GDPR & Data Management

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that came into effect on May 25, 2018, across the European Union.

GDPR gives individuals greater control over their personal data and requires organizations to be transparent about how they collect, use, and protect personal information.

As a company serving EU users, NexusWave is fully compliant with GDPR requirements.

Legal Basis: We process your data based on contract performance, legitimate interests, and your consent where required.

Purpose Limitation: We only use your data for the specific purposes disclosed in our Privacy Policy.

Data Minimization: We collect only the data necessary to provide our services.

Retention: We keep your data only as long as necessary for the stated purposes.

Access Requests: We will provide your data within 30 days of verification.

Correction Requests: Data corrections are processed within 30 days.

Deletion Requests: Account deletion is completed within 30 days, with some data retained for legal compliance.

Data Export: Portable data files are generated within 30 days of request.

Encryption: All personal data is encrypted in transit and at rest using industry-standard methods.

Access Controls: Strict access controls ensure only authorized personnel can access personal data.

Regular Audits: We conduct regular security audits and vulnerability assessments.

Staff Training: All employees receive regular data protection and privacy training.

When we transfer your data outside the EU, we ensure adequate protection through:

Adequacy Decisions: Transfers to countries with EU-approved data protection standards.

Standard Contractual Clauses: Legal agreements ensuring GDPR-level protection.

Binding Corporate Rules: Internal policies ensuring consistent data protection standards.

Our Data Protection Officer (DPO) is available to help with any data protection questions or concerns:

Email: [email protected]
Address: Data Protection Officer, NexusWave GmbH, Potsdamer Platz 1, 10785 Berlin, Germany

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.