Privacybeleid
By ticking the respective field at nexix.eu you agree with this Confidentiality Policy.
By agreeing with this Confidentiality Policy, you confirm that the data provided by the customer is true and accurate. The information has been provided by the customer voluntarily and the customer has all the legal rights and authorizations envisaged by the legislation for such provision.
Definition of terms:
The Company – Nexix
Address: Spaces Werksviertel, Munich, 81671
Email:info@nexix.eu
The Website/Webpage, with the domain – nexix.eu
The Customer – denotes any person visiting the shop with thepurpose or retail purchase, or visits the Webpage for information or services;
The Data Subject–any individual, whose data has been processed;
The Personal Data–any information related to the identified or identifiable individual. The individual is identifiable if he can be directly or indirectly identified, including through the first name, surname, ID number, geolocation data, electronic communication identification data, and physical, physiological, psychological, mental, genetic, economic, cultural, or social features.
1. Personal Data Protection Policy
Nexix ensures protection of the Personal Data in compliance with the requirements under Article 6 of the GDPR.
2. Scope of the Data Protection Policy
2.1 This Policy fully covers any kind of automatic, semi-automatic or non-automatic processing of the Personal Data by Nexix and shall be applied in the process of Personal Data Protection.
2.2 This Policy covers any person whose data is being processed by the Company and relates to any person receiving and/or processing the Personal Data on behalf or for the purposes of the Company.
2.3 In case you register at the Company Website (nexix.eu) or enter into a contract with the Company through the Website, in order to conclude, implement or terminate the contract, Nexix will process data listed below.
In case of registration at the Website:
a. First and last names
b. Delivery address
c. Email
e. Password
In case of order placement:
a. First and last names
b. Country
c. City
d. Region
e. Address
f. Entrance/floor, apartment number, etc.
g. Email
h. Phone number
i. During the order placement, the Customer enters banking details into the special website of the payment service provider, and these data (card owner name, 16-digit card number, security code, card expiry date) are not processed by the Company.
3. Grounds for Personal Data Processing
3.1 The Company shall process the Personal Data only if:
3.1.1. it receives the consent of the Data Subject;
3.1.2. the law allows processing such data;
3.1.3. the data are publicly accessible.
3.1.4. the data were made publicly accessible by the Data Subject himself;
3.1.5. the data processing is necessary to provide the services requested by the Data Subject.
Article 4. Data Processing Principles
4. 1 The following principles shall be observed in data processing:
a) the data shall be processed legally, fairly, and in a manner that is transparent and non-derogatory for the Data Subject.
b) the data shall be collected exclusively for specific, clearly identified, and legitimate purposes. It is unacceptable to further process the data for any other reasons not related to the initial purposes;
c) only the data necessary for achievement of the respective legitimate purpose shall be processed. The data volume and nature shall be proportionate with the purpose, for which they are processed;
d) the data shall be true, accurate, and, in case necessary, updatable. Taking into account the purpose of data processing, the inaccurate data shall be corrected, deleted or destroyed without any undue delay;
e) the data shall be stored only for the period that is necessary to achieve the respective legitimate purpose of their processing. After the purpose of data processing is achieved, the data shall be deleted, destroyed or stored in the depersonalized form, save the cases where data processing is determined by the law and/or respective bylaw or regulation, and storing the data represents necessary and proportional measure for protecting higher interests in the democratic society;
f) in order to protect the data, all technical and organizational measures are taken for such protection during the processing, including protection from unauthorized or illegal processing, loss, damage or destroying of the data.
5. Personal Data Processing; Purposes of Personal Data Processing:
The main purposes of Personal Data processing by the Company are as follows:
5.1 Accepting, processing, delivering via courier services and/or returning, refunding (including partial cash-backs) of, and ensuring efficient compliance with the purchase agreement terms and conditions, delivering respective correspondence/notifications for the orders placed by the Customers at nexix.eu platform; as well as ensuring the monitoring of warranty service quality provided by the Company, identifying the services and products that might be interesting for the Customer, developing and offering the new services and products for the Customers;
5.2 In case of video monitoring, our goal is avoiding or detecting any illegal activity; ensuring public security; protecting safety and property;
6. Personal Data Categories
6.1 The Company mainly processes the following data types: identification data – name and surname, personal number; contact data – phone number, email, address; technical data – IP address, from which the Customer accesses or goes through authorization process on the Website; information on the devices and technologies used to access the Website. The Company also processes information on the orders placed.
