Privacy Policy

This website (nexus-ai.tech) is operated by Panagiota Lagka, trading as Nexus AI, a web design and development business registered in Athens, Greece (G.E.MI 137178703000).

For the purposes of the EU General Data Protection Regulation (GDPR 2016/679), Panagiota Lagka is the Data Controller for personal data collected through this website.

Contact: hello@nexus-ai.tech

We collect the following categories of personal data:

Contact & Project Enquiry Forms

When you submit a contact or project brief form on this site, we collect: your name, email address, and the message or project details you provide. Company name and service interest are optional fields.

Technical / Server Logs

Our hosting provider automatically records standard web server logs, which may include your IP address, browser type, operating system, referring URL, and the pages you visit on this site. These logs are used to maintain security and diagnose technical issues. We do not link server log data to your identity.

We use your personal data solely for the following purposes:

• To respond to your enquiry or project brief.
• To assess whether a project is a good fit and to follow up with a proposal or scoping conversation.
• To maintain records of client communications for the duration of any engagement.
• To diagnose and fix technical problems (server logs only).

We do not use your data for advertising, profiling, or automated decision-making. We do not sell your personal data to any third party, ever.

We rely on the following legal bases under GDPR Article 6:

• Article 6(1)(b) — Pre-contractual steps: processing your enquiry or project brief in order to take steps prior to entering a contract at your request.
• Article 6(1)(f) — Legitimate interests: maintaining server logs to protect site security and diagnose technical issues, where this does not override your rights and freedoms.

Enquiry and contact data is retained for as long as is necessary to respond to your request and, where a project engagement follows, for the duration of that engagement plus a reasonable period thereafter for record-keeping purposes (typically up to 3 years).

Server log data is retained by our hosting provider in accordance with their own data retention policy, typically no longer than 90 days.

If you ask us to delete your data, we will do so promptly unless we are required to retain it by law.

We do not share your personal data with third parties for marketing purposes. Your data may be accessible to the following categories of processors solely in the course of operating this site:

• Web hosting provider — servers that store and serve this website are operated by a hosting provider based in the EU. Server logs are held by them in accordance with their own privacy policy.
• Email service — contact form submissions are received via email. Your message is transmitted through standard email infrastructure.

We do not transfer personal data outside the European Economic Area (EEA) except as strictly necessary and only with appropriate safeguards in place.

You can read more about how this process works on our Terms of Use page.

As a data subject under the GDPR, you have the following rights. To exercise any of them, contact us at hello@nexus-ai.tech . We will respond within 30 days.

• Right of Access Request a copy of all personal data we hold about you.
• Right to Rectification Ask us to correct inaccurate or incomplete data.
• Right to Erasure Ask us to delete your personal data ("right to be forgotten"), subject to legal retention requirements.
• Right to Restriction Ask us to suspend processing of your data while a dispute is resolved.
• Right to Portability Receive your data in a structured, machine-readable format to transfer to another controller.
• Right to Object Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling grounds.

This site uses the following cookies:

• WordPress session cookie — set only for logged-in administrators. Not set for regular visitors.
• Hosting / security cookies — our hosting provider may set a short-lived cookie for bot detection and security purposes. These do not track individuals across sites and contain no personal identifiers.
• Google Analytics cookies — we use Google Analytics to understand how visitors interact with this site (pages visited, time on site, traffic sources). This sets cookies such as _ga and _ga_* which collect anonymised usage data. Google's privacy policy applies to this data: policies.google.com/privacy.

We do not use advertising cookies or any other third-party tracking technologies beyond Google Analytics. You can manage or delete cookies via your browser settings, or opt out of Google Analytics tracking at tools.google.com/dlpage/gaoptout.

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. The site is served over HTTPS. Contact form data is transmitted securely and stored in our WordPress database, which is accessible only to authorised administrators.

No method of transmission or storage is completely secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours as required by GDPR.

We may update this Privacy Policy from time to time to reflect changes in law or our practices. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this page periodically.

For any questions about this policy or to exercise your rights, contact us at: hello@nexus-ai.tech

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Greek supervisory authority:

Hellenic Data Protection Authority (HDPA)
Kifisias 1-3, 115 23 Athens, Greece
www.dpa.gr