NEXGAP and its subsidiaries recognize the importance of protecting your personal data and are committed to processing it responsibly and in compliance with applicable data protection laws in all countries where NEXGAP and its subsidiaries conduct business. This Privacy Policy outlines the general data protection practices regarding the collection, use, and disclosure of personal data of users and other individuals associated with our customers, partners, suppliers, and other entities with whom NEXGAP or its subsidiaries have or are considering a business relationship.
—Why and How Your Personal Data Is Collected and Used
The processing of data on this website is carried out by the website operator. You can find the operator's contact details in the legal notice or in the section "Information on the Responsible Entity" in this Privacy Policy. Your data is collected either because you provide it to us, for example, by entering information into a form, or it is automatically recorded with your consent when you visit the website. This automatically collected data primarily includes technical details such as browser type, operating system, or the time of page access. The collection of this data occurs as soon as you access the website. Some of this data is necessary to ensure the website functions properly, while other data may be used to analyze user behavior.
—Your Rights Regarding Your Personal Data
You have the right to request, at any time and free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to the processing of your data, you can withdraw this consent at any time with future effect. Additionally, under certain circumstances, you have the right to request the restriction of processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. For any inquiries regarding data protection, you can contact us at any time using the address provided in the legal notice.
The use of the hosting provider is necessary for the fulfillment of contractual obligations towards our potential and existing customers (Art. 6 Pl. 1 lit. b GDPR) and serves our legitimate interest in the secure, fast, and efficient provision of our online services through a professional provider (Art. 6 Pl. 1 lit. f GDPR). Our hosting provider will only process your data to the extent required to fulfill its service obligations and will follow our instructions regarding the handling of this data.
—Conclusion of a Data Processing Agreement
To ensure the GDPR-compliant processing of your personal data, we have entered into a data processing agreement with our hosting provider, under which this website is operated.
When you use this website, various types of personal data are collected. Personal data includes any data that can personally identify you. This privacy policy explains which data we collect, how we use it, and for what purpose. Please note that data transmission over the internet (e.g., communication via email) may have security vulnerabilities. A complete protection of data from access by third parties is not possible.
—Responsible entity
NEXGAP GmbH
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main
The responsible entity is the natural or legal person who, alone or together with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
—Data retention period
Unless a more specific retention period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent for data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (e.g., tax or commercial retention obligations). In such cases, the data will be deleted after these reasons no longer apply.
—Transfer of data to the US and other third countries
We use tools provided by companies based in the US or other countries outside the European Economic Area (EEA) that do not have adequate data protection standards. When these tools are active, your personal data may be transferred to and processed in such third countries. Please note that these countries may not guarantee a level of data protection comparable to that of the EU. For example, US companies are legally required to provide personal data to security authorities, and you as the data subject may have no legal recourse against this. It is therefore possible that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data stored on US servers for surveillance purposes. We have no influence over these processing activities.
—Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke consent at any time with future effect. The legality of data processing carried out before the revocation remains unaffected.
—Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is based on ART. 6 Pl. 1 LIT. E OR F GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions. The legal basis for each processing operation is stated in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling in connection with such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes.
—Right to file a complaint with a supervisory authority
In the event of GDPR violations, you have the right to file a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or the place of the alleged violation. This right exists without prejudice to other administrative or judicial remedies.
—Right to data portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done where technically feasible.
—SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser's address bar from “http://” to “https://” and by the lock symbol in your browser bar. When SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
—Right to access, deletion, and correction
Within the scope of applicable legal provisions, you have the right at any time to request free information about your stored personal data, its origin and recipients, and the purpose of data processing. You also have the right to correct or delete this data. For further information on personal data, you can contact us at any time using the address provided in the legal notice.
—Objection to promotional emails
The use of contact details published under the legal notice obligation for sending unsolicited advertisements and informational materials is hereby prohibited. The operators of this website expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you enter our website (third-party cookies). These enable us or you to use certain services provided by the third party (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to analyze user behavior or display advertisements.
