Legal

Privacy
Policy

Last updated: October 8, 2026

1. Who we are

Nexium Web is the controller of your personal data within the meaning of Regulation (EU) 2016/679 (GDPR).

2. What data we collect and why

2.1 Contact form and quote request

When you fill in the contact form on our website, we collect the following data:

  • First and last name
  • Email address
  • Phone number
  • Company name (optional)
  • Type of service requested
  • Estimated budget (optional)
  • Message / project description
  • IP address (for security)
  • Date and time of submission

Legal basis: Article 6(1)(b) GDPR — performance of a contract or taking steps at the request of the data subject prior to entering into a contract.

Purpose: Responding to your quote request, communicating about your project and providing the services requested.

Retention period: Data from contact forms is kept for 3 years from the last interaction, after which it is deleted.

2.2 Newsletter and marketing communications

If you have subscribed to our newsletter or ticked the marketing consent box, we collect:

  • Email address
  • Date and time of subscription
  • IP address at the time of subscription
  • Source of subscription (contact form / newsletter widget)

Legal basis: Article 6(1)(a) GDPR — your explicit consent.

Purpose: Sending offers, news, articles and information about Nexium Web services.

Retention period: Data is kept until consent is withdrawn (unsubscription). You can unsubscribe at any time using the link in any email you receive from us or by writing to us at office@nexium.ro.

2.3 Browsing data (cookies and analytics)

Our website may collect technical browsing data through cookies, including:

  • Anonymized IP address
  • Browser and device type
  • Pages visited and duration of the visit
  • Traffic source

Legal basis: Article 6(1)(a) GDPR — your consent (cookie banner) or Article 6(1)(f) — legitimate interest for analytics.

For more details, see the Cookie Policy.

3. Who we share your data with

Nexium Web does not sell or rent your personal data to third parties.

Your data may be accessed by:

  • Our hosting providers (Hostico, Romania) — for storing data on our servers
  • Google LLC — through Google Analytics (if enabled) and Google reCAPTCHA, in accordance with their privacy policy
  • Email providers — for sending confirmations and communications
  • Competent authorities — if we are legally required to

All our providers are contractually obliged to respect the confidentiality of your data and may not use it for other purposes.

4. International data transfers

Some of the services we use (e.g. Google) may transfer data outside the European Economic Area. These transfers are carried out with appropriate safeguards in accordance with GDPR, including the Standard Contractual Clauses approved by the European Commission.

5. Your rights under GDPR

Under the GDPR, you have the following rights in relation to your personal data:

Right of access

You may request a copy of the personal data we hold about you.

Right to rectification

You may request the correction of inaccurate or incomplete data.

Right to erasure ("right to be forgotten")

You may request the deletion of your personal data in certain circumstances.

Right to restriction of processing

You may request that we limit how we process your data.

Right to data portability

You may request to receive your data in a structured, commonly used format.

Right to object

You may object at any time to the processing of your data for direct marketing purposes.

Right to withdraw consent

If processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before.

Right to lodge a complaint

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

To exercise any right, contact us at office@nexium.ro. We will respond within 30 days.

6. Data security

We implement appropriate technical and organizational measures to protect your data, including:

  • HTTPS/SSL connections for all pages
  • reCAPTCHA verification for forms
  • Nonce protection for all AJAX requests
  • Restricted access to stored data
  • Regular security updates

In the event of a security incident affecting your data, we will notify you in accordance with GDPR requirements.

7. Cookies

Our website uses cookies. You can manage your cookie preferences through the cookie banner displayed on your first visit or through your browser settings.

Types of cookies used:

  • Essential cookies — necessary for the website to function (WordPress session, security nonces)
  • Performance cookies — Google Analytics to understand visitor behavior (with your consent)
  • Functionality cookies — to remember your preferences

8. Changes to this policy

We reserve the right to update this privacy policy. The updated version will be published on this page with the date of the last modification. We encourage you to review this page periodically.

If the changes are significant and affect how we process your data, we will notify you by email (if you have provided your address) or through a prominent notice on the website.

9. Contact

For any question regarding this policy or to exercise your GDPR rights, you can contact us:

The competent supervisory authority in Romania is ANSPDCP — www.dataprotection.ro.