed by the safeguards required by applicable law.
Your rights
Depending on the applicable rules, you may request access, rectification, erasure, portability or restriction of your data, and object to certain processing through the contact form. Identity verification may be requested where necessary. You may also lodge a complaint with the competent supervisory authority, in particular the Estonian Data Protection Inspectorate.
Security and automated decisions
Nexxom applies appropriate technical and organizational safeguards to protect the data. Form submissions do not result in automated decision-making or profiling.