1 Data Controller

Thank you for your interest in Nexus Lean, 55 Princes Gate, Exhibition Road, London, SW7 2PN, e-mail: info@nexuslean.com, registered at Companies House, Cardiff on 12th July 2022 under 14228332 (“NEXUS LEAN LTD”). In the following, we would like to inform you about the collection, processing and use of personal data (collectively “data use”) in the context of the use of our website and our services.

2 Processing of your personal data when visiting our website

2.1 General information
Nexus Lean value your privacy. When you use our services to maintain or update your web presence, rebrand your business or host your business services, we want you to be certain of a fast, safe and simple transaction, with your privacy guaranteed.

Nexus Lean takes various global privacy laws into account, including amongst others, the European General Data Protection Regulation (GDPR), the UK Data Protection Act, as well the California Consumer Privacy Act (CCPA). These laws provide you as a customer with rights related to your personal information. Consistent with those laws, Recharge.com gives you choices about how your personal information is handled by us.

Insofar as service providers process personal data on our behalf, we have concluded a contract processing agreement with these service providers and agreed on appropriate guarantees to ensure the protection of personal data. We carefully select our service providers. In addition, these service providers process personal data exclusively for the performance of their tasks and are contractually bound to our instructions, have appropriate technical and organisational measures in place to protect personal data and are regularly monitored by us. Where relevant, appropriate EU standard contractual clauses have been concluded for the transfer of personal data to processors in third countries (as an appropriate guarantee for data processing in non-European countries). You can view the EU standard contractual clauses used via the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.

2.2 Log files for informational use of our website

When you visit our website, we process access data that is stored in so-called log files. The following personal data is processed automatically in the log files:

• IP address of the requesting device
• Type of web browser used
• Language of the web browser used
• Version of the web browser used
• Operating system and its version
• Date and time of the visit
• Time zone difference from Greenwich Mean Time (GMT)
• Access status/ http status code
• Amount of data transferred
• Web page visited
• Referrer
• Web pages that are called up by the visitor’s system via our website
• Internet service provider of the user

The processing of this data is carried out in accordance with Article 6 (1) (f) GDPR due to our legitimate interest in being able to properly display the website to you as well as to defend against attacks and for the purpose of the security of our systems. The log files are deleted or anonymised immediately after they are no longer required to achieve the aforementioned purposes, but at the latest after 14 days.

For hosting the database and web content, we use SiteGround. The data is stored exclusively in a data center (Dependant on your server location), which is certified according to ISO 27001, 27017 and 2018 as well as PCI DSS Level 1 and accordingly meets the highest security standards. In addition, we have agreed on corresponding EU standard contractual clauses with SiteGround, Inc. You can view the EU standard contractual clauses used via the following link:https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087. In conjunction with additional technical and organizational measures to ensure an adequate level of protection, it is guaranteed that the EU data protection requirements can also be met when processing data in the United States.

2.4 Performance Monitoring

We use Cookies & Cache’s to collect information about the performance of our website and any technical malfunctions that may occur. For this purpose, NexusLean sets up a cookie for the browser session and collects geolocation, device, and operating system data of the user of the website. We process the above data to ensure the security of our platform for the provision of our services and to minimise a possible risk of damage (in accordance with §25 (2) Telecommunications and Telemedia Data Protection Act (TTDSG)). Your data will be deleted after 15 minutes. Appropriate EU standard contractual clauses have been concluded as an adequate guarantee for data processing in non-European countries. You can view the EU standard contractual clauses used via the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.

3 Customer service and support

You can contact us via our contact form as well as by e-mail and send us a request. In this context, we process the information and data you provide (including personal data such as first name, last name, email address and telephone number) and, if applicable, the time and duration of your call in a ticket in order to contact you and process your request (Art. 6 (1) (b) GDPR).

We delete your data as soon as we have answered your inquiry to your satisfaction, provided that no other retention periods are opposed.

4 Marketing activities and communication

4.1 Marketing e-mails

If you would like to be informed about our services and offers in the future, we need your e-mail address. We will only send you marketing e-mails if you expressly consent to receiving marketing e-mails when opening an account or on our website (pursuant to Art. 6 (1) (a) GDPR) or to send you, as our customer, emails containing direct advertising for our own similar goods or services and security-related information on the basis of our legitimate interest (Art. 6 (1) (f) GDPR).

