This Privacy Policy explains how Nexops360 LLC processes your personal data when you visit our website, contact us, or engage our consulting services. It also explains what rights you have under applicable data protection laws.
We believe that transparency is an essential component of responsible business relationships. This Privacy Policy is provided to meet our legal obligations and clearly outline how we handle personal data.
This Agreement is drawn up in English and may be provided with a German translation for convenience only. In case of discrepancies, the English version shall prevail and be legally binding.
1. General Information
Protecting your personal data is of utmost importance to us. We handle your personal data confidentially and in accordance with applicable data protection laws as well as this Privacy Policy. When you use this website or contact us, various personal data are collected. Personal data means any information relating to an identified or identifiable person. This Privacy Policy explains which data we collect, how we use it, and what rights you have regarding your data.
Please note that data transmission over the internet (e.g., via email) may have security vulnerabilities. A completely secure transmission cannot be guaranteed.
For users in the European Union, United Kingdom, Switzerland, and Australia, the respective national and supranational data protection laws apply, in particular the GDPR (General Data Protection Regulation), the UK GDPR, the Swiss Federal Act on Data Protection (nDSG), and the Australian Privacy Act 1988 including the Australian Privacy Principles (APPs). We also comply with these frameworks where applicable.
2. Data Controller
The controller responsible for data processing on this website is:
Nexops360 LLC
3833 Powerline Rd / Suite 701/M, Fort Lauderdale, FL 33309, USA
Email: legal@nexops360.com
EU, CH and UK Representative
Nexops360 LLC is established in the United States and does not currently process personal data of EU or UK residents in the context of actively offering services in those jurisdictions. Should this change and Article 27 GDPR or Article 27 UK GDPR become applicable, Nexops360 LLC will appoint a designated representative in the EU and UK respectively prior to commencing such activities. This Privacy Policy will be updated accordingly. In the meantime, all data protection enquiries may be directed to legal@nexops360.com.
Swiss Representative (nDSG Art. 14): Nexops360 LLC does not currently process personal data of Swiss residents in the context of regularly offering services in Switzerland. Should this change and Article 14 nDSG become applicable, Nexops360 LLC will appoint a designated representative in Switzerland prior to commencing such activities. This Privacy Policy will be updated accordingly.
3. What Data We Process
Depending on how you use our website and services, we process the following categories of personal data:
a) Website Visitors
Server log data (e.g., IP address, date and time of access, browser type, operating system, referrer URL)
Contact form data (name, email address, message text)
Newsletter data (email address, registration date, double opt-in status, interaction data)
Technically necessary cookies required for website operation
These data are required for the secure and stable operation of the website and are not used for tracking or profiling.
If you contact us via the contact form, we process the data you provide (name, email address, message text) solely to respond to your inquiry.
To protect our forms from spam and automated abuse, we use Zoho Forms Captcha (provided by Zoho EU BV, Amsterdam).
This may process your IP address, device information, and interaction data for security verification purposes. This process may involve a transfer of data to Netherlands. We have ensured appropriate safeguards are in place, in particular Standard Contractual Clauses pursuant to Art. 46 GDPR. This processing is based on our legitimate interest in protecting our website and users from automated abuse pursuant to Art. 6(1)(f) GDPR.
For further information, please refer to Zoho's privacy policy at: Link.
b) Customers and Business Partners
Contact and communication data (e.g., name, email, phone number, company name)
Contract and billing data (e.g., address, service details)
Project-related content (e.g., tasks, business process descriptions, SOPs), excluding personal data unless strictly necessary and minimised.
Data Minimization: Clients are requested to redact or anonymize any personal data of their employees or third parties (e.g., full names, private addresses) within shared documents (like SOPs) that are not strictly necessary for the analysis.
CRM data (e.g., communication stored in Zoho, status, history)
Email interaction data (e.g., open rates, click tracking via Zoho Campaigns/Analytics) for clients and newsletter subscribers.
Video conference data (e.g., names, timestamps, content from Zoho Meetings)
Voluntarily provided data in online tools such as Miro
We process these data for initiating, executing, and managing customer relationships, project management, and legal compliance.
4. Data Retention
We retain personal data only as long as necessary for the purposes stated:
Contract data: 10 years (commercial/tax laws)
Communication data: 2 years after last contact
Newsletter data: until unsubscription, deleted within 30 days thereafter
Momentum Check documents: 180 days after the final presentation of results, unless follow-up services (e.g., "Momentum Clarity") are engaged or statutory retention requirements apply.
Lead Magnet survey responses (Momentum Snapshot): deleted within 90 days of delivery of results, or immediately if the submission is not confirmed via email.
If you exercise your right to deletion or withdraw your consent, your data will be deleted unless statutory retention requirements apply.
5. Legal Basis for Processing
If you have consented to data processing, this is based on Art. 6(1)(a) GDPR.
