Privacy policy

Last updated: 12 August 2026

Nexus MP SRL attaches real importance to the protection of your personal data. This policy explains what we collect through www.nexus-mp.com, why, on what legal basis, how long we keep it and what rights you have. It is written in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018.

1. Data controller

Controller: Nexus MP SRL
Company number / VAT: BE 1028.875.931
Address: 4000 Liège, Belgium
Contact: m.paillet@nexus-mp.com

Given the nature and scale of our activities, we are not required to appoint a Data Protection Officer. Any request relating to your data can be sent to the address above.

2. What we collect, and why

2.1 Contact form and email

When you contact us through the form or by email, we process the data you provide: name, email address, company (optional), type of request and the content of your message.

Purpose: answering your request, preparing a quote, and following up on a possible collaboration.
Legal basis: your consent (Art. 6(1)(a) GDPR) and/or the steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Consequence of not providing it: we simply cannot answer you.

2.2 Applications to the freelance network

If you apply to join our network of independent specialists, we process the data you choose to send us: name, email address, specialisation and skills, rate, availability, and any link or document you provide (portfolio, profile, CV).

Purpose: assessing your profile and contacting you when a mission matches your skills.
Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
Please do not send us sensitive data (health, political opinions, trade union membership, etc.). We do not need any.

2.3 Technical data (server logs)

Like any website, our hosting provider records technical data when a page is requested: IP address, date and time, page requested, browser and operating system type. From these logs, our host produces aggregated traffic statistics (number of visits, referring sources, most-viewed pages). These statistics are generated on the hosting infrastructure itself: no script is placed on your device, and nothing is sent to a third party.

Purpose: security of the site, detection of abuse, technical troubleshooting, and understanding in aggregate how the site is used.
Legal basis: our legitimate interest in keeping the site secure, available and useful (Art. 6(1)(f) GDPR).
Retention: raw logs are kept for a limited period, generally no more than 12 months; only aggregated figures remain afterwards.

3. Cookies and similar technologies

This website uses no advertising cookie, no tracking cookie and no analytics script. We do not use Google Analytics, Matomo or any equivalent, and we do not profile visitors.

Our traffic statistics are produced by our host from its own server logs (see 2.3), without placing any cookie or script on your device. This is why you are not greeted by a cookie banner: we made the technical choices that make it unnecessary, rather than asking you to click one away.

The only local storage that may be used is a strictly functional item recording your language preference, so that the site opens in the language you chose. It is stored in your browser, contains no identifier, and is not transmitted to us or to any third party. Such strictly necessary functional storage does not require prior consent either.

External resources (fonts, icons and framework libraries) are loaded from third-party content delivery networks. As a technical consequence of that request, your IP address is visible to those providers. They are not used to identify or track you here, and these resources can be self-hosted on request.

4. Who has access to your data

Your data is processed by Nexus MP SRL. It is never sold, rented or exchanged.

It may be accessible, strictly for the purposes described above, to a single technical processor:

Infomaniak Network SA (Rue Eugène-Marziano 25, 1227 Les Acacias, Switzerland), which hosts the website, its contact form and its email.

There is no other recipient. The contact form is processed on our own hosting, and traffic statistics are produced by our host from its own logs: no third-party service receives your data.

Our host acts on our instructions and is bound by a data processing agreement. Its servers are located in Switzerland, which benefits from an adequacy decision of the European Commission: transfers there require no additional safeguard.

Where a mission is carried out with a specialist from our network, no client data is shared without the client's prior agreement and an appropriate confidentiality framework.

5. How long we keep it

Requests without follow-up: 12 months from the last exchange.
Requests leading to a commercial relationship: for the duration of the relationship, then 5 years, in line with our legal and accounting obligations.
Freelance network applications: 2 years from the last exchange, unless you ask us to delete them sooner.
Server logs: generally no more than 12 months, depending on our hosting provider's settings.

6. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connection (HTTPS), access limited to what is necessary, up-to-date systems, and data minimisation — we do not ask for what we do not need. No system is invulnerable, but any breach likely to result in a risk to your rights would be notified in accordance with Articles 33 and 34 GDPR.

7. Your rights

Under the GDPR, you have the right to:

access your data and obtain a copy of it;
rectify it if it is inaccurate or incomplete;
erase it ("right to be forgotten"), where the conditions are met;
restrict its processing;
object to processing based on our legitimate interest;
data portability, in a structured and machine-readable format;
withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to m.paillet@nexus-mp.com. We will respond within one month. We may ask you for reasonable proof of identity if there is any doubt as to who is making the request.

8. Right to lodge a complaint

If you consider that the processing of your data infringes the GDPR, you may lodge a complaint with the Belgian supervisory authority:

Authority: Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit)
Address: Rue de la Presse 35, 1000 Brussels, Belgium
Contact: contact@apd-gba.be — www.dataprotectionauthority.be

9. Changes to this policy

This policy may be updated to reflect changes in our services or in the applicable rules. The current version is always the one published on this page, with its date of last update at the top. Any substantial change will be brought to the attention of the persons concerned where required.