Cookies that are required for electronic communication processes (necessary cookies) or for providing certain functions you request (functional cookies, e.g., for the shopping cart function) or for optimizing the website (e.g., cookies for audience measurement) are stored based on Art. 6 Pl. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If consent for cookie storage has been requested, the storage of the respective cookies is based exclusively on this consent (Art. 6 Pl. 1 lit. a GDPR); consent can be revoked at any time.
You can configure your browser to notify you when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.
If third-party cookies or cookies for analysis purposes are used, we will inform you separately in this privacy policy and, if necessary, request your consent.
—Server log files
The provider of these pages automatically collects and stores information in server log files that your browser automatically transmits to us. These include:
· Browser type and version
· Operating system used
· Referrer URL
· Hostname of the accessing computer
· Time of the server request
· IP address
These data are not merged with other data sources. The collection of this data is based on Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimization of the website, which requires the collection of server log files.
—Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 Pl. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries (Art. 6 Pl. 1 lit. f GDPR) or on your consent (Art. 6 Abs. 1 lit. a GDPR) if this has been requested.
The data entered in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
—Inquiry via email, telephone, or fax
If you contact us via email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 Pl. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling inquiries (Art. 6 Pl. 1 lit. f DSGVO) or on your consent (Art. 6 Pl. 1 lit. a GDPR) if this has been requested.
The data sent to us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
—Conclusion of a data processing agreement
We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a legally required contract that ensures the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
The data you enter will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
The legal basis for data processing is Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in enabling an uncomplicated appointment scheduling process for interested parties and customers. If consent has been requested, Art. 6 Pl. 1 lit. a GDPR serves as the legal basis for data processing; consent can be revoked at any time.
—Registration
You can register on this website to use additional features. The data entered for this purpose will be used only for the purpose of utilizing the respective offer or service for which you have registered. The required registration details must be provided in full; otherwise, we will reject the registration.
For important changes, such as modifications to the scope of the offer or technically necessary adjustments, we use the email address provided during registration to inform you accordingly. The processing of data entered during registration is based on Art. 6 Pl. 1 lit. b GDPR for the execution of the usage agreement established by the registration and, if applicable, for the initiation of further contracts.
The data collected during registration will remain stored by us as long as you are registered on this website and will be deleted afterward. Statutory retention periods remain unaffected.
The processing of the data entered into the newsletter subscription form is based solely on your consent (Art. 6 Pl. 1 lit. a GDPR). You can revoke your consent to store the data, email address, and its use for newsletter distribution at any time, for example, via the "unsubscribe" link in the newsletter. The legality of data processing carried out before the revocation remains unaffected.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe. Once you unsubscribe, your data will be removed from the newsletter distribution list. Data stored for other purposes remains unaffected.
After unsubscribing from the newsletter, your email address may be added to a blacklist by us or the newsletter service provider to prevent future mailings. The data in the blacklist is used solely for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements for newsletter distribution (legitimate interest as per Art. 6 Pl. 1 lit. f GDPR). The storage of blacklist data is not time-limited. You may object to the storage if your interests outweigh our legitimate interest.
This site uses web fonts provided by Google to ensure a uniform display of fonts. The Google Fonts are installed locally, meaning no connection to Google’s servers is established.
For this purpose, the browser you are using must connect to Google’s servers. This enables Google to become aware that your IP address has accessed this website. The use of Google Web Fonts is based on Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of fonts on its website. If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 Pl. 1 lit. a GDPR; consent can be revoked at any time.
If your browser does not support web fonts, a default font from your computer will be used. For more information on Google Web Fonts, please visit here and refer to Google's privacy policy.
To communicate with our customers, we use online conferencing tools, among other means. The specific tools we use are listed below. When you communicate with us via video or audio conference over the internet, your personal data is collected and processed by us and by the respective conference tool provider.
The conference tools collect all data that you provide to use the tools (such as your email address and/or phone number). Additionally, the tools process the duration of the conference, the start and end time of your participation, the number of participants, and other "contextual information" related to the communication process (metadata).
Furthermore, the tool provider processes all technical data necessary to facilitate online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and connection type.
If content is shared, uploaded, or otherwise provided within the tool, it is also stored on the servers of the tool provider. Such content includes, in particular, cloud recordings, chat and instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.
