Privacy Policy
Last updated: October 2026
1. Controller
Shqipe Arifaj · Nexuri
Germany
Full postal address in the legal notice
E-Mail: info@nexuri.de
Phone: +49 170 4667236
2. Website, hosting and access data
This website is delivered by Vercel. IP addresses, request times, pages requested, browser information and technical logs are processed to provide and secure the service. Our configured function region is Frankfurt, Germany. Vercel is a US provider; this configuration does not rule out processing outside the EU.
The legal basis is Art. 6 (1) (f) GDPR: our legitimate interest in a secure, functioning website and preventing abuse. Technical logs are needed only for operations, diagnostics and investigation of security incidents. Fonts and regular image and video assets are served through this website.
3. Contact, project enquiries and applications
The AI opportunity check is a specific enquiry, not a newsletter subscription. Where available, we attach the selected offer page and predefined campaign codes to the enquiry to handle it appropriately and understand its source. These codes are held in memory during the current page visit; no additional cookies or browser storage entries are created for them.
We process the information you provide by form, email or phone, such as your name, email address, phone number, company and message. Applications may include the position and links you provide. Required fields are marked; without them, we cannot process the form submission.
Contractual and pre-contractual enquiries are processed under Art. 6 (1) (b) GDPR. Business contacts and general enquiries may be processed under Art. 6 (1) (f) GDPR for business communication. Applications also rely on § 26 (1) German BDSG where applicable. Form messages and confirmations are sent through Resend (Plus Five Five, Inc., USA).
4. Newsletter and email information
We use your email address and, where supplied, name, company and language to send requested email information through Resend. Subscription is activated only after confirmation through an email link (double opt-in). Confirmation and the source of signup may be recorded to demonstrate consent.
The legal basis is your consent under Art. 6 (1) (a) GDPR. Withdraw it at any time using the unsubscribe link or by writing to info@nexuri.de. Previous lawful processing is unaffected. Necessary consent and unsubscribe records may be retained under Art. 6 (1) (f) GDPR for legal defence and to prevent further messages.
5. Statistics and optional error diagnostics
After statistics consent, we also count successfully submitted enquiries, opened booking widgets and submitted bookings. Events contain only predefined offer, language and campaign codes. Names, email addresses, phone numbers, messages and booking-form data are not included in these statistics events.
Plausible Analytics and Vercel Web Analytics load only after consent to “Statistics”. They measure usage and website quality. Plausible processes page views, referrers and device information without persistent visitor identifiers and, according to its policy, without storing full IP addresses. Plausible is based in the EU. Vercel may process data outside the EU.
If configured, Sentry error diagnostics also activate only with this consent. Errors, visited pages and technical browser and device information may be processed. Additional default personal information is disabled in our configuration. The legal basis is Art. 6 (1) (a) GDPR and, where device access is involved, § 25 (1) German TDDDG.
6. Consent and browser storage
We store your privacy choices in local storage as “nexuri-consent”. It serves your privacy settings. The language follows the address you open and is not stored. The legal basis is § 25 (2) no. 2 German TDDDG and, for personal data, Art. 6 (1) (f) GDPR.
Optional statistics and marketing services start only with consent. Google and Meta advertising tags are currently not configured. Change your choices via “Cookie settings” in the footer. Withdrawal of active optional services reloads the page so they stop running. You can also delete local entries in your browser settings.
7. Location map (OpenStreetMap)
The contact page map shows Bavaria as our business region, and loads automatically when you visit the page. Your IP address and technical access data are sent to the OpenStreetMap Foundation, United Kingdom. Map tiles may be delivered through a worldwide network of cache servers.
The integration serves our legitimate interest in clearly presenting our business region (Art. 6 (1) (f) GDPR). We do not use the map for advertising tracking or user profiling. You may object to this processing on grounds relating to your particular situation. The provider’s privacy policy covers its processing.
8. Appointment booking (Cal.com)
Cal.com provides online booking. A connection is established only when you click the booking button. It then processes your appointment and contact details and technical access data. Processing in the USA is possible.
The basis for a booking you request is Art. 6 (1) (b) GDPR or, for business contacts where applicable, Art. 6 (1) (f) GDPR. Device storage strictly necessary for the requested booking function falls under § 25 (2) no. 2 German TDDDG.
9. Recipients and international processing
Only persons and providers needing the data for the relevant purpose receive it, such as hosting, email and booking providers. Processing on our behalf requires an agreement under Art. 28 GDPR where applicable. Client systems and their hosting are agreed separately for each project.
Transfers outside the EU or EEA must meet Art. 44 et seq. GDPR. Bases may include an applicable adequacy decision under Art. 45, the EU-US Data Privacy Framework for appropriately certified US providers, or safeguards under Art. 46 such as EU Standard Contractual Clauses. Ask us for information about the safeguards applicable to a particular transfer.
10. Retention
Data is retained only for its purpose. Enquiry and booking data is deleted after processing is complete unless contractual, legal or legitimate retention grounds remain. Application retention depends on the end of the process and periods needed to bring or defend claims. An applicant pool requires separate consent.
Statutory retention duties apply to relevant records, particularly § 147 German AO: generally six years for business correspondence, eight for accounting vouchers and ten for certain bookkeeping records, usually from the end of the relevant calendar year. Consent-based data is deleted after withdrawal unless necessary evidence or legal retention duties apply.
11. Your rights and supervisory authority
Subject to the statutory conditions, you may request access (Art. 15 GDPR), correction (Art. 16), erasure (Art. 17), restriction (Art. 18) and portability (Art. 20). Withdraw consent at any time for future processing. Object under Art. 21 to processing based on Art. 6 (1) (f) on grounds relating to your situation, and to direct marketing at any time. Contact info@nexuri.de.
You may complain to a supervisory authority under Art. 77 GDPR. For private businesses in Bavaria, the relevant authority is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany. We do not make solely automated decisions with legal or similarly significant effects under Art. 22 GDPR.