Privacy Policy

1. Controller

The controller responsible for processing personal data through this website is Nexora Technologies EOOD, a single-member limited liability company under Bulgarian law.

Registered office and business address: Coming soon. Unified Identification Code (UIC/EIK): Coming soon. Email: support@nexoratechnologies.eu.

2. Scope of this policy

This policy applies to visits to the Nexora Technologies website, direct communications with us, and the use of the Calendly consultation-booking function. Separate privacy information may apply to Aivera and to customer projects operated under their own domains or accounts.

We do not currently provide a website contact form, newsletter registration, user account or proprietary analytics service on this website.

3. Website access and server logs

When you access the website, the hosting infrastructure may automatically process technical data needed to deliver and protect the service. This can include IP address, date and time, requested page or file, referrer URL, browser and operating-system information, device type, response status and transferred data volume.

This processing is necessary to provide the website, maintain security, diagnose errors and prevent misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating a secure and reliable website. Hosting provider, server location and the operational log-retention period: Coming soon after hosting is selected.

4. Direct communications

If you contact us by email or another communication channel, we process the information you provide, such as your name, contact details, organization, message and related correspondence, in order to respond and manage the relationship.

Depending on the context, the legal basis is taking steps at your request before entering into a contract or performing a contract under Article 6(1)(b) GDPR, compliance with a legal obligation under Article 6(1)(c) GDPR, or our legitimate interest in business communication under Article 6(1)(f) GDPR.

5. Consultation booking with Calendly

This website uses Calendly to provide consultation scheduling. The widget resources are supplied by Calendly, LLC. When the website or booking function is used, Calendly may receive technical data such as IP address, browser and device information. If you book a meeting, Calendly processes the information you enter, for example your name, email address, selected time, answers to booking questions and appointment metadata.

Nexora uses this data to arrange, prepare and conduct the requested consultation. The legal basis is Article 6(1)(b) GDPR where the booking concerns pre-contractual steps or an existing contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in efficient appointment management.

For booking information that Nexora determines and collects, Nexora acts as controller and Calendly generally acts as a service provider/processor. Calendly may also process certain data for its own purposes as described in its privacy notice. Calendly is based in the United States, so data may be processed outside the European Economic Area subject to the transfer safeguards described by Calendly.

6. Google Fonts

The website currently loads the DM Sans and Manrope typefaces from Google Fonts. In doing so, the visitor’s browser connects to Google servers and may transmit technical data, including the IP address and browser information, to Google. The purpose is consistent and efficient presentation of the website. The legal basis relied on is Article 6(1)(f) GDPR, subject to final legal and technical review before launch.

Google services may involve processing outside the European Economic Area. The production setup should be reviewed to determine whether the fonts will instead be hosted locally and whether any consent mechanism is required for the final deployment and target markets.

7. Embedded video and YouTube

The configurable homepage video can be served locally or embedded from YouTube using the privacy-enhanced youtube-nocookie.com domain. With the local fallback video, no YouTube connection is made. If a YouTube URL is configured, a connection to YouTube is initiated only when the visitor starts the video; YouTube may then process IP address, device and usage data and may use cookies or similar technologies.

YouTube is provided by Google Ireland Limited and associated Google entities. Activating an embedded YouTube video is voluntary. Before a YouTube video is published, the final implementation and any required consent mechanism must be reviewed for the deployment region.

8. Cookies and similar technologies

Nexora does not currently use its own analytics or advertising cookies on this website. Essential technical storage may be used where necessary for security or functionality. Third-party services such as Calendly and, when enabled and activated, YouTube may use cookies or similar technologies under their own policies.

The need for a consent-management platform and the exact cookie list must be reassessed immediately before production launch and whenever a third-party, analytics or marketing service is added.

9. Recipients and processors

Personal data is shared only where necessary with authorized personnel and service providers supporting hosting, website operation, communications and appointment scheduling. These providers may act as processors under contractual instructions or as independent controllers for specified activities.

Current relevant categories are the website hosting provider (Coming soon), Calendly for appointment scheduling, and Google for remotely loaded fonts and any activated YouTube embed. We may also disclose data where required by law, a competent authority, or to establish, exercise or defend legal claims.

10. International transfers

Where personal data is processed outside the European Economic Area, we rely on an applicable legal transfer mechanism, such as an adequacy decision, the EU Standard Contractual Clauses together with supplementary measures where required, or another mechanism permitted by Chapter V GDPR. Details can be requested using the contact address above.

11. Retention

We retain personal data only for as long as necessary for the relevant purpose and then delete or anonymize it unless statutory retention duties or the establishment, exercise or defense of legal claims require longer storage.

Website logs are retained according to the hosting and security configuration (Coming soon). Booking and inquiry data is generally retained for the duration of the consultation or business relationship and any applicable limitation and statutory record-keeping periods. Data in third-party systems is also subject to the configured account settings and the provider’s applicable retention rules.

12. Your rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, and information about recipients. You may object to processing based on legitimate interests for reasons arising from your particular situation. Where processing is based on consent, you may withdraw that consent at any time for the future.

To exercise your rights, email support@nexoratechnologies.eu. We may request information necessary to verify identity and will respond within the time limits required by applicable law.

13. Right to lodge a complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority. For a controller established in Bulgaria, the national authority is the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, email kzld@cpdp.bg. The CPDP publishes the applicable submission requirements on its website.

14. Security

We use appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. No internet transmission or storage system can be guaranteed to be completely secure.

15. Required information and automated decisions

You are not legally required to provide personal data merely to browse the website. Information marked as required in a booking process is needed to arrange the requested consultation; without it, we may be unable to confirm the appointment.

Nexora does not use website visitor or booking data for decisions based solely on automated processing that produce legal or similarly significant effects, and does not conduct profiling through this website.

16. Changes to this policy

We may update this policy when the website, service providers, legal requirements or processing activities change. The current version and revision date will be published on this page.