Privacy policy
1. Controller and data protection officer
NXTGN Solutions GmbH
Amberger Str. 82, 92318 Neumarkt i.d.OPf., Deutschland
Telefon: +49 9181 5118073
E-Mail: info@nxtgn.de
You can reach our data protection officer, Matthias Pirzer, at the same address marked “Data protection officer”, or by email to info@nxtgn.de with the subject “Data protection”.
2. Summary
You can use this website without providing personal data. We process personal data when you contact us, send a quotation request or consent to visitor analysis. We use no advertising trackers and no analytics services from Google or Microsoft. Fonts and content are loaded from our own server.
3. Hosting and website access
The website runs on Microsoft Azure in data centres in the EU (West Europe region). When you visit, the server processes technically necessary data such as IP address, time, requested page and browser information. This keeps the site secure and stable. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Microsoft acts as our processor under a data processing agreement.
4. Cookies and browser storage
We only store what the website needs in your browser: your language and display choice and your decision about visitor analysis (section 25(2) TDDDG). Identifiers for visitor analysis are stored only with your consent (section 25(1) TDDDG). You can change your choice at any time through “Cookie settings” in the footer.
5. Visitor analysis
If you consent, we measure which pages and content are read, which downloads and buttons are used and how fast pages load. The analysis runs on our own systems. For this we store a pseudonymous identifier, broad information about device, browser and country, and the website you came from. We do not store form entries, email addresses or full IP addresses for this purpose.
With an additional, separate consent we determine the name of the network you are visiting from, based on your IP address. This can be a company name, but also an internet provider. It shows us whether a company is interested in particular topics. We do not store the IP address itself.
The legal basis is your consent under Art. 6(1)(a) GDPR. We delete analysis data after 90 days at the latest. You can withdraw your consent at any time through “Cookie settings” in the footer. We then stop measuring and delete the related data.
6. Contact by form, email or phone
When you contact us, we process your details to answer your enquiry. Enquiries from our forms are stored with the details you chose, such as topic, role and project stage, in our CRM system Microsoft Dynamics 365, where the responsible team takes care of you. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a project or contract, otherwise our legitimate interest in answering it under Art. 6(1)(f) GDPR.
7. Quotation requests with documents
For a quotation request we store your requirements, dates, an optional budget range and your PDF documents together with your request in Microsoft Dynamics 365. Only the staff handling your request have access. The legal basis is Art. 6(1)(b) GDPR.
8. Spam protection
Our forms automatically check whether a request comes from a person. We use no external service for this. The IP address is processed only briefly to limit mass requests. The legal basis is Art. 6(1)(f) GDPR.
9. Recipients and transfers to third countries
For hosting and CRM we use Microsoft (Microsoft Ireland Operations Ltd.) as our processor. The website and Dynamics 365 run in data centres in the EU. A transfer to the USA in the course of support and maintenance by Microsoft cannot be ruled out. It is safeguarded by the EU-US Data Privacy Framework and the EU standard contractual clauses. Beyond that, we only pass on your data where we are legally required to.
10. Retention
We keep data only as long as its purpose requires or statutory retention periods apply. Enquiries that do not lead to a collaboration are deleted once completed, unless retention periods apply.
11. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time with effect for the future. You can lodge a complaint with a data protection authority, for example the Bavarian Data Protection Authority (BayLDA).
Right to object
Where we process data based on our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An email to info@nxtgn.de is sufficient.
12. Links to other services
We link to services such as LinkedIn. Data is only transferred when you click the link. The provider's privacy policy then applies.
13. Changes
We update this policy when our website or the law changes.