LEGAL INFORMATION
In accordance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), NXDATA SRL processes personal data for specific and legitimate purposes, in compliance with applicable legal requirements and the rights of data subjects.
This Privacy Policy explains how NXDATA collects and processes personal data, the purposes and legal bases for processing, the criteria for data retention, and the rights of data subjects.
The data controller is NXDATA SRL, a provider of colocation, connectivity and data center design services in Romania.
Registered office: 8 Dimitrie Pompeiu Boulevard, FEPER Building, 3rd Floor, District 2, Bucharest, 020337, Romania.
For questions regarding the processing of personal data or to exercise your rights under the GDPR, you may contact us at gdpr_nx@nxdata.ro.
NXDATA has appointed a Data Protection Officer (DPO), who can be contacted at the same email address.
NXDATA processes personal data in accordance with the following principles:
- Lawfulness, fairness and transparency: Data is processed lawfully, fairly and transparently in relation to data subjects.
- Purpose limitation: Data is collected for specified, explicit and legitimate purposes and is not subsequently processed in a manner incompatible with those purposes.
- Data minimisation: Only data that is adequate, relevant and necessary for the intended purposes is processed.
- Accuracy: Data is kept accurate and, where necessary, up to date.
- Storage limitation: Data is not retained longer than necessary for the purposes for which it was collected, subject to applicable legal obligations.
- Integrity and confidentiality: Appropriate technical and organisational measures are implemented to protect data against unauthorised access, loss, destruction or disclosure.
Personal data is processed on a legal basis provided for under the GDPR, depending on the purpose and circumstances of each processing activity.
NXDATA processes personal data provided through its website and the contact channels published on it for the following purposes:
- Handling contact messages and enquiries:
Data submitted through contact forms or other communication channels is used to review enquiries, provide responses and conduct any necessary follow-up communications.
- Handling quotation requests:
Data submitted through quotation request forms is used to assess project requirements, prepare and submit technical and commercial proposals, and conduct the communications necessary for this purpose.
- Managing newsletter subscriptions:
The email address and any other data provided when subscribing are used to manage the subscription and send newsletter communications. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal. Unsubscribing may be done through the mechanism provided in received communications, where available, or by contacting us using the details set out in this Policy.
- Website usage analytics:
NXDATA uses Google Analytics, integrated through Google Site Kit, to analyse how the website is used and to assess and improve its functionality, content and browsing experience, in accordance with applicable legislation and visitors’ consent preferences, where applicable.
- Compliance with legal obligations:
Personal data may be processed where necessary to comply with legal obligations applicable to NXDATA, including tax, accounting or commercial obligations.
- Protection of legitimate interests:
Where the applicable legal conditions are met, NXDATA may process data to protect its website and systems, prevent misuse, manage incidents, and establish, exercise or defend legal claims.
Depending on the purpose, the legal basis for processing may be taking steps at the request of the data subject prior to entering into a contract, the performance of a contract, compliance with a legal obligation, NXDATA’s legitimate interests or the data subject’s consent, as applicable.
Access to personal data is restricted to authorised individuals who need it to perform their duties.
Depending on the purpose of processing, data may be disclosed to service providers supporting NXDATA’s activities, such as website hosting and administration providers, email service providers, newsletter platforms, analytics providers, and IT or professional service providers.
NXDATA uses Google Analytics through Google Site Kit to analyse website usage. In this context, certain information about website usage may be processed by Google, depending on the service used and the applicable settings.
Where providers process personal data on behalf of NXDATA, the relevant legal requirements concerning data protection are applied.
Data may also be disclosed to public authorities or other recipients where required by law or where another applicable legal basis exists.
NXDATA retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal obligations.
Retention periods are determined according to the category of data, the purpose of processing, the nature of the relationship with the data subject and any applicable legal archiving or retention requirements.
Data submitted through contact and quotation request forms is retained for as long as necessary to manage the enquiries and any subsequent communications, subject to applicable legal obligations.
Data used to manage newsletter subscriptions is retained for the duration of the subscription or until unsubscribe, as applicable. Certain information may be retained separately where necessary to demonstrate compliance with legal obligations.
Certain data may be retained for additional periods where necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Subject to the conditions and limitations set out in the GDPR, data subjects have the following rights:
- Right of access: The right to obtain confirmation as to whether their personal data is being processed and, where it is, to access that data and relevant information about the processing.
- Right to rectification: The right to request the correction of inaccurate data and the completion of incomplete data.
- Right to erasure: The right to request the deletion of personal data under the conditions set out in the GDPR.
- Right to restriction of processing: The right to request the restriction of processing in the circumstances provided for by the GDPR.
- Right to data portability: The right to receive the data provided in a structured, commonly used and machine-readable format and, where the legal conditions are met, to transmit it to another controller.
- Right to object: The right to object to the processing of personal data in the circumstances provided for by the GDPR. Where data is processed for direct marketing purposes, the data subject has the right to object at any time.
- Right to withdraw consent: Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
- Right not to be subject to automated individual decision-making: The right to benefit from the protections provided by the GDPR in relation to decisions based solely on automated processing, including profiling, where applicable.
- Right to lodge a complaint: The right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) and, where applicable, to seek judicial remedy before the competent courts.
These rights may be exercised subject to the conditions and limitations set out in applicable legislation.
To exercise your rights, you may contact us at gdpr_nx@nxdata.ro or send a written request to NXDATA’s registered office in Bucharest.
NXDATA implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, accidental loss or unlawful destruction.
Security measures are determined according to the nature of the data, the purposes of processing and the associated risks.
Employees, collaborators and service providers who have access to personal data are required to comply with confidentiality obligations and applicable legal requirements.
In the course of its activities, NXDATA may use service providers or work with partners whose processing activities involve the transfer of personal data to countries outside the European Union or the European Economic Area.
Where such a transfer takes place, it must comply with the applicable GDPR requirements, including those concerning the level of data protection and the rights of data subjects.
Depending on the circumstances of the transfer, applicable legal mechanisms may include European Commission adequacy decisions, appropriate safeguards provided for under the GDPR or derogations permitted by the Regulation for specific situations.
Information about actual transfers and the applicable safeguards may be requested using the contact details provided in this Policy.
The website may use cookies and similar technologies for its operation, to remember certain preferences and, where applicable, to analyse traffic or serve other purposes.
NXDATA uses Google Analytics through Google Site Kit to analyse how visitors use the website and to assess and improve its functionality and content.
Depending on the configuration of the tools used and the preferences expressed by visitors, information about their interactions with the website may be processed.
Information about the categories of cookies used, their purposes and how preferences can be managed is provided in the Cookie Policy and through the consent management tool available on the website.
The content of this website, including text, images, illustrations, graphic elements, trademarks, logos and designs, is the property of NXDATA or is used under the appropriate rights.
Reproduction, distribution, publication or modification of website content, as well as its use to create derivative works, must comply with intellectual property rights and applicable law. Where required, such use is subject to the prior consent of the relevant rights holder.
Further details regarding the permitted use of website content are available in the Terms of Use.
For any questions regarding this Privacy Policy or the processing of personal data, you may contact us at:
Data Protection Officer (DPO): gdpr_nx@nxdata.ro
Correspondence address: 8 Dimitrie Pompeiu Boulevard, FEPER Building, 3rd Floor, District 2, Bucharest, 020337, Romania.
Last updated: 13 October 2026.