Privacy Policy - NexaForma
1. Consent to Data Processing
By utilizing NexaForma’s services, individuals provide their express consent to the collection, handling, and processing of personal data as outlined in this policy. Consent may be revoked at any time via written request to [email protected].
2. Scope of Data Collection
NexaForma collects personal information for the purpose of fulfilling service agreements, enhancing user experience, and optimizing communication. Only data pertinent to these objectives will be collected and processed.
3. Legal Grounds for Data Processing
Data processing by NexaForma is conducted on the basis of contractual necessity, legitimate interest, or user consent, as dictated by the nature of the specific interaction with our services.
4. Data Confidentiality and Disclosure
Personal information collected by NexaForma will be kept strictly confidential and will not be disclosed to third parties except where necessary to provide services or where legally required. All third parties must comply with our confidentiality standards.
5. Third-Party Processors
NexaForma may engage external vendors for the processing of specific data. These processors are carefully selected to ensure that they adhere to the same high standards of data protection as NexaForma.
6. Duration of Data Retention
Personal data will be retained for the duration necessary to fulfill service obligations or as required by law. Upon fulfillment, data will be securely erased or anonymized in accordance with standard protocols.
7. Right to Access and Correct Data
Users have the right to request access to personal information held by NexaForma and to request corrections where inaccuracies are found. All such requests should be directed to [email protected].
8. Right to Data Portability
Individuals have the right to request a copy of their personal data in a structured, commonly used, and machine-readable format. NexaForma will accommodate such requests in accordance with applicable legal requirements.
9. No Automated Decision-Making
NexaForma does not process personal data using automated decision-making systems, unless expressly authorized by the user. Where applicable, full transparency about the decision-making process will be provided.
10. Data Security
NexaForma applies robust security measures to protect personal data from unauthorized access, alteration, or destruction. This includes encryption, secure servers, and periodic security assessments.
11. International Data Transfers
In the event that personal data is transferred across national borders, NexaForma ensures compliance with applicable data protection laws and guarantees that equivalent levels of data security are maintained.
12. Data Breach Notification
In the event of a data breach, NexaForma will notify affected individuals and relevant supervisory authorities within 72 hours, unless the breach is unlikely to pose a significant risk to the rights and freedoms of individuals.
13. Principle of Data Minimization
NexaForma adheres to the principle of data minimization, ensuring that only the data strictly necessary for the provision of services is collected, processed, and retained.
14. User Right to Erasure
Users may request the deletion of their personal data under certain conditions, such as withdrawal of consent or completion of services. NexaForma will comply with such requests as per legal obligations.
15. Amendments to Privacy Policy
NexaForma reserves the right to modify this Privacy Policy to reflect changes in our practices or legal obligations. Any substantial amendments will be communicated through email or posted on our website.