We will check whether you are the owner of the specified e-mail address or whether its owner agrees to receive the marketing e-mails (so-called double opt-in procedure). We document the log data collected in connection with the double opt-in procedure, such as your IP address, date and time of access, in order to track your qualified consent. To ensure that you receive personalized information that is relevant to you and matches your personal interests, we review and analyze your user behavior (e.g. recent transactions, participation in events and webinars) and use this information for some marketing emails.

Your data will only be used for sending the marketing emails and will not be passed on to third parties. As part of our marketing emails, we use the remarketing functions of the Salesforce Marketing Cloud. For this purpose, we use our service provider Salesforce as a processor. In addition, we have agreed to corresponding EU standard contractual clauses with Salesforce.com, Inc. based in the USA. You can view the EU standard contractual clauses used via the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087. If you consent to receive our marketing emails, cookies are used to enable us to track the interest of our customers or recipients in the marketing email. For this purpose, so-called pixels are placed in the marketing email. Pixels are small image files that are integrated into the marketing e-mail and thus allow a recording as well as an analysis of the access data (“log files”). In this way, we receive information, for example, about what proportion of the sent newsletters could actually be delivered or what proportion of recipients of the newsletter clicked on a certain link.

You may object to the processing or revoke your consent at any time free of charge with effect for the future vis-à-vis Nexus Lean. The revocation can be made via a link in the marketing emails themselves or by sending a message to the contact options listed in section 11 Your contact persons. As soon as you unsubscribe from the marketing emails, your personal data provided for the marketing emails will be deleted, unless the data is needed for other purposes (e.g. to fulfil our contractual obligations) other retention periods (e.g. tax retention periods) apply. For more information on how to exercise your rights, please see the section under point 10 Your rights.

4.2 Press Newsletter

To receive current press releases by e-mail, you can be added to our distribution list. To do so, please send us your e-mail address and your first and last name by e-mail to info@nexuslean.com We process your data exclusively to inform you about the current developments of our company and to send press releases. We cooperate with LEWIS Communications Srl, Dante 4, 20121 Milan, Italia, as a consulting firm for strategic communication for the management of press releases. You can object to the processing at any time by sending an e-mail to info@nexuslean.com or by using the contact details provided in section 13 Your contacts and revoke your consent.

4.3 Promotions

If you become a customer of ours as part of a promotion or raffle (the respective conditions of participation apply), we process your personal data such as first and last name, e-mail address, and user ID, to determine the prize pursuant to Art. 6 (1) (b) GDPR. Depending on the respective promotion or sweepstakes, we additionally process the data listed in the corresponding conditions of participation.
We delete personal data as soon as the promotion or the competition has ended and the data is no longer required for the fulfilment of the aforementioned purposes and unless there is another legal basis (e.g. commercial and tax retention periods).

5 Use of cookies, tracking tools and third-party services on our websites

5.1 Cookies

We use cookies on our website. Cookies are small files that are sent by us to the browser of your terminal device during your visit to our website and stored there. Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. Cookies are, for example, able to recognise the browser you are using when you visit our website again and to transmit various information to us. With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. For more information about our cookies, please refer to the Cookie Policy.

5.2 Google services

On our website we use the services of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Further information on the handling of user data can be found in Google’s privacy policy. The data processing is based on your consent (Art. 6 (1) (a) GDPR).

5.2.1 Google Analytics

To analyze the use of our website, we use the service “Google Analytics” from Google. For this purpose, cookies are set so that we receive information about the use of our website by users. Google processes the transmitted information on our behalf to evaluate the use and interaction of the user with our website, to compile reports on the activities on our website and to provide us with other services related to the use. We use this data to perform user-oriented improvements to the design of our online services. Your data (e.g. IP address, access to our website) is usually transferred to a Google server in the USA and processed there. To protect your privacy, we use the so-called IP anonymization function, which shortens your IP address transmitted to us before transmission to the USA and makes it partially unrecognizable. In exceptional cases, it may happen that your complete IP address is transmitted to a Google server in the USA and only shortened there. We process and transmit your data if you have given us your consent to do so. You can revoke your consent at any time via the settings in the cookie management tool.

For more information on the terms of use and data protection at Google Analytics, please visit http://www.google.com/analytics/terms/en.html or https://policies.google.com/

5.2.2 Google Ads

In order to check the effectiveness of our advertisements placed via Google Ads, we use the so-called conversion tracking on our website. When you click on an ad placed by Google, a cookie for conversion tracking is set on your device. These cookies lose their validity after 30 days and do not allow any conclusions to be drawn about an individual user. As long as the cookie is valid, we can track whether a user has clicked on an ad placed via Google Ads to reach our website. With the help of the conversion cookies, we can draw conclusions about the effectiveness of our advertising measures. This data is processed exclusively on the basis of your consent (pursuant to Art. 6 (1) (a) GDPR), which you have given us in the course of your visit to our website.

