Privacy policy

1. Data controller

The controller responsible for the personal data described in this policy is:

• Nexus Connect AS
• Organisation number: 934 898 311
• Email: hei@nexuscap.no

We are your primary contact for privacy matters relating to the website. Use of our software and services by customers (for example via app.nexuscap.no) may also be governed by separate agreements between the customer and us; this policy primarily covers visitors and enquiries through the marketing website.

2. Purpose and scope

We process personal data to operate, improve and secure the website, communicate with interested parties, measure and improve marketing effectiveness (where you have consented), comply with legal obligations, and document enquiries and contractual relationships where relevant.

3. Information we collect

Depending on how you use the website, we may process:

• Technical and usage data: IP address, device and browser type, time of visit, referring URL, approximate region (for example via hosting or analytics providers), and logs required for operations and security.
• Cookies and similar technologies: see section 8.
• Form data: if you voluntarily submit a form (for example a waitlist or contact request), we may process the information you provide, such as first name, email address, phone number and company name.
• Communications: the content of emails or messages you send us about the website or our services.

We do not ask for special categories of personal data on the website. Please do not send health information, national ID numbers or other unnecessary sensitive details.

4. Legal basis (GDPR)

We rely on the following legal bases under GDPR Article 6:

• Legitimate interests (Art. 6(1)(f)): operating, securing and troubleshooting the website, limited analytics where proportionate, defending legal claims, and fraud prevention.
• Consent (Art. 6(1)(a)): non-essential cookies and certain analytics or marketing activities that require consent under the Norwegian Marketing Act and ePrivacy rules, including via Google Tag Manager with Consent Mode where enabled.
• Contract or pre-contract measures (Art. 6(1)(b)): when you request contact, a demo or a quote, or when processing is necessary to perform a contract with you or the organisation you represent.
• Legal obligation (Art. 6(1)(c)): where the law requires us to retain or disclose information (for example certain accounting or tax obligations).

5. Recipients and processors

We do not sell your personal data. We share information with processors who provide infrastructure, analytics, email delivery or other technical services when necessary. This may include:

• Hosting and edge providers (for example Vercel) that serve the website.
• Google Ireland Limited (or an affiliate) if Google Tag Manager, Google Analytics 4 or other Google services are activated after consent.
• Meta Platforms, Inc. or affiliates if Meta Pixel or similar tags are configured after consent.
• LinkedIn Corporation if LinkedIn Insight Tag or similar tags are configured after consent.
• Email or CRM providers if enquiries are temporarily stored or forwarded there.

We enter into data processing agreements (DPAs) under GDPR Article 28 where required. Some providers may process data outside the EEA. In those cases we rely on the EU Commission’s Standard Contractual Clauses, supplementary measures where appropriate, or other approved transfer mechanisms under GDPR Chapter V.

6. Retention

We retain personal data only as long as necessary for the purposes collected, or as long as the law requires. In general:

• Technical logs may be kept for a limited period for security and operations, then deleted or aggregated/anonymised.
• Information from forms (such as waitlist sign-ups) is kept until the purpose is fulfilled, you request deletion, or a longer period is required for contracts or statutory documentation.
• Cookie consent records are kept in line with applicable requirements; you can withdraw consent at any time via our cookie banner and browser settings.

7. Security

We implement technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss and misuse. No internet transmission is completely risk-free.

8. Cookies and consent

We use cookies and similar storage where permitted or required by law. Where necessary for your region, we obtain consent for non-essential cookies through our cookie banner.

The «nexus_cookie_consent» cookie stores whether you have accepted or rejected non-essential tracking so we do not ask on every visit. Where configured, Google Tag Manager and related tags (such as Google Analytics 4) are used in line with Consent Mode so measurement only activates according to your choice.

You can delete or block cookies in your browser settings. Some parts of the website may then not work as intended.

9. Your rights

Subject to applicable law, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data where conditions are met
• Restrict processing
• Data portability where processing is based on consent or contract and is automated
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at hei@nexuscap.no. We will respond without undue delay and within one month unless the law requires a different timeline.

You may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no) if you believe our processing violates privacy law.

10. Users under 18

The website is not directed at individuals under 18. We do not knowingly collect personal data from anyone under 18. Contact us if you believe we have received such information by mistake.

11. Automated decision-making

We do not use website personal data for solely automated decisions that produce legal or similarly significant effects in the sense of GDPR Article 22.

12. Changes

We may update this policy to reflect changes in practice, technology or legal requirements. The current version is always available on this page with the “last updated” date at the top. For material changes we may provide additional notice on the website.