Privacy Policy
Last updated: September 2026.
This policy explains what personal data we collect when you use az-nexus.com or contact us, why we collect it, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
AZ Nexus, Berlin, Germany. Email: info@az-nexus.com. We have not appointed a data protection officer, as we are not required to; you can reach us at the address above for any privacy question.
2. What we collect and why
Visiting the website. Our hosting provider, united-domains, automatically records technical data when a page is loaded: IP address, date and time, the page requested, the referring page, browser type and operating system. We use this to deliver the site securely and to detect abuse. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Server logs are deleted after 7 days unless needed to investigate an incident.
Contact form and email. The form on this site is delivered by Formspree (Formspree, Inc., USA), which forwards your entry to us and stores it under its own privacy policy. If you write to us, we process the details you give us (name, company, email, website, country of registration, industry, card volume, current provider and your message) to answer your request and, if you ask us to, to assess which payment providers might fit your business. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and, where you send us more than we asked for, our legitimate interest in handling your enquiry (Art. 6(1)(f)). We keep enquiry data for as long as needed to handle your request and then for up to 12 months, unless a business relationship follows, in which case statutory retention periods apply.
Uploaded processing statements. If you upload a statement, it contains financial information about your business and may contain personal data of your staff or customers. We use it solely to prepare the fee check you asked for. Uploads are stored securely, encrypted at rest, accessible only to the two founders, and deleted 30 days after we send you the fee check unless you engage us further. We never pass a statement to a provider without your explicit instruction. Legal basis: Art. 6(1)(b) GDPR. Please do not upload documents containing cardholder data (full card numbers); redact them first.
Booking a call. Calls are booked through Calendly (Calendly LLC, USA) at calendly.com/az-nexus-info/15min. When you book, Calendly processes your name, email and the time you chose under its own privacy policy. We receive the booking details to hold the call. Legal basis: Art. 6(1)(b) GDPR. Transfers to the USA rely on the EU–US Data Privacy Framework or standard contractual clauses.
3. Cookies and analytics
The site uses only technically necessary cookies and local storage needed to display the site correctly. We do not use analytics or tracking tools. Fonts are loaded from Google Fonts, which transmits your IP address to Google; legal basis: our legitimate interest in consistent presentation (Art. 6(1)(f)).
4. Who receives your data
We share personal data only with service providers we need to run the site and handle your request: our hosting provider united-domains (Germany), our form service Formspree (USA), our email and file storage providers, and our booking tool Calendly (USA). Each acts on our instructions under a data processing agreement (Art. 28 GDPR). We pass details of your business to a payment provider only when you ask us to introduce you, and we tell you which provider beforehand. We do not sell personal data.
5. Transfers outside the EU
Some providers named above may process data outside the European Economic Area. Where they do, we rely on an adequacy decision, the EU–US Data Privacy Framework, or standard contractual clauses approved by the European Commission. You can ask us for a copy of the relevant safeguards.
6. How long we keep data
We keep personal data only as long as needed for the purpose it was collected for, and afterwards only where a legal duty requires it (for example, six or ten years for commercial and tax records under the German Commercial Code and Fiscal Code). Retention periods for specific data are set out in section 2.
7. Your rights
Under the GDPR you have the right to access the personal data we hold about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on our legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any right, write to info@az-nexus.com. You also have the right to lodge a complaint with a supervisory authority; for us that is the Berlin Commissioner for Data Protection and Freedom of Information, or the authority in your own country.
8. Security
The site is served over HTTPS. Uploaded documents are encrypted at rest and access is limited to the founders. We review our providers' security measures and require them to meet the standard in Art. 32 GDPR.
9. Changes
We update this policy when our processing changes. The date at the top shows the current version.