You can revoke your consent at any time if you do not wish to participate in the tracking. To do this, you can deactivate the Google conversion tracking cookie via our cookie management tool. After deactivating the cookie, you will not be included in the conversion tracking statistics. Further information on Google Ads and Google conversion tracking can be found in Google’s privacy policy:https://policies.google.com/privacy?hl=en.

5.2.3 Google Analytics Remarketing

We use the technology “Google Remarketing” to display ads for users who have already visited our websites and online services and are interested in a certain offer. Within the Google advertising network, this allows targeted and interest-based advertisements to be displayed on our site. Google remarketing uses cookies for this analysis. This enables our visitors to be recognised as soon as they call up websites within the Google advertising network. Within the Google advertising network, targeted and interest-based advertisements can thus be displayed, which are based on the websites of the Google advertising network (which also use the Google remarketing function) previously visited by the visitor.
If you do not wish to receive targeted, interest-based advertising, you may opt-out of Google’s use of cookies for these purposes by clicking on the link:
Disable https://www.google.com/settings/ads.

5.2.4 Google Tag Manager

On the website as well as in the app, we use “Google Tag Manager” from Google. This tool does not process personal data, but ensures the triggering of scripts that are required by other services to collect data. It is not possible for the Google Tag Manager to access this data.

5.2.5 Google Optimize

In addition, we use Google Optimize on our website. Google Optimize analyzes the use of different variants of our website and helps us improve the user experience according to the behavior of our users on the website. Google Optimize is a tool integrated into Google Analytics.

5.3 Facebook

In order to display the Facebook ads placed by us to users on Facebook and within the services of partners cooperating with Facebook (so-called “Audience Network”, see: https://www.facebook.com/audiencenetwork/) who have already visited our online offer or who have certain characteristics (e.g. interest in certain topics or products that are evident from the websites visited), we use the “Facebook Pixel” service. By means of Facebook Pixel, it is possible for Facebook to determine the visitors of Nexus Lean’s online offer as a target group for the display of dedicated advertising content (so-called “Facebook Ads”). Furthermore, it is possible for us to track the effectiveness of our Facebook ads for statistical and market research purposes. For this purpose, we analyze whether users were redirected to our online offers after clicking on a Facebook ad (so-called “conversion measurement”). We collect and transmit your personal data only if you have given us your consent under data protection law (pursuant to Art. 6 (1) (a) GDPR).

The collection and transmission of so-called “event data” (but not the further processing of the data) is carried out under joint responsibility with Meta Platforms Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). For this purpose, a special agreement (“Addendum for Responsible Parties”, see: https://www.facebook.com/legal/controller_addendum) has been concluded with Meta, in which, among other things, the security measures to be fulfilled (https://www.facebook.com/legal/terms/data_security_terms) and the responsibility in the assumption of the fulfilment of the data subject rights (i.e. users can, for example, direct information or deletion requests directly to Meta) are regulated.

Shared responsibility is for the following purposes:

• Display of content advertising information that corresponds to the presumed interests of users;
• Delivery of commercial and transactional messages (e.g., targeting users via Facebook Messenger);
• Improve ad delivery and personalization of features and content (e.g., improve the identification of which content or advertising information is likely to be of interest to users).
  If Meta provides Nexus Lean with measurements, analyses and reports in aggregated form and without information on individual users, then this processing is carried out on the basis of our order processing agreement with Meta. Further information on agreed data processing can be found at https://www.facebook.com/legal/terms/dataprocessing) and https://www.facebook.com/legal/terms/data_security_terms). Appropriate EU standard contractual clauses have been concluded in order to adequately protect your personal data. You can view the EU standard contractual clauses used via the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.

5.4 LinkedIn Insight Tag

On our website, we use “LinkedIn Conversion Tracking” as part of the “LinkedIn Insight Tag” from LinkedIn (LinkedIn Inc.). Via “LinkedIn Conversion Tracking” we receive aggregated and anonymised evaluations of our advertising campaigns on LinkedIn and additionally aggregated and anonymised information on how users interact with our website. We use “LinkedIn Conversion Tracking” to be able to track the efficiency of our advertising campaigns and to present interest-based advertising on LinkedIn to visitors to our website. Using the “LinkedIn Insight Tag”, data is collected from users’ visits to our website, including URL, referrer, IP address, device and browser characteristics, timestamp and page views. This data is encrypted, anonymized within seven days, and deleted within 90 days. We process their data to evaluate campaigns and collect information about website visitors who may have reached us through our campaigns on LinkedIn. We collect your data on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.

