Privacy policy

1Who is responsible

The controller of your personal data is:

Company

NEXIMOS s.r.o.

Address

Rudohorská 33, 974 01 Banská Bystrica, Slovakia

Company ID (IČO)

51863057

VAT ID

SK2120814212

Email

info@neximos.com

We have not appointed a data protection officer. For any question about your data, write to info@neximos.com.

2What data we collect

Quote requests

When you request a quote, we collect your name, email address, country, company name (optional), the description of your parts and the files you upload (drawings, CAD models, documents). We also store a reference number, the language you used and when you sent the request.

Contact form

When you use the contact form, we receive your name, email address, your message and, if you give them, your phone number and a subject. The form sends them to our inbox as an email; the website itself does not store them.

Emails

When you email us, we receive your email address, the content of your message and any attachments.

Website visits

Our hosting provider processes technical data needed to deliver the website, such as your IP address, the time of the request, the page requested and your browser, in short-lived server logs.

Analytics and advertising

Only if you accept cookies: Google Analytics records how you use the website (pages viewed, time on site, approximate location, device and browser, how you found us, and whether you sent a quote request or message), and Google Ads records whether you came from one of our ads. IP addresses are not stored by Google Analytics.

3Why we use it, and on what legal basis

Preparing your quote

Reviewing your files, preparing a quotation and discussing it with you. Steps at your request before a contract (Art. 6(1)(b) GDPR).

Confirmations and notifications

Sending you a confirmation of your request and notifying our team. Art. 6(1)(b) GDPR.

Fulfilling orders

Manufacturing and delivering your parts once you place an order. Performance of a contract (Art. 6(1)(b) GDPR).

Answering enquiries

Replying to emails and messages. Our legitimate interest in responding to people who contact us (Art. 6(1)(f) GDPR).

Running a secure website

Delivering the website, preventing abuse and spam. Legitimate interest (Art. 6(1)(f) GDPR).

Measuring visits and advertising

Understanding how the website is used and how well our ads work. Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time under Cookie settings in the footer.

Legal obligations

Keeping accounting and tax records once an order is placed. Legal obligation (Art. 6(1)(c) GDPR).

Giving us your data is voluntary, but without the required fields we cannot prepare a quote.

4Your drawings and files

Drawings and CAD models are often confidential. Uploaded files are kept in a private storage area that is not publicly accessible. We use them only to prepare your quote and, if you order, to manufacture your parts.

We share files with selected production partners in Slovakia and the EU only to the extent needed for your order, under confidentiality obligations, and without your contact details unless they are needed. We do not claim any rights to your designs.

5Who receives your data

We do not sell personal data. We use these service providers, who process data on our behalf under data processing agreements:

Supabase Inc.

Database and file storage for quote requests. Data is stored in the EU (Frankfurt, Germany).

Resend Inc.

Sending the emails for quote requests and contact form messages.

Vercel Inc.

Hosts the website. Pages are served from a global network; forms are processed in the EU (Frankfurt, Germany).

Google Ireland Ltd.

Google Analytics and Google Ads, only if you accept cookies.

Google Ireland Ltd. (Google Maps)

The map on our contact page is loaded from Google servers, which receive your IP address when the map loads and may set their own cookies.

Other recipients are our production partners (see above), our accountants and, where the law requires it, public authorities.

6Transfers outside the EU

Supabase, Resend and Vercel are companies based in the United States, and Google Ireland Ltd. is part of Google LLC, also based there. Quote data is stored in the EU, but these providers may access or process data outside the EU, for example for support or, with Google, for analytics. Such transfers rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on the Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

7How long we keep your data

• Quote requests and uploaded files: 3 years after the request, then deleted, unless an order follows. In that case they are kept with the order records.
• Uploads that were never sent as a request, and files removed before sending: deleted automatically after 30 days at the latest.
• Order, invoicing and accounting records: 10 years, as required by the Slovak Act No. 431/2002 Coll. on accounting.
• Emails: as long as needed to handle your enquiry, and no longer than 3 years unless they belong to an order.
• Server logs: kept by the hosting provider for a short period, typically a few days.
• Google Analytics data: 14 months, then deleted by Google.
• Contact form messages: in our inbox, under the same rules as emails.

8Cookies and similar technologies

These are needed for the site to work and are always used:

NEXT_LOCALE (cookie)

Remembers the language you chose. It is deleted when you close your browser.

Upload progress (local storage)

While a file uploads on the quote page, your browser stores where the upload stopped, so it can resume after a lost connection or a reload. The entry is removed when the upload finishes.

neximos-consent (local storage)

Remembers whether you accepted or rejected cookies, until you change it.

These are set by Google only if you click Accept in the cookie banner:

_ga, _ga_<ID> (cookies)

Google Analytics: tell visits apart and count them. Kept for up to 2 years.

_gcl_au (cookie)

Google Ads: links visits to our ads. Kept for 90 days.

You can change your choice at any time under Cookie settings in the footer. If you withdraw consent, we stop the Google tags and delete their cookies.

9Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data deleted (Art. 17);
• restrict how we process it (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21).

To use any of these rights, write to info@neximos.com. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava, https://dataprotection.gov.sk.

10Security

All connections to this website are encrypted (HTTPS). Uploaded files and quote data are encrypted at rest by our storage provider and kept in private storage that visitors cannot read. Website visitors can only upload new files; they cannot see or change anything else. Access to the data is limited to the NEXIMOS team.

We do not make decisions about you based solely on automated processing.

11Changes to this policy

We update this policy when our services or the law change. The date of the latest version is shown at the top of this page.