GDPR Compliance

Our commitment to protecting your data under the General Data Protection Regulation

GDPR Compliant

NexusWork AI is fully compliant with the EU General Data Protection Regulation (GDPR). We are committed to protecting and respecting your privacy and ensuring transparent data processing practices.

Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data under certain circumstances.

Right to Restrict Processing

Request limitation of how we use your data.

Right to Data Portability

Receive your data in a structured, commonly used format.

Right to Object

Object to certain types of processing, including direct marketing.

Right to Withdraw Consent

Withdraw consent for processing at any time.

How We Protect Your Data

  • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Data Minimization: We collect only the data necessary for our services
  • Retention: Data is retained only as long as necessary
  • Access Controls: Strict access controls and audit logs
  • DPO: Dedicated Data Protection Officer oversees compliance

Data Processing

We process personal data on the following legal bases:

  • • Consent: When you have given explicit consent for specific purposes
  • • Contract: To fulfill our contractual obligations to you
  • • Legal Obligation: To comply with legal requirements
  • • Legitimate Interest: For our legitimate business interests, balanced against your rights

International Data Transfers

When we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including:

  • • Standard Contractual Clauses (SCCs)
  • • Adequacy decisions by the European Commission
  • • Binding Corporate Rules

Exercising Your Rights

To exercise any of your GDPR rights, please contact our Data Protection Officer:

We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.