Privacy Policy — Nexa Capital

1. Introduction

This Privacy Policy describes how Nexa Capital SAS (hereinafter "Nexa Capital", "we") collects, uses, stores, and protects the personal data of users of the website https://nexa-capital.fr (hereinafter "the Website").

Nexa Capital SAS is committed to complying with applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (hereinafter "GDPR") and the French Data Protection Act (Loi Informatique et Libertés) of January 6, 1978, as amended.

2. Data Controller

The data controller for personal data is:

Nexa Capital SAS
SIRET: 941 798 555 00012
Email: contact@nexa-capital.fr
Publication Director: Anis Redzic

3. Data Collected

3.1. Data Collected via the Contact Form

When you use the Website's contact form, we collect the following data:

Full name
Professional email address
Message content

Legal basis: legitimate interest (responding to your contact request) — Article 6.1.f of the GDPR.

3.2. Data Collected via the Media Kit Download Form

When you request to receive our Media Kit, we collect:

Professional email address

Legal basis: user consent — Article 6.1.a of the GDPR.

3.3. Browsing Data (Cookies)

We collect anonymized browsing data via Google Analytics. This data includes:

IP address (anonymized)
Browser type and operating system
Pages visited and visit duration
Traffic source (referrer)
Approximate geolocation data (country, city)

Legal basis: user consent via the cookie management banner — Article 6.1.a of the GDPR.

4. Purposes of Processing

Personal data collected is processed for the following purposes:

Responding to contact and information requests
Sending the Media Kit to users who request it
Analyzing website traffic and browsing behavior to improve content and usability
Ensuring the security and proper functioning of the Website

5. Cookies

5.1. What is a Cookie?

A cookie is a small text file stored on your device (computer, tablet, smartphone) when you visit the Website. It collects information about your browsing activity.

5.2. Cookies Used on the Website

Cookie	Provider	Purpose	Duration	Type
_ga	Google Analytics	Distinguish unique users	2 years	Analytics
_ga_*	Google Analytics	Maintain session state	2 years	Analytics

5.3. Cookie Management

On your first visit, a banner allows you to accept or decline non-essential cookies. You can change your preferences at any time:

via the "Manage cookies" link accessible in the Website footer;
via your browser settings (deleting or blocking cookies).

Declining analytics cookies does not affect your browsing experience on the Website.

6. Data Recipients

Personal data collected is accessible exclusively to:

Nexa Capital SAS internal teams authorized to process requests;
Google LLC, as a data processor for traffic analysis (Google Analytics).

Nexa Capital SAS does not sell, rent, or otherwise transfer the personal data of its users to third parties for commercial purposes under any circumstances.

7. Transfers Outside the European Union

Google Analytics may involve data transfers to the United States. This transfer is governed by the EU-US Data Privacy Framework (DPF), in accordance with the European Commission's adequacy decision.

8. Data Retention Period

Data	Retention Period
Contact form (name, email, message)	12 months after the last exchange
Media Kit email	36 months after collection
Google Analytics cookies	26 months maximum

Beyond these periods, data is deleted or irreversibly anonymized.

9. Data Security

Nexa Capital SAS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:

encryption of communications via the HTTPS protocol (SSL/TLS certificate);
restricted data access limited to authorized personnel only;
regular updates of systems and software.

10. User Rights

In accordance with the GDPR, you have the following rights over your personal data:

Right of access: obtain confirmation of the processing of your data and receive a copy.

Right to rectification: request the correction of inaccurate or incomplete data.

Right to erasure: request the deletion of your data under the conditions provided by the GDPR.

Right to restriction of processing: request the temporary suspension of the processing of your data.

Right to object: object to the processing of your data based on legitimate interest.

Right to data portability: receive your data in a structured, machine-readable format.

Right to withdraw consent: withdraw your consent to cookie placement at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

Exercising Your Rights

To exercise any of these rights, please send your request along with proof of identity to:

Email: contact@nexa-capital.fr

We are committed to responding within one month of receiving your request, in accordance with the GDPR.

11. Complaint to the Supervisory Authority

If you believe that the processing of your personal data constitutes a violation of the GDPR, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07
Website: https://www.cnil.fr

12. Changes to the Privacy Policy

Nexa Capital SAS reserves the right to modify this policy at any time. Any changes will be published on this page with the updated date. Continued use of the Website after publication constitutes acceptance of the modified policy.

13. Contact

For any questions regarding the protection of your personal data:

Nexa Capital SAS
Email: contact@nexa-capital.fr