LinkedIn does not forward the personal data to the website operator, but only provides aggregated evaluations of the target group and the advertising performance of the website. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. This enables us to display personalized ads based on our website with the help of this data without identifying the user.

You can object to the collection of the data generated by the cookie and its processing by LinkedIn. To do so, follow the instructions in this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. You can find more information in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

5.5 Bing Ads

On our website, we use technologies from Bing Ads (bingads.microsoft.com), which are provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”). If you have accessed our website via a Microsoft Bing ad, a cookie (known as a “conversion cookie”) is set by Microsoft on your (mobile) device. With the help of the cookie, it can be tracked that a Microsoft Bing ad was clicked, which redirected the user to our website after a certain target page (“conversion site”) was previously called. In this process, we obtain the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. The storage of “conversion cookies” is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO. Please note that Microsoft may track your usage behavior across several of your electronic devices through so-called cross-device tracking and is thus able to display personalized advertising on or in Microsoft websites and apps. For more information about Microsoft’s and Bing’s privacy practices, please see Microsoft’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

5.7 reCAPTCHA (Bot/Spam protection)

We have integrated the “Google reCAPTCHA” service, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website to help protect it from automated programs and scripts (so-called “bots”).

This service works by using program code from Google reCAPTCHA to present a challenge to the visitor’s device. Depending on the response, the request (e.g., in the context of a contact form or newsletter sign-up) is either processed or rejected. Google reCAPTCHA collects data to distinguish between human users and bots and to help protect our website from spam and abuse. This includes information such as the visitor’s IP address, the browser used, and actions on the page.

Google reCAPTCHA may set cookies in the visitor’s browser to analyze the user’s behavior and to complete the challenge. The data collected is processed in accordance with Google’s privacy policy, and the information is used exclusively for the purpose of preventing spam and bot activities. Google may store this data in the USA, and it is subject to Google’s privacy practices.

The data processing is carried out in accordance with Art. 6 (1) (f) GDPR, based on our legitimate interest in protecting our website from fraudulent access, spam, and malicious activities. If personal data is stored, it will be handled in accordance with Google’s data retention policies.

For more information about data protection when using Google reCAPTCHA, please refer to Google’s privacy policy at https://policies.google.com/privacy.

6 Social Media

We do not use social media plugins on our website. If our website contains icons from social media providers (e.g. Facebook, Twitter, LinkedIn, Instagram, YouTube), we only use these for passive linking to the pages of the respective providers. For further information, please refer to our privacy policy.

10 Your rights

Right to access: You have the possibility to request information about the data stored about you, its origin, recipients or categories of recipients to whom the data is disclosed, as well as the purpose of the storage. (Art. 15 GDPR)

Right to rectification: You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you are inaccurate or incomplete. (Art. 16 GDPR)

Right to deletion: You can demand that we delete the personal data relating to you without delay. However, there is no right to deletion if legal, supervisory or other sovereign storage obligations are opposed or the storage serves the assertion, exercise or defense of legal claims. (Art. 17 GDPR)

Right to restriction of processing: You may, under certain conditions (disputed accuracy, unlawful processing, cessation of the purpose of processing or lodging an objection), request the restriction of the processing of personal data concerning you. (Art. 18 GDPR)

Right to data transfer: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. (Art. 20 GDPR)

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is processed on the basis of Article 6(1)(e) or (f) EU GDPR. We will then no longer process your data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is for the establishment, exercise or defence of legal claims. (Art. 21 GDPR)

Right to complain to the supervisory authority: Pursuant to Art. 77 GDPR, you have the right to complain to a supervisory authority if you are of the opinion that the processing of personal data is not carried out lawfully. The address of the supervisory authority responsible for our company is: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, +44 303 123 1113.

11 Your contact persons

Contact person for the exercise of your rights
For the exercise of your rights and further information, please contact the data protection officer of Nexus Lean, by e-mail to info@nexuslean.com or by letter.

Data Protection Officer
Our data protection officer is available to you as a contact for data protection-related concerns:

Data Protection Officer of Nexus Lean, 55 Princes Gate, Exhibition Road, London, SW7 2PN
info@nexuslean.com

Accurate as of October 2024