Privacy Policy
Last Updated: Maj 25, 2025
1. Introduction & Our Commitment
Welcome to Nextech Solution . Our registered office is at Aalestrup 9620, Danmark. You can reach us by phone at +45 31535914 or by email at contact@nextechsolution.eu Our website is nextechsolution.eu.
Nextech Solution helps customers integrate the newest technology into their workflows. We are committed to protecting the privacy and security of the personal information we collect, use, share, and otherwise process.
This Privacy Policy explains in a clear and transparent way how we handle your personal information when you visit our Site, use our Services, or otherwise interact with us. It outlines what data we collect, why we collect it, how we use and protect it, and your rights regarding your data. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.
2. Scope of this Policy
This Privacy Policy applies to personal information collected by Nextech Solution from:
Visitors to our Site www.nextechsolution.eu .
Prospective and current clients and their authorized users.
Individuals who contact us via email, phone, or other means.
Job applicants.
In some instances, data we process on behalf of our Clients as part of our Services (in which case we generally act as a "data processor" and our Client acts as the "data controller" – see Section 4.2).
3. Information We Collect
We may collect personal information directly from you, automatically when you use our Site or Services, and sometimes from third parties.
3.1. Information You Provide Directly to Us:
* Contact Information: Name, email address, phone number, company name, job title, postal address.
* Account Information: Usernames, passwords, and other credentials for accessing our Services (if applicable).
* Communication Information: Records of your communications with us, including emails, chat logs, and support tickets.
* Service-Related Information: Information you provide to us or grant us access to in connection with our Services, which may include data from your systems, workflows, employee information, or customer information, as necessary to perform the technology integration services. The specific nature of this data will depend on the services we are providing to you and will be governed by our service agreement with you.
* Job Application Information: Resume/CV, cover letter, employment history, educational background, and other information provided during the application process.
* Feedback and Survey Information: Information you provide through surveys, feedback forms, or testimonials.
3.2. Information We Collect Automatically:
* Log and Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, links clicked, device information, access times, and other actions you take on our Site or Services.
* Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities, preferences, and to personalize your experience. Please see our Cookie Policy or Section 9 below for more details.
3.3. Information We Collect from Third Parties:
* Publicly Available Sources: We may collect information from publicly available databases or professional networking sites.
* Referrals: We may receive your contact information from individuals or companies who refer you to us.
* Clients : When we act as a data processor for our Clients, they provide us with the data necessary to perform the Services, which may include personal information of their employees or customers.
3.4. Sensitive Personal Information
Nextech Solution does not intentionally collect sensitive personal information (such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation) unless strictly necessary for the services requested by a Client and under their explicit instruction and legal basis. Where we might inadvertently process such data as part of client-provided systems, we do so strictly as a data processor on behalf of our Client and in accordance with our Data Processing Agreement (DPA) with them.
4. How We Use Your Information and Our Legal Basis
We use the personal information we collect for various purposes, supported by specific legal bases under GDPR and other applicable data protection laws.
4.1. Purposes of Processing and Legal Basis:
To Provide and Manage Our Services:
Use: Delivering, operating, and maintaining our technology integration Services; setting up and managing Client accounts; processing payments and managing billing.
Legal Basis (GDPR Art. 6): Performance of a contract with you or your organization; Legitimate interest (to efficiently manage our services).
To Communicate With You:
Use: Sending service-related communications (technical notices, updates, security alerts, administrative messages); responding to your comments, questions, and requests.
Legal Basis: Performance of a contract; Legitimate interest (to provide support and respond to inquiries).
Use: Providing information about our products, services, promotions, and events.
Legal Basis: Consent (where required by law, e.g., for marketing emails); Legitimate interest (for business clients regarding relevant B2B offerings, with an opt-out).
To Improve Our Site and Services:
Use: Analysing trends, usage, and activities; developing new products and features; gathering feedback.
Legal Basis: Legitimate interest (to improve our offerings and user experience); Consent (for certain analytics cookies, as detailed in our Cookie Policy).
For Marketing and Promotional Purposes:
Use: Sending marketing communications; personalizing your experience.
Legal Basis: Consent (you can withdraw consent at any time); Legitimate interest (for B2B marketing of similar services, with an opt-out).
For Security and Compliance:
Use: Protecting security and integrity; preventing fraud; complying with legal obligations, court orders, or governmental requests; enforcing our terms.
Legal Basis: Legal obligation; Legitimate interest (to protect our business, users, and comply with law).
For Recruitment Purposes:
Use: Processing job applications and evaluating candidates.
Legal Basis: Legitimate interest (to assess suitability for a role); Steps taken at the request of the data subject prior to entering into a contract; Consent (to retain CVs for future opportunities beyond the initial application period – see Section 7).
4.2. Our Role as a Data Processor
When providing our technology integration Services to Clients, Nextech Solution primarily acts as a data processor on behalf of our Clients, who are the data controllers. In these instances:
We process personal data solely based on the documented instructions of our Client (the data controller).
The Client is responsible for ensuring they have a lawful basis for the processing.
Our processing activities are governed by a Data Processing Agreement (DPA) with the Client, which incorporates Standard Contractual Clauses (SCCs) or other appropriate safeguards for international data transfers where necessary. We offer a standalone DPA to our Clients.
This Privacy Policy applies to our processing of Client data only to the extent not superseded by the DPA. Individuals whose data is processed by us on behalf of a Client should direct their privacy inquiries and requests to that Client.