6.2 The Personal Data processing implies collecting, recording, photographing, video recording, organizing, storing, altering, and restoring the Personal Data through automatic, semi-automatic or non-automatic means.
6.3 The Data Subject shall express consent through reading and agreeing (ticking the respective box) to the Personal Data Protection Policy published on the Website in electronic format.
6.4 The Company does not process the special category of personal data.
6.5 The Company does not process banking details indicated by the Customer during the transaction.
7. Term of Personal Data Storage
7.1 The Company stores the Personal Data for the duration of the agreement; the 3-year storage period, as defined by the agreement requirements.
7.2 The Personal Data entered during the registration at the Website is stored on the Webpage until such registration expires.
8. Sources of Personal Data
- Data entered during the registration at the Website;
- Data entered during the placement order at the Company’s Website;
- Data provided while visiting the shop;
- Data provided while applying for our products or services;
- Data provided while receiving service from the Company;
- Data provided while using our Website/platform, online chat;
- Data provided while sending communications/documents/notifications via regular mail, email or social networks;
- Data provided while submitting complaint;
9. Data Processing for the Needs of Direct Marketing
9.1 Your consent to the Personal Data processing for the purposes of direct marketing implies that you will receive from our Company advertising offers/notifications permitted by the law, which will allow you to follow our news and actions.
9.2 You can consent to or refuse receiving direct marketing advertising offers or notifications at our Website or by email (info@nexix.eu), as well as through our pages at social networks (Facebook, Instagram).
9.3 At any time, you can revoke your consent to processing your Personal Data for the purposes of direct marketing through our pages
10. Cookies Policy
In order to improve our Website performance and e-services, we are using cookies, which serve for simplification of the Website functioning. Cookies are the files stored on your computing device, which allow our Website to record certain types of information and use it every time you load/visit it. The Company uses only cookies necessary for ensuring proper performance and safe usage of and navigation through the Website;
11. Transfer of Personal Data to Third Parties
11.1 The Company commits to keeping the Personal Data provided by the Customer confidential and not transferring it to any third party: a) the data processing is necessary in order to fulfill the commitments under the agreement with the Data Subject or to perform the transactions pursuant to the request of the Data Subject; b) Data processing is necessary to protect the material legal interests of the person processing such data or any third person, save the cases where there are superior interests for protection of the Data Subject’s (including minor persons) rights”.
11.2 The banking details used in order placement process (16-digit card number, first and last names of the card holder, card expiry date, card issuer, card security code and other banking data) are entered to the bank/payment service provider website and the Company does not process such information.
12. Customer Rights
12.1 The Customer is entitled to:
a) request any information on processing of his Personal Data, including: what kind of information is being processed; the purpose of such processing; legal basis of such processing; how the information was collected; to which third parties this information has been disclosed, for what purposes and on what grounds (it is not mandatory to share this final piece of information, if the data concerned is publicly available in accordance with the legislation).
b) require correcting, updating, revising, adding, blocking, deleting or destroying the data. The Customer is entitled to request correcting, updating, revising, adding, blocking, deleting or destroying his data if they are not full, correct, updated or if they were obtained and processed in violation of the legal requirements; revoking the consent – at any time, the Customer is entitled to revoke previously issued consent without any explanation and to demand immediate stopping processing and/or destroying processed data (if there are no other grounds for data processing);
12.2. receive the copy of his data processed by the Company at no cost.
12.3.The Company’s possibilities of immediately deleting data might be limited.
13. Incident Management
13.1 Incident means breach of data safety that causes intentional or unintentional damage or loss of data, as well as any cases that result in unauthorized data disclosure, alteration, destroying, collection or other unpermitted types of data processing.
13.2 In case of any such occurrence, the Company shall document such incident, its consequences and measures taken within 72 hours of discovery of the incident, and shall report in written or electronically to the Personal Data Protection Service, save the cases, when it is unlikely that such incident can cause material damage and/or result in material infringement of basic human rights and freedoms.
14. Data Security
14.1 The Company takes all the organizational and technical measures necessary to ensure that the data is not unintentionally or illegally destroyed, altered, disclosed, collected or unintentionally or illegally used or lost in any other manner.
14.2 The Company strictly protects confidentiality of the Personal Data. Access to any such data is granted only to personnel who need to process them in order to perform their legitimate duties.
Feel free to contact us