Legal

Privacy Policy

Last updated: August 2026

Note: This English version is provided for informational purposes only. The legally binding version is the German original.

1. Controller

NEXOS.Group
Andreas Trattler
Sonntagshornstraße 41
83278 Traunstein
Germany

Email: office@nexos.group

Data Protection Officer: NEXOS.Group has not appointed a data protection officer as the legal thresholds under Art. 37 GDPR in conjunction with § 38 BDSG are not currently met. For all data protection matters, please contact office@nexos.group.

2. Hosting

This website is hosted by jweiland.net e.K., Echterdinger Straße 57, 70794 Filderstadt, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place. Server log files (URL, timestamp, HTTP status, IP address, browser and OS) are automatically captured for operational purposes on the basis of Art. 6 (1) (f) GDPR. Servers are located exclusively in Germany.

3. Data collection on this website

Cookies and tracking

This website uses technically necessary cookies and — with your consent — Google Analytics 4 for user behaviour analysis. On your first visit, you will be asked for consent via a popup. Without consent, no analytics data is collected. No advertising cookies, Meta pixels or social media plugins are in use. See our cookie settings for details.

Google Analytics 4

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Dublin. We use Google Consent Mode v2: without your consent all analytics functions are disabled. With consent given, the IP address is anonymized. Legal basis: Art. 6 (1) (a) GDPR. You can revoke your consent at any time under cookie settings.

Transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework (DPF) (EU Commission adequacy decision of 10 July 2023). Additionally, Google has concluded Standard Contractual Clauses (SCC) pursuant to Art. 46 (2) (c) GDPR.

Retention: Analytics data is retained for 14 months by default and then automatically deleted.

Fonts

This website uses exclusively system fonts available in the browser. No external font servers (e.g. Google Fonts) are contacted.

Maps (OpenStreetMap)

The locations page embeds maps from OpenStreetMap Foundation (OSMF), Cambridge, UK. When visiting this page, a connection is made to OpenStreetMap servers and your IP address is transmitted. Maps are loaded with referrerpolicy="no-referrer". OpenStreetMap sets no tracking cookies. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

Contact form

Our contact page uses a form from HubSpot Ireland Limited, Dublin (parent HubSpot Inc., Cambridge, MA, USA — DPF-certified, SCC in place). When you use the form, your data (name, email, phone, company, message) is transmitted directly to HubSpot for processing on our behalf under a data processing agreement (Art. 28 GDPR). Legal basis: your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time.

Email contact

If you contact us by email, your data will be stored for the purpose of processing the request and for follow-up questions. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest); for pre-contractual requests also Art. 6 (1) (b) GDPR.

Social media links

The footer contains links to our profiles on LinkedIn, YouTube and Instagram. These are pure links without embedded content or tracking scripts — merely viewing our website does not transmit data to these platforms. Only after actively clicking a link are you redirected to the respective platform, where the platform's privacy policy applies.

4. Retention periods

Server log files (jweiland.net): maximum 7 days after access
Contact form and email inquiries: stored while inquiry is being processed; deletion thereafter unless statutory retention obligations apply (typically 6-10 years for business inquiries)
Google Analytics 4 usage data: automatic deletion after 14 months
Cookie consent decision (LocalStorage nexos_cookie_consent): unlimited until user revokes or clears browser storage

5. Your rights

You have the following rights with regard to personal data concerning you:

Right to access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

To exercise your rights, please contact: office@nexos.group

6. Revocation of consent

Where data processing is based on your consent (Art. 6 (1) (a) GDPR) — in particular Google Analytics and the contact form — you can revoke it at any time. Revocation does not affect the lawfulness of processing carried out prior to revocation (Art. 7 (3) GDPR).

7. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place. Neither contact inquiries nor website usage lead to automatically taken decisions with legal effect or similarly significant effects on you.

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent supervisory authority for Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18 · 91522 Ansbach
www.lda.bayern.de