Privacy Policy

Introduction

nexoravia.top Ltd ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website nexoravia.top or use our services.

As a company registered in Cyprus (Registration Number: HE965874), we comply with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.

Data Controller Information

The data controller responsible for your personal information is:

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you visit our website. The types of data we collect include:

Information You Provide Directly

• Contact information (name, email address, phone number, company name)
• Communication preferences and enquiry details
• Information submitted through contact forms or email communications
• Business requirements and project specifications

Information Automatically Collected

• IP address and location information
• Browser type and version
• Device information and operating system
• Website usage data and navigation patterns
• Referral sources and search terms
• Cookie data and tracking identifiers

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests and legal obligations:

• Service Delivery: To provide corporate workflow digitisation services and respond to your enquiries
• Communication: To communicate with you about our services, projects, and business matters
• Business Operations: To manage client relationships and deliver contracted services
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Website Improvement: To analyse website performance and improve user experience
• Marketing: To send relevant business communications (with your consent where required)
• Security: To protect our website and services from fraud and security threats

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please see our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Legitimate Interests: For business operations, client communication, and service improvement
• Contract Performance: To fulfil our contractual obligations when providing services
• Consent: For marketing communications and non-essential cookies (where applicable)
• Legal Compliance: To comply with legal and regulatory requirements

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in our business operations
• Legal Requirements: When required by law or to protect our legal rights
• Business Transfers: In connection with mergers, acquisitions, or business asset transfers
• Consent: When you have given explicit consent for specific sharing purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. Our retention periods are based on:

• Client Data: Retained for the duration of the business relationship plus 7 years for legal and tax compliance
• Marketing Data: Retained until you withdraw consent or for a maximum of 3 years
• Website Analytics: Retained for 26 months (Google Analytics default)
• Contact Enquiries: Retained for 2 years unless a business relationship is established

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request access to your personal data and information about how we process it
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing based on consent

To exercise your rights, please contact us at [email protected] or +357 25244960. We will respond to your request within 30 days.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security
• Secure hosting and backup procedures

International Data Transfers

As we operate within the EU, your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Appropriate technical and organisational measures

Contact Information

If you have any questions about this Privacy Policy or wish to contact us regarding your personal data, please reach out to us:

Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.