1. Controller and contact
The controller for personal data processed through this website is Nextergon GmbH, Cremon 11, 20457 Hamburg, Germany, represented by its managing directors Christian Tetens and Jürgen Lang.
For privacy questions or to exercise your rights, contact info@nextergon.ai.
2. Website and hosting with IONOS
We use Web Hosting Plus from IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, to host our public website.
When you visit a publicly hosted website, the server processes technical data, including your IP address, the time of access and the requested content, to deliver the page. Technical logs help diagnose errors and maintain security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a reliable and secure website.
For its Web Hosting product, IONOS describes data about the requested file, browser, operating system, device, referrer and access time, together with anonymised IP addresses. IONOS states a retention period of eight weeks for that product. IONOS also states that its Web Hosting product does not transfer visitor data to third countries. These are the provider’s product descriptions; additional services must be considered separately. See IONOS information on Web Hosting data processing.
IONOS describes WebAnalytics as enabled by default for statistics and technical optimisation. According to the provider, collection uses logfiles or a pixel, without cookies, with the IP address anonymised immediately after transmission. This static website contains no IONOS tracking pixel. IONOS processes server access logs. Where this statistical analysis involves personal data, we rely on Article 6(1)(f) GDPR; our legitimate interest is improving the website’s technical operation. The optional Cloudflare CDN is not in use.
The processing agreement is part of the IONOS terms applicable to our Web Hosting Plus contract.
3. Preferences and browser storage
When you choose light or dark appearance using the appearance switch, we store that preference locally in your browser under nextergon-v28-theme. It remains until you delete the website data. The website does not send this value to us. The language follows the page address you visit.
Switching languages during the AI check also uses the session storage described in section 4. These storage operations enable functions you have expressly requested. Device access is based on section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed, Article 6(1)(f) GDPR applies; our legitimate interest is providing your chosen appearance and language switch.
4. AI check
Your answers are evaluated entirely in your browser. The check asks for neither your name nor your email address and sends neither answers nor results to Nextergon or an external AI service. It offers initial guidance and does not make decisions with legal or similarly significant effects.
When you switch languages, your answers and display state are temporarily stored under nextergon-v28-language-quiz in the tab’s session storage. The entry is removed after the destination page attempts to restore it; otherwise, it expires with the browser session. Answers remain in the open page’s memory until you reset the check or leave the page.
The introductory-call link does not transfer your answers either. You decide what to share with us. Use of the check is voluntary.
5. Email enquiries
When you write to info@nextergon.ai, we process your sender and contact details, message and any attachments to respond to your enquiry.
Article 6(1)(b) GDPR applies to enquiries concerning a contract with you. For enquiries from business contacts and other business correspondence, we rely on Article 6(1)(f) GDPR; our legitimate interest is responding to the enquiry.
We delete the data once the matter has been resolved, unless statutory retention obligations or the establishment, exercise or defence of legal claims require further retention. Without the information needed to respond, we may be unable to handle your enquiry.
We use Microsoft 365 / Exchange Online to receive, store and handle business email. Microsoft processes message contents, attachments and technical connection and delivery data on our behalf under its Products and Services Data Protection Addendum (DPA). Our tenant currently stores Exchange Online data at rest in Germany. Limited exceptions to the EU Data Boundary permit transfers outside that boundary; we do not guarantee that all processing occurs exclusively in Germany.
This may also involve Microsoft Corporation in the USA and other subprocessors. For international transfers, Microsoft describes in particular the DPA’s Standard Contractual Clauses and the EU-US Data Privacy Framework for appropriately certified recipients. Microsoft’s guidance on roles and transfers explains these mechanisms. Microsoft acts as a controller when processing data for limited business purposes of its own; see its Privacy Statement.
6. Google Analytics
We do not use Google Analytics on this website.
7. Calendly scheduling and online meetings
For online scheduling, we link to Calendly, LLC, 115 E Main St, Ste A1B, Buford, GA 30518, USA. Calendly is not embedded; a connection is established only when you open the booking link. You may also arrange a meeting by email.
Online booking is optional. Your name, email address and appointment selection are required; without them, online booking is not possible. We also process your time zone, any additional guests and optional information about your enquiry. Calendly may also process technical connection and usage data. Please do not enter confidential project documents or sensitive personal data in the booking form.
The legal basis is Article 6(1)(b) GDPR for enquiries concerning a contract with you, and Article 6(1)(f) GDPR for business contacts; our legitimate interest is arranging meetings efficiently.
Calendly processes booking data on our behalf under its Data Processing Addendum, incorporated into the Customer Terms. Processing takes place in the USA and other countries. Calendly participates in the EU–US Data Privacy Framework; its DPA provides standard contractual clauses as a fallback if that transfer mechanism ceases to apply. Where Calendly processes data for its own purposes, its Privacy Notice explains its role.
We retain booking data only as long as needed to organise the meeting and handle subsequent enquiries. We arrange deletion when those purposes no longer apply, unless statutory retention obligations or the establishment, exercise or defence of legal claims require further retention. This also applies to copies in our calendar and email system.
Online meetings take place via Microsoft Teams. Microsoft processes participant and connection data and the audio, video and chat content you choose to share under the processing terms described in section 5. We use the same legal bases as for scheduling. Calendly Notetaker is disabled; we do not use it to automatically record, transcribe or summarise these calls.
8. Fonts, images and external links
Fonts and images are served from our own website files. It has no embedded external video or social media modules and does not offer a newsletter.
Our founders’ personal LinkedIn profiles are ordinary links. You access the provider’s service only when you open a link; its own privacy information then applies. Our website does not load a LinkedIn plugin.
9. Recipients, transfers and retention
Access is limited to people who need the data to deal with the relevant matter and the technical providers used for that purpose. Providers processing data on our behalf are engaged under Article 28 GDPR. Data is shared with authorities or advisers only where there is a legal basis.
Transfers outside the European Economic Area must meet the requirements of Articles 44 onwards of the GDPR. Information about the individual providers and their transfer mechanisms is set out in sections 2, 5 and 7. The EU-US Data Privacy Framework applies only to appropriately certified recipients and the data covered.
Personal data is retained only for as long as the purpose or a statutory obligation requires. The periods or deletion criteria in each section apply. On request, we explain the applicable transfer mechanisms and provide information about the safeguards.
10. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.
Right to object: You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may object to processing for direct marketing at any time without giving a reason.
You may lodge a complaint with a data protection authority, particularly where you live or work, or where an alleged infringement occurred. For Hamburg, the authority is the Hamburg Commissioner for Data Protection and Freedom of Information. To contact us, use info@nextergon.ai.
Last updated: 3 November 2026.