5. How We Share Your Information
We do not sell your personal information. We do not share your personal information for cross-context behavioural advertising purposes. We may share your personal information in the following circumstances:
With Service Providers: With third-party vendors, consultants, and other service providers performing services on our behalf (e.g., payment processors, cloud hosting, CRM, analytics, support tools). They are authorized to use your personal information only as necessary to provide services to us and are contractually obligated to protect it.
With Our Clients (When Acting as a Processor): As described in Section 4.2.
For Legal Reasons: If required by law or in good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent or investigate wrongdoing, or protect personal safety.
Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred. We will notify you of any change in ownership or uses of your personal information.
With Your Consent: With other third parties with your explicit consent.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
Encryption of data in transit (e.g., HTTPS) and at rest where feasible.
Access controls to limit access to personal information to authorized personnel on a need-to-know basis.
Regular security assessments and vulnerability management.
Employee training on data protection and security best practices.
Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements, or as set out in our agreements with Clients.
Client Data (as Processor): Retained according to the Client's instructions and our DPA.
Your Contact/Account Data: Retained while your account is active or as needed to provide you services, and thereafter for a period necessary for our legitimate interests (e.g., dispute resolution, legal compliance).
Job Application Data: Typically retained for 6-12 months after the application process concludes, unless you consent to us keeping your CV on file for future opportunities, in which case it may be retained for a longer period (e.g., up to 2 years with your consent).
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, the processing purposes, and applicable legal requirements.
8. Your Data Protection Rights
Under GDPR and other applicable data protection laws, you have certain rights regarding your personal information. These include:
Right to Access: You can request copies of your personal information that we hold.
Right to Rectification: You can ask us to correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure (Right to be Forgotten): You can request that we erase your personal information, under certain conditions (e.g., if it's no longer necessary for the purpose it was collected).
Right to Restrict Processing: You can ask us to restrict the processing of your personal information, under certain conditions (e.g., if you contest its accuracy).
Right to Object to Processing: You can object to our processing of your personal information where we rely on legitimate interests as our legal basis, under certain conditions. You have an absolute right to object to processing for direct marketing purposes.
Right to Data Portability: You can request that we transfer the data that we have collected directly to you or to another organization, in a structured, commonly used, and machine-readable format, under certain conditions (primarily applies to data processed based on consent or contract).
Right to Withdraw Consent: If we process your personal information based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe our processing infringes GDPR. For Denmark, the supervisory authority is Datatilsynet.
To Exercise Your Rights:
Please contact us using the details in Section 13 ("Get in Touch"). We will respond to your request in accordance with applicable law, generally within one month. We may need to verify your identity before processing your request to protect your personal information. There is usually no fee, but we may charge a reasonable fee if your request is manifestly unfounded, repetitive, or excessive.
Important Note for Data Processed on Behalf of Clients: If Nextech Solution processes your personal information on behalf of one of our Clients (i.e., we are acting as a "data processor"), you should direct your requests to exercise your data protection rights to that Client (the "data controller"). We will assist our Clients in responding to such requests as required by law and our DPA.
8.1. Specific Information for California Residents (CCPA/CPRA)
If you are a California resident, you have specific rights regarding your personal information:
Right to Know/Access: The right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.
Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
Right to Correct: The right to request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing: We do not "sell" personal information as traditionally defined. We also do not "share" personal information for cross-context behavioral advertising.
Right to Limit Use and Disclosure of Sensitive Personal Information: We do not collect or process sensitive personal information for the purpose of inferring characteristics about you. (Refer to Section 3.4).
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To exercise these rights, please contact us as detailed in Section 13. You may also designate an authorized agent to make a request on your behalf.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (like web beacons and pixels) to access or store information to enhance your experience, analyse site traffic, and for other purposes.
What are cookies? Cookies are small text files placed on your device.
How we use cookies: We use cookies for various purposes, including:
Essential Cookies: Necessary for the Site and Services to function.
Performance and Analytics Cookies: To understand how visitors use our Site, allowing us to improve it.
Functionality Cookies: To remember your preferences and choices.
Marketing Cookies: To deliver relevant advertising (if applicable).
Your choices: For non-essential cookies, we will obtain your prior consent (e.g., via a cookie banner). Most web browsers allow you to control cookies through their settings. Rejecting some cookies may affect Site/Service functionality.
For comprehensive details on the specific cookies we use, their purposes, and how you can manage your preferences, please see our separate Cookie Policy
10. International Data Transfers
Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. Nextech Solution is based in Denmark (EU).
If we transfer your personal information out of the European Economic Area (EEA), UK, or Switzerland to countries not deemed by the European Commission to provide an adequate level of data protection, we will ensure appropriate safeguards are in place. These typically include:
Using Standard Contractual Clauses (SCCs) approved by the European Commission.
Relying on adequacy decisions where applicable.
Implementing supplementary measures as necessary to ensure the data is protected to a standard equivalent to that in the EU.
When we act as a processor for our Clients, any international transfers will be governed by our DPA with the Client, which will incorporate appropriate transfer mechanisms.
11. Children's Privacy
Our Site and Services are not directed to individuals under the age of 16 (or a higher age if stipulated by local law). We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information without parental consent, we will take steps to delete such information. If you believe we might have any information from or about a child under 16, please contact us.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically. Changes are effective when posted.
For material changes, we may also provide more prominent notice (e.g., via email or a notice on our Site) prior to the change becoming effective and update the "Last Updated" date.
13. Contact Us
If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please contact us:
Nextech Solution
Aalestrup 9620
Danmark
Email: contact@nextechsolution.eu
Phone: +45 31535914
Website: www.nextechsolution.eu
14. Automated Decision-Making
Nextech Solution does not use your personal information for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.