Please note that we have only limited influence over the data processing operations of the tools used. Our control is largely subject to the policies of the respective provider. For further details on how conference tools process data, please refer to the privacy policies of the tools we use, which are listed below.
—Purpose and Legal Basis
Conference tools are used to communicate with prospective or existing contractual partners or to provide certain services to our customers (Art. 6 Pl. 1 lit. b GDPR). Additionally, the use of these tools serves to simplify and accelerate communication with us or our company (legitimate interest under Art. 6 Pl. 1 lit. f GDPR). If consent has been requested, the use of the respective tools is based on this consent, which can be revoked at any time with future effect.
—Data Retention
The data collected directly by us through video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no control over the storage duration of your data retained by the operators of the conference tools for their own purposes. For details, please refer directly to the respective conference tool provider.
We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking and statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or conduct its own analyses. It merely manages and deploys the tools integrated through it. However, Google Tag Manager does collect your IP address, which may be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in the fast and efficient integration and management of various tools on its website. If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 Pl. 1 lit. a GDPR; consent can be revoked at any time.
—Google Analytics
This website uses features of Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the origin of the visitor. Google may compile this data into a profile that is linked to the respective user or their device.
Additionally, Google Analytics can record your mouse and scroll movements and clicks. Google Analytics also uses various modeling techniques to supplement collected data and employs machine-learning technologies for data analysis.
Google Analytics uses technologies that allow the recognition of users to analyze their behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the United States and stored there.
The use of this analytics tool is based on Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both the website and advertising. If consent has been requested (e.g., consent to store cookies), processing is carried out exclusively on the basis of Art. 6 Pl. 1 lit. a GDPR; consent can be revoked at any time. Data transfer to the USA is based on the European Commission’s Standard Contractual Clauses.
—IP Anonymization
We have activated the IP anonymization feature on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other states that are parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the website operator, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
—Browser Plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link. More information on how Google Analytics handles user data can be found in Google’s privacy policy.
—Conclusion of a Data Processing Agreement
We have entered into a data processing agreement (DPA) with Google and fully comply with the strict requirements of German data protection authorities when using Google Analytics.
—Demographic Features in Google Analytics
This website uses the "demographic features" function of Google Analytics to display relevant advertisements within the Google advertising network. This allows reports to be created that contain information on the age, gender, and interests of site visitors. These data come from Google's interest-based advertising and third-party visitor data. These data cannot be associated with a specific person. You can disable this feature at any time in your Google Account’s ad settings or generally prohibit the collection of your data by Google Analytics as described in the "Objection to Data Collection" section.
—Data Retention
User and event-level data stored by Google and linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android Advertising ID) will be anonymized or deleted after two months. Details can be found at the following link.
—Google Ads
The website operator uses Google Ads, an online advertising program provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads allows us to display advertisements in Google search results or on third-party websites when a user enters specific search terms in Google (keyword targeting). Targeted advertisements can also be displayed based on user data held by Google (e.g., location data and interests) (audience targeting).
We, as the website operator, can analyze this data quantitatively by assessing which search terms led to the display of our ads and how many ads resulted in clicks.
The use of Google Ads is based on Art. 6 Pl. 1 lit. f GDPR. The website operator has a legitimate interest in marketing its services and products as effectively as possible. Data transfer to the USA is based on the European Commission’s Standard Contractual Clauses.
—Hotjar
We use Hotjar to better understand user needs and to optimize both our offerings and the user experience on this website. Hotjar’s technology provides us with deeper insights into how users interact with our site, such as how much time they spend on certain pages, which links they click, and which content they prefer or ignore. This helps us improve our services based on user feedback.
Hotjar uses cookies and other technologies to collect data on user behavior and their devices. The collected information includes:
· Anonymized IP address of the device
· Screen size
· Device type (unique device identifiers)
· Information on the browser used
· Location (country only)
· Preferred language for displaying our website
These data are stored in a pseudonymized user profile on our behalf. Hotjar is contractually prohibited from selling or otherwise utilizing the collected data. More information can be found here.