GDPR Policy

1. Data Controller

Nexalyse Technologies acts as the data controller for personal data collected through our platform. We are committed to processing your data in accordance with the General Data Protection Regulation (GDPR).

2. Legal Basis for Processing

We process your personal data on the following legal bases: contract performance (to provide services you have requested), legitimate interests (to improve our services and prevent fraud), legal obligation (to comply with applicable laws), and consent (where you have given explicit consent).

3. Your Rights Under GDPR

You have the right to access your personal data, rectify inaccurate data, request erasure ("right to be forgotten"), restrict processing, data portability, and to object to processing. To exercise any of these rights, contact us at privacy@nexalysesystems.com.

4. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your account plus 12 months after closure.

5. International Transfers

Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission.

6. Data Protection Officer

For GDPR-related enquiries, contact our Data Protection Officer at dpo@nexalysesystems.com.

7. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable data protection law.