Privacy & cookie information

This notice explains how NeXastron handles personal data when you visit our website or contact us.

Data controller

The website operator listed in our legal notice is responsible for processing your personal data. You can contact us using the details below.

Patrick Ntakirutimana
Am Lindenhofe 38 30519 Hannover Germany
info@nexastron.com

Hosting

Our hosting provider provides our website hosting on a VPS in Frankfurt, Germany, and our business email service. Hosting infrastructure processes technical connection data, including IP address, request time, requested pages and browser information, to deliver and protect this website. Technical logs are kept only as needed for operation, security and investigating faults. This is based on our legitimate interest in a reliable, secure website under Article 6(1)(f) GDPR. Hosting and email processing is separate from optional website analytics.

Project enquiries

When you send an enquiry, we store your name, email address, country, city, company if supplied and project details in our contact and support system. Country and city help us assess service availability and plan local or remote support. Authorised staff use the details to respond and manage the conversation. Processing for a potential contract is based on Article 6(1)(b) GDPR; other business correspondence is based on our legitimate interest under Article 6(1)(f). Please do not include sensitive personal data. Providing this information is voluntary. The required fields are needed to handle an enquiry through this form; you can also contact us by email or telephone. We do not use enquiries for automated decisions with legal or similarly significant effects.

Customer portal, agreements and support

If NeXastron invites you to the customer portal, we store your account email, a password hash, account status, last sign-in time and security-related account actions. Activation and password-reset links expire and can be used once. Your account is linked to your contact record, shared contracts, issued invoices and visible support conversations, including files you choose to upload. Authorised staff manage these records to provide agreed services, handle requests and maintain business records. We process information needed to provide a contract under Article 6(1)(b) GDPR, meet applicable record-keeping duties under Article 6(1)(c), and protect accounts under Article 6(1)(f). Records are retained for the business relationship and applicable legal retention periods. Revoking portal access blocks sign-in; it does not erase business documents that must be retained. The portal does not use optional website analytics.

Service providers and retention

Hosting and email providers process data on our behalf where necessary to operate the website and handle correspondence. We retain enquiries for as long as needed to respond and manage the business relationship, subject to applicable legal retention obligations. Any processing outside the EEA must use an applicable lawful transfer mechanism.

Cookies and your choice

Necessary cookies support form security, sessions and privacy preferences. Optional analytics starts only after your affirmative consent. Accepting and rejecting are equally available; neither choice affects access to the website or enquiry form. You can withdraw at any time using Cookie settings. Consent is the basis for optional analytics under Article 6(1)(a) GDPR and Section 25(1) TDDDG; strictly necessary storage is covered by Section 25(2) TDDDG. Fonts, scripts and images are served locally. No advertising trackers or embedded social media are used.

Minimal website analytics

If you consent, our server briefly processes your IP address to look up an approximate country and city using a locally stored DB-IP database. Browser information is reduced to a broad device category. We store daily page-view totals for country, city and device in separate groups for 90 days, without IP addresses, full user agents, precise coordinates, user IDs, page URLs, queries or referrers. Statistics are not joined to enquiries or staff accounts. They measure page views, not unique people. City estimates may be inaccurate; cities with fewer than five views in a reporting period are grouped in the dashboard. We honour Do Not Track and Global Privacy Control signals. No visitor data is transmitted to the location-data provider.

Withdrawing analytics consent

Use Cookie settings on any page and select Reject optional, or turn optional analytics off and save. Withdrawal stops future analytics and does not affect the lawfulness of earlier consent-based processing. Existing aggregate counts cannot be linked back to you for individual removal and expire after 90 days. The website and contact form remain available without consent. Hosting security logs and information you deliberately submit through the contact form are separate from optional analytics.

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You can also complain to a data protection supervisory authority, including the State Commissioner for Data Protection of Lower Saxony. Contact us to exercise your rights.

Contact the Lower Saxony data protection authority

Cookies used on this website

No additional analytics cookies, local storage or tracking identifiers are created.

If you use the staff workspace or customer portal, choosing an appearance saves only light, dark or system in this browser’s local storage. This preference is used for display, is not sent to our server and is not used for analytics. You can change it in the appearance selector or remove it by clearing site data.

Cookie settings

Project brief

If you choose to download a project brief, your entries are used to generate a text file. This action does not send an email or create a project record. Validation feedback may be retained temporarily in your session.