Processing based on consent to cookies or device access is carried out in accordance with applicable national laws implementing the ePrivacy Directive.
If processing is necessary to fulfil a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR.
Processing to comply with legal obligations is based on Art. 6(1)(c) GDPR.
Otherwise, processing is based on legitimate interests (Art. 6(1)(f) GDPR), e.g., secure website operation and internal communication.
International data transfers are primarily based on Standard Contractual Clauses (Art. 46 GDPR) combined with Transfer Impact Assessments. Only in exceptional cases, and if you have explicitly consented, may transfers rely on Art. 49(1)(a) GDPR.
6. Recipients of Personal Data
We work with various service providers and partners, to whom personal data may be disclosed only:
to fulfil contracts (Art. 6(1)(b) GDPR),
due to legal obligations (Art. 6(1)(c) GDPR),
on legitimate interest (Art. 6(1)(f) GDPR), or
with your explicit consent (Art. 6(1)(a) GDPR).
If providers process data on our behalf, this occurs under data processing agreements (Art. 28 GDPR).
7. International Data Transfers
Where personal data is transferred to third countries (including the United States), such transfers are carried out only where appropriate safeguards are in place, in particular Standard Contractual Clauses (EU 2021/914), combined with Transfer Impact Assessments.
Where applicable, additional safeguards under the EU-U.S. Data Privacy Framework, Executive Order 14086, the UK Addendum, and the Swiss FADP are taken into account. These measures do not eliminate all risks but are intended to ensure an adequate level of protection.
We also implement Transfer Impact Assessments (TIA) to evaluate and mitigate risks.
For UK and Swiss transfers, the UK Addendum and Swiss Addendum apply.
For Australian users, please note that data may be processed outside Australia, especially in the USA and EU, always respecting the Privacy Act 1988 principles. We do not transfer data to “overseas recipients” without appropriate safeguards in place.
8. Your Rights
Under GDPR, you have the right to:
Access your personal data (Art. 15 GDPR)
Rectify inaccurate data (Art. 16 GDPR)
Erase data (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to data processing (Art. 21 GDPR)
Withdraw consent at any time (Art. 7(3) GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please email legal@nexops360.com.
Equivalent rights apply under UK GDPR, the Swiss Federal Act on Data Protection (nDSG), and the Australian Privacy Act 1988. You may also lodge a complaint with the supervisory authority in your jurisdiction: in the EU, the relevant national data protection authority; in the UK, the Information Commissioner's Office (ico.org.uk); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch); in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).
9. Hosting
Our website is hosted by:
Hostinger International Ltd.
Jonavos g. 60C, 44192 Jonava, Lithuania
Privacy Policy: [Link]
A data processing agreement (DPA) is in place with this provider.
10. Data Collection and Security Technologies on our Website
In addition to the information described in section 3a, the following technical data processing occurs when you use our website.
Contact Form: Data submitted via the contact form are used only to handle your inquiry. Legal basis is Art. 6(1)(b) or (f) GDPR.
Document Uploads / Project Data: If you provide documents (e.g., SOPs) via our website or encrypted channels for analysis purposes, these are processed exclusively to fulfill the consulting mandate (Art. 6(1)(b) GDPR).
Cookies: This website uses only technically necessary cookies required for the website to function. No analytics, marketing, or tracking cookies are used.
We do not use analytics cookies, marketing cookies, tracking technologies, or profiling tools, other than the security-related CAPTCHA processing described above.
Server log files are automatically processed by our hosting provider (Hostinger) to ensure secure and stable operation of the website. These logs include IP addresses and technical access data and are not used for tracking purposes.
Technically necessary cookies used for website functionality and security do not contain personal data directly identifying you.
11. Third-Party Tools and Platforms
Provider & Location:
Hostinger - EU
Zoho - EU
Miro - EU with limited third-country access (safeguard: Standard Contractual Clauses)
12. Data Transmission Security
This site uses TLS encryption (https). You can recognize a secure connection by the lock symbol in your browser’s address bar.
13. Governing Law & Jurisdiction
This Privacy Policy is subject to applicable data protection law. The mandatory data protection rights of individuals under applicable law - including GDPR, UK GDPR, the Swiss nDSG, and the Australian Privacy Act 1988 - apply regardless of any governing law clause in any separate commercial agreement with NEXOPS. To exercise your rights, contact legal@nexops360.com.
14. Copyright and Prohibited Use
The content created by us on this website is protected by copyright. Any duplication, editing, distribution, or other use beyond copyright limits requires our written consent. Use of our content or systems for illegal, defamatory, fraudulent, or offensive purposes is prohibited. The use of automated systems, including AI-based tools, for unlawful, abusive, or infringing purposes in relation to our content or systems is prohibited.
15. Data Protection Contact
For data protection concerns, please contact us at: legal@nexops360.com
Data protection matters to us.
Privacy Policy
