1. Scope of this policy
This policy applies to the nexeusbigdata.com corporate website. Production is static and data-minimizing: it includes no analytics, advertising, commercial profiling or first-party contact form.
Calendly loads only after an explicit booking action. The AI assistant processes text only when a visitor chooses to use it. Do not share personal data, credentials, trade secrets or confidential information.
2. Data controller
- Controller
- International Financial Security And Trading Services – European Division, S.L.
- Tax ID
- B67793604
- Registered office
- C/ Benasau 50, 15.º Q, Alicante, Spain
- Privacy contact
- info@nexeusbigdata.com
No data protection officer contact is published because no formal appointment has been identified. Privacy questions and rights requests are handled through the address above.
3. Data, purposes and legal bases
| Interaction | Information | Purpose | Legal basis |
|---|---|---|---|
| Browsing | IP address, requested URL, browser, date and technical security data | Deliver and protect the site and diagnose incidents | Legitimate interest in operating a secure service (GDPR Art. 6(1)(f)) |
| Address, message and any information the sender chooses to provide | Respond and, where relevant, prepare a professional relationship | Pre-contractual request (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) | |
| Meeting booking | Name, email, time zone, availability and submitted answers | Manage booking, confirmations, changes and the video meeting | Pre-contractual request (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) |
| AI assistant | Voluntarily submitted text, a pseudonymous technical identifier and minimum security metadata | Generate initial guidance and protect the service against abuse | Pre-contractual request (Art. 6(1)(b)) and legitimate interest in operating a secure service (Art. 6(1)(f)) |
| Legal duties and claims | Information strictly related to the duty or incident | Meet legal duties and establish, exercise or defend legal claims | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Special-category data are not requested. Do not send trade secrets, credentials or sensitive information by email or in booking fields.
4. Providers and international transfers
The published experience uses or may use these providers:
- Render, for static hosting, CDN delivery and technical logs. Read its Privacy Policy and Data Processing Addendum.
- Calendly, only when the scheduler opens, to manage booking. Read its Privacy Notice and Data Processing Addendum.
- Google Workspace and Google Meet, for email and video meetings. Read Google's Privacy Policy.
- OpenAI API, to generate assistant responses through the Responses API with response storage disabled. Read its API data controls .
These providers may process data outside the European Economic Area. Where required, transfers rely on adequacy decisions, the EU-US Data Privacy Framework or Standard Contractual Clauses, according to each provider's current terms. The safeguards are available through the links above.
5. Retention and minimization
- Ordinary technical logs are retained for no more than 30 days, unless a security incident or legal duty requires evidence to be isolated for longer.
- Emails and meeting data with no subsequent relationship are generally deleted or anonymized within 12 months of the last substantive contact.
- Where a contract exists, information is retained for its duration and then restricted for the statutory periods needed to meet duties or address claims.
- Rights requests and incidents are retained as needed to evidence their handling and meet applicable responsibilities.
The site does not export browsing logs to an analytics platform. Nexeus does not persist
conversation content and configures the API with store=false. By default,
OpenAI may retain content in abuse-monitoring logs for up to 30 days, unless longer
retention is legally required or reasonably necessary for security; it is not used to
train models unless the customer opts in.
6. Your rights
Individuals may exercise rights of access, rectification, erasure, objection, restriction and portability, and may withdraw consent where it is the legal basis. Send a request to info@nexeusbigdata.com, identifying the right and providing only the information needed to verify identity and locate the data.
A complaint may also be lodged with the Spanish Data Protection Agency or another competent supervisory authority.
8. Changes and contact
This policy is reviewed when services, providers, purposes or applicable law changes. Material changes will appear in the date above and, where they affect a privacy choice, a new decision will be requested when required.
Questions may be sent to info@nexeusbigdata.com. Operator details appear in the Legal notice.