Privacy Policy
This notice explains how Nexa Holding Ltd processes the personal data of visitors to nexaholdingltd.com. It is issued under Regulation (EU) 2016/679 (GDPR).
Last updated: 2026-10-03
In short
This website is made of static pages. It sets no cookies, uses no analytics or tracking tools, does not profile visitors and loads no resources from external domains. The contact form does not send data to a server of ours: it opens the visitor's own email program with the message already filled in.
Data controller
The data controller is Nexa Holding Ltd, registered office at 1, Lyuben Karavelov, 1000 Sofia, Bulgaria.
For any matter concerning personal data you can write to info@nexaholdingltd.com.
Data collected while browsing
As with any website, the provider hosting these pages automatically records technical information with every request: IP address, date and time, page requested, browser type and operating system.
This data is not used to identify visitors: it serves to deliver the service, keep it secure and diagnose faults. The site is hosted by [name of hosting provider], acting as a data processor.
Contact form
The form on the Contact page works differently from most web forms. The details entered — first name, last name, company, email address and message — are not transmitted to a server: on pressing Send, the browser opens the visitor's email program with the message already composed, which they remain free to edit or not to send.
The data therefore reaches us only if the visitor chooses to send the email, and we receive it as an ordinary email message.
Language preference
When you choose a language, the site stores it in your browser using local storage (localStorage), under the key nexa-lang. Its only purpose is to open the site in the right language next time.
The stored value is the language code (it, en or bg). It is never sent to any server, does not identify the visitor, and can be deleted at any time by clearing the site's data in your browser settings.
Typefaces
The Inter typeface used on these pages is hosted on the same servers as the website and is not loaded from any external service. As a result, browsing involves no disclosure of data to third parties: the browser contacts no domain other than nexaholdingltd.com.
Inter is distributed under the SIL Open Font License 1.1.
Purposes and legal bases
We process personal data for the following purposes:
- Responding to enquiries received by email and managing preliminary contact with prospective partners or businesses. Legal basis: steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
- Keeping the website working and secure. Legal basis: the controller's legitimate interest in providing a functioning and protected service (Art. 6(1)(f) GDPR).
- Complying with legal obligations, where applicable (Art. 6(1)(c) GDPR).
Who we share data with
Data is not published, sold or transferred to third parties for commercial purposes.
It may be accessed, strictly as needed for their task, by the hosting provider, the email service provider and, where engaged, professional advisers bound by confidentiality. These parties act as processors appointed under Art. 28 GDPR.
How long we keep data
Emails received through the form are kept for as long as needed to handle the enquiry and for any subsequent period in which a relationship may develop; where there is no follow-up, no longer than 24 months.
Technical server logs are kept by the hosting provider for only as long as security requires, normally a few months.
Your rights
At any time you may exercise the rights set out in Articles 15 to 22 GDPR:
- access the data concerning you and obtain a copy;
- request its rectification, if inaccurate or incomplete;
- request its erasure;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive the data in a structured format and transfer it to another controller.
To exercise them, write to info@nexaholdingltd.com. We reply within one month of receiving the request.
Complaint to the supervisory authority
If you believe the processing of your data breaches the law, you may lodge a complaint with the Bulgarian supervisory authority:
- Commission for Personal Data Protection (Комисия за защита на личните данни)
- 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
- kzld@cpdp.bg — www.cpdp.bg
Alternatively, you may contact the supervisory authority of the Member State where you live or work.
Minors
This site addresses a professional audience and is not intended for children under sixteen. We do not knowingly collect personal data from minors.
Changes to this notice
This notice may be updated, for instance if new services are enabled. The version in force is always the one published on this page, with the last-updated date shown above.