Conexa Digital← Back

Legal

Privacy

1. Data controller

Conexa Digital (a brand of Merust Trust SL), represented by Eugen Neifer, CL Río Cervol 2, 46940 Manises (Valencia), Spain. E-mail: info@conexadigital.eu

2. Data collection when visiting this site

When you access conexadigital.eu, technical log files are written on the Hetzner server in Nuremberg: IP address, browser type, referrer URL, timestamp. The data is used solely to keep the service running and is automatically deleted after 7 days. Legal basis: art. 6(1)(f) GDPR.

3. Cookies and local storage

Technically necessary: This site stores your language preference as a cookie (NEXT_LOCALE), together with your cookie decision and an optional loading-screen preference, in your browser's localStorage; the region used for price display is kept in sessionStorage for the duration of the session. This storage is required to operate the site (§ 25(2) TDDDG; art. 6(1)(f) GDPR). Analytics cookies: Google Analytics 4 is loaded only after your explicit consent via the cookie banner (opt-in) — no analytics cookies are set without consent. Legal basis: § 25(1) TDDDG in conjunction with art. 6(1)(a) GDPR. You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer.

4. Web analytics — Google Analytics 4

With your consent, we use Google Analytics 4 (measurement ID G-7WWLSC4J4Q), a web analytics service provided by Google Ireland Limited (Dublin, Ireland). The purpose is reach measurement: we evaluate how our website is used in order to improve it. To this end, GA4 sets cookies (including “_ga” and “_ga_*”). The IP address is processed in anonymised form. The cookies set by GA4 have a lifetime of up to 24 months; the retention of analytics data in GA4 is limited to a maximum of 14 months. This may involve a transfer of data to Google LLC in the USA; it is safeguarded by appropriate guarantees pursuant to art. 44 et seq. GDPR, in particular the EU-US Data Privacy Framework (DPF), under which Google LLC is certified, supplemented by standard contractual clauses (SCC). The sole legal basis is your consent (art. 6(1)(a) GDPR; § 25(1) TDDDG). Without consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future via “Cookie settings” in the footer.

5. Getting in touch

If you contact us via the request form or by e-mail, we process the data you provide: name, e-mail address and — where given — company, package of interest, goal, industry and current website, plus your message and your consent. Delivery is handled via our processor Resend as an e-mail to our inbox (info@conexadigital.eu); as a fallback, the enquiry is stored on our server. We do not pass the data on without your consent. Retention period: until the purpose is fulfilled, after which the data is regularly deleted (at least quarterly). Legal basis: art. 6(1)(b) and (f) GDPR.

6. Services used

We explicitly prefer European data processors:

  • Hetzner Online GmbH, Gunzenhausen (DE) — hosting + backup. DPA in place.
  • Supabase EU (Ireland) — database + auth. DPA in place.
  • Resend (US/EU-routed) — transactional mail (contact form). Data is not reused for marketing purposes. DPA concluded; any transfer to the USA is safeguarded by standard contractual clauses.
  • Vercel — build/preview hosting (no production data traffic).
  • Cloudflare — DNS/CDN and website protection; for the price region, only the country of origin is read from a Cloudflare header, without storage in the application code. Legal basis: art. 6(1)(f) GDPR. DPA concluded; any transfer to the USA is safeguarded via the EU-US Data Privacy Framework or standard contractual clauses.
  • Google Analytics 4 (Google Ireland Limited, Dublin, Ireland) — reach measurement, exclusively after consent (art. 6(1)(a) GDPR); this may involve a transfer to the USA (Google LLC), safeguarded pursuant to art. 44 et seq. GDPR (EU-US Data Privacy Framework, supplemented by standard contractual clauses). Details in section 4.

No processing of your data by AI systems takes place via this website. We provide AI-supported services exclusively under contract and on a project basis for clients, not towards website visitors.

7. Your rights

  • Access (art. 15 GDPR)
  • Rectification (art. 16 GDPR)
  • Erasure (art. 17 GDPR)
  • Restriction of processing (art. 18 GDPR)
  • Data portability (art. 20 GDPR)
  • Objection (art. 21 GDPR)
  • Complaint to a supervisory authority (art. 77 GDPR)

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on art. 6(1)(f) GDPR (art. 21 GDPR). The supervisory authority responsible for the controller is the Spanish data protection authority (Agencia Española de Protección de Datos — AEPD, www.aepd.es); you may also contact the supervisory authority at your habitual place of residence. No automated decision-making, including profiling, within the meaning of art. 22 GDPR takes place.

8. SSL/TLS encryption

For security reasons, this site uses TLS encryption. You can recognise this by the lock icon in your browser and the https:// prefix.

As of: July 2026.