Legal & Governance

1.1 Data Controller. NexoraWebLab, registered at 10179 Adalbertstraße 57, Berlin, Germany, is the data controller responsible for all personal data processed through our web applications, API endpoints, and consultation consoles.

1.2 Categories of Data Collected. We collect name, email address, phone number, project specifications, server configuration details, and usage telemetry necessary for service delivery and infrastructure optimization.

1.3 Legal Basis for Processing. Data is processed under Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in service improvement and security monitoring).

1.4 Data Retention Period. Client project data is retained for the duration of the active service relationship plus 24 months post-termination for audit and compliance purposes. Contact form submissions are retained for 12 months. Server logs are purged after 90 days.

1.5 Data Security. All personal data is encrypted at rest (AES-256) and in transit (TLS 1.3) within ISO 27001-certified EU data centers. Access is restricted to authorized personnel on a need-to-know basis.

1.6 Data Subject Rights. Under GDPR Articles 15–22, you have the right to access, rectify, erase, restrict processing, and port your personal data. You may also object to processing and lodge a complaint with the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

1.7 International Transfers. We do not transfer personal data outside the European Economic Area unless adequate safeguards (Standard Contractual Clauses or adequacy decisions) are in place.

2.1 Scope of Services. NexoraWebLab provides web application development, custom API pipeline architecture, scalable database design, CI/CD deployment, and ongoing maintenance services as detailed in individual Statements of Work (SOW).

2.2 Intellectual Property. Upon full payment, all intellectual property rights in client-specific deliverables (source code, design assets, configuration files) transfer irrevocably to the client. NexoraWebLab retains rights to general tools, methodologies, and reusable components developed independently.

2.3 Payment Terms. Invoices are due within 14 calendar days of issuance. Late payments incur a statutory interest rate of 9 percentage points above the ECB base rate. Project work may be paused for invoices outstanding beyond 30 days.

2.4 Project Timelines. Delivery estimates provided in SOWs are non-binding targets. NexoraWebLab uses commercially reasonable efforts to meet stated timelines but is not liable for delays caused by client-side dependencies, third-party integrations, or force majeure events.

2.5 Limitation of Liability. NexoraWebLab's total aggregate liability shall not exceed the total fees paid by the client under the applicable SOW in the 12 months preceding the claim. We are not liable for indirect, consequential, or punitive damages.

2.6 Confidentiality. Both parties agree to maintain the confidentiality of proprietary information shared during the engagement for a period of 3 years following termination.

3.1 Functional Cookies. NexoraWebLab uses strictly necessary cookies to maintain session state, remember user preferences, and ensure secure authentication. These cookies do not require explicit consent under the ePrivacy Directive.

3.2 Analytics Cookies. We may deploy privacy-respecting analytics tools (self-hosted, no third-party data sharing) to measure page performance, load times, and carbon-efficiency metrics. These cookies are only active after explicit user consent.

3.3 Cookie Duration. Session cookies expire when the browser is closed. Persistent cookies used for preference storage have a maximum lifespan of 12 months. All cookies are automatically purged upon consent withdrawal.

3.4 Third-Party Cookies. NexoraWebLab does not embed third-party advertising or tracking cookies. All analytics are processed internally within EU-hosted infrastructure.

3.5 Managing Cookies. Users may withdraw consent at any time via the cookie banner or by clearing browser storage. Disabling functional cookies may impair certain platform features.

4.1 Right of Withdrawal. Under German consumer protection law (§ 312g BGB), clients have a 14-day withdrawal period from the date of contract conclusion for remote services. Withdrawal must be communicated in writing to [email protected].

4.2 Project Milestone Refunds. For projects structured around milestone payments, refunds are available for work not yet commenced. Completed and delivered milestones are non-refundable. Any disputes regarding milestone deliverables will be resolved through good-faith mediation.

4.3 Retainer Cancellation. Monthly Eco-SLA retainer agreements may be cancelled with 30 days' written notice. The current billing period remains non-refundable, and no further charges will be applied after the notice period.

4.4 Refund Processing. Approved refunds are processed within 10 business days to the original payment method. NexoraWebLab reserves the right to deduct a reasonable administrative fee (up to 5%) for refunds requested after work has commenced.

4.5 Dispute Resolution. Any disputes arising from this refund policy shall be submitted to the competent court in Berlin, Germany, unless an alternative dispute resolution mechanism is agreed upon in the applicable SOW.