Privacy Policy

1. Data controller

The data controller is Nexerius s.r.o., Company ID (IČO): 23007907, registered office Tovární 145, 431 86 Kovářská, Czech Republic, registered with the Regional Court in Ústí nad Labem, section C, file 53628 (the „Controller“). Contact for data protection matters: info@nexerius.cz.

Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.

2. Key principle – documents stay local

The Nexerius Merge application processes your documents, templates and data spreadsheets (PDF, CSV, Excel) exclusively locally on your device and does not transmit any document data to our servers or to third parties. The content of generated documents, the names of people in the data, template names and cell contents never reach us.

The processing described below concerns only the data necessary for the purchase and license management.

3. What data we process and why

a) Purchase data – the customer’s name and e-mail address.

• Purpose: delivery of the license key and record-keeping for accounting.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with a legal obligation (accounting and tax law).

b) Data in the license server – when the application is activated on a device, we process:

• a hash of the installation identifier (installId – a random ID generated by the app; only its fingerprint is stored, not the original value),
• a hash of the IP address (the raw IP is never stored or logged),
• a device label and the application version,
• license activation and refresh timestamps.

• Purpose: verifying license validity, binding the license to the permitted number of devices, protection against misuse.
• Legal basis: performance of a contract and the legitimate interest of the Controller (Art. 6(1)(f) GDPR) in protecting the license against misuse.

4. Recipients (processors)

Sales and invoicing are handled directly by the Controller; ordering and delivery of the license key take place via ordinary e-mail communication. We share data only with the necessary processors:

• VPS hosting provider – operation of the license server and database (technical processing of the data above).
• E-mail mailbox provider – delivery of orders and the license key (name, e-mail).

These processors handle data under data processing agreements and only for the stated purposes. Some recipients may process data outside the EU; in such cases appropriate safeguards are in place (e.g. standard contractual clauses).

5. Retention period

Purchase data is retained for the duration of the license and thereafter for the period necessary to meet accounting and tax obligations (generally 10 years for accounting documents under Czech law). License server data (activations) is retained for the validity of the license and for a reasonable period afterwards for audit and misuse-protection purposes.

6. Your rights

In relation to your personal data, you have the right to:

• access your data and obtain a copy,
• have inaccurate data corrected,
• erasure („right to be forgotten“), unless a legal obligation prevents it,
• restriction of processing and data portability,
• object to processing based on legitimate interest,
• lodge a complaint with the Czech Data Protection Authority (uoou.gov.cz) or your local supervisory authority.

You can exercise your rights by e-mail at info@nexerius.cz. We may ask for additional information to verify your identity.

7. Cookies and analytics

The nexerius.cz marketing website uses only technically necessary elements for its operation. Any analytics or marketing tools, if deployed, will be used only with your consent.

8. Related documents

The terms of use and license agreement can be found in the Terms & Conditions and License Agreement.