Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
NEXA GmbH
Apfelgasse 6, 1040 Vienna
E-mail: office@nexa.co.at

2. Collection and Storage of Personal Data

When you visit our website, information is automatically transmitted to the server (server log files). This data cannot be attributed to specific individuals and is not merged with other data sources.

3. Contact Form & Enquiries

If you contact us via the contact form or enquiry forms (data sheet, consultation), the data you provide (name, company, position, e-mail, phone, country, area of interest, message) is stored for the purpose of processing your enquiry. We use the following processors under Art. 28 GDPR: Twenty (Twenty PBC, France) to store your enquiry in our CRM, and Resend (Resend, Inc., EU region) to deliver the notification e-mail to us and a confirmation e-mail to you. No further transfer to third parties takes place.

4. Your Rights

You have the right to access, rectify, erase and restrict the processing of your personal data. Please contact the address above.

5. Web Analytics with PostHog

This website uses PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) for product and web analytics. We use PostHog Cloud EU exclusively, with data processing taking place in Frankfurt am Main, Germany; no transfer to the United States occurs as part of this analytics. The connection to PostHog is routed through a first-party reverse proxy at /ingest on our own domain.

The data collected includes: a truncated IP address, device and browser information (user agent), pages viewed, clicks on interactive elements (autocapture), page language, and non-personal events on the FODIS configurator and the contact form (e.g. selected size, cover material, load class). In addition, technical error events (JavaScript exceptions) and session replays are captured; form inputs are masked by default in session replays.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing and improving our website). Where consent is required for a specific processing activity, we obtain it separately (Art. 6(1)(a) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with PostHog Inc. The data is retained for a maximum of seven years.

You can object to data collection by PostHog at any time by contacting us at office@nexa.co.at, or by deleting/blocking cookies in your browser. PostHog's privacy policy: https://posthog.com/privacy.

6. Cookies

This website uses technically necessary cookies to ensure functionality, plus one analytics cookie from PostHog (ph_*_posthog) that stores a pseudonymous visitor ID. Details can be found in our Cookie Policy.

7. Legal Basis

Personal data is processed on the basis of the GDPR (Art. 6(1)(a), (b), (f)) and the Austrian Data Protection Act (DSG).