Privacy policy

1. Preamble

This privacy and cookie policy (the “Policy”) describes how your information is processed in connection with the site https://nexya.dev/en/ (the “Site”).

Please read it before using the Site. It explains how information relating to an identified or identifiable person (“Personal Data”, as defined in Article 4(1) of the General Data Protection Regulation) is collected, used and protected.

By browsing the Site, you acknowledge the processing of your Personal Data described here. If you do not accept it, please do not use the Site.

2. Data controller

Johan Porret, 1350 Orbe, Switzerland, is the controller of the Personal Data collected through the Site, within the meaning of Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and of the Swiss Federal Act on Data Protection (FADP).

nexya is a brand operated by the controller.

No data protection officer is appointed: the processing described here does not meet the conditions of Article 37 of the GDPR. Write to the controller for any request.

Contact: hello@nexya.dev

3. What we collect

When you browse

Our host keeps technical logs — IP address, date and time, page requested, browser — needed to run and secure the server. We only read them after an incident.

The choice of language needs no cookie: it is carried by the page address, so there is nothing to remember on your device.

The animation shown on your first arrival remembers that it has already played. Your browser keeps that in its session storage: it never reaches us and disappears when you close the tab.

If you accept audience measurement

We use Google Analytics 4 to know which pages are read and by how many people. It stores cookies and collects your IP address — truncated before storage —, the pages viewed, the length of the visit, the device type, the browser and the approximate country of origin.

These measurements serve only to improve the Site. We do not seek to identify you and we combine this data with no other source. No profiling and no automated decision within the meaning of Article 22 of the GDPR takes place.

When you write to us

The Site has no contact form. The “Write to nexya” button opens your own mail software. We therefore receive what you choose to put in your message: your email address, your name if you give it, and its content.

4. Cookies, in practice

On your first visit, a banner asks what you accept, as required by Article 5(3) of the ePrivacy Directive. Nothing is stored or executed before your answer: the measurement scripts are not merely idle, they are not loaded at all.

• Necessary cookies. They keep your consent choice and let WordPress recognise a logged-in administrator. They are strictly necessary and cannot be refused.
• Statistics cookies. Those of Google Analytics, described above. They are stored only with your consent.

You can change your mind at any time by clicking “Manage cookies” at the bottom of every page, or refuse and erase cookies in your browser settings. Withdrawing consent is as easy as giving it.

The detail of the cookies stored — their name, their issuer, their lifetime and what they are for — is kept up to date in our cookie policy, where you can also set your consent category by category.

5. Why we process it

• To answer you. Legal basis: steps taken at your request prior to a contract, or our legitimate interest in keeping up a correspondence — Article 6(1)(b) and 6(1)(f) of the GDPR.
• To measure traffic. Legal basis: your consent, which you can withdraw at any time — Article 6(1)(a) of the GDPR.
• To keep the Site secure and available. Legal basis: our legitimate interest in protecting our infrastructure — Article 6(1)(f) of the GDPR.

We process no special category of data within the meaning of Article 9 of the GDPR, and none of this processing is a condition for using the Site.

6. Disclosure to third parties

We neither sell nor rent your Personal Data, and we disclose it to no advertiser and no data broker.

Three providers are involved, as processors within the meaning of Article 28 of the GDPR, acting on our instructions and for no other purpose:

• Infomaniak Group SA, in Switzerland, which hosts the Site and keeps the server logs.
• Google Ireland Limited, for audience measurement, if you have accepted it.
• Our mail provider, for the delivery of the emails you send us.

7. Disclosure to authorities

We may have to disclose your Personal Data where the law requires it, or where we believe in good faith that such disclosure is reasonably necessary to answer a legal request, to enforce our rights, or to protect the safety of a person.

8. Transfers outside the EEA

The Site and its logs are hosted in Switzerland, which the European Commission recognises as offering an adequate level of protection. Audience measurements are processed by Google, which may transfer them to the United States: those transfers rely on the EU–US Data Privacy Framework and its Swiss extension, backed by the European Commission standard contractual clauses under Article 46(2) of the GDPR.

You may ask us for a copy of the safeguards that apply to a given transfer.

9. Retention

• Your messages: for the length of the exchange, then two years at most, so that we can find the context if you write again.
• Audience measurements: fourteen months, after which Google deletes them automatically.
• Server logs: a few weeks, according to the host settings.

We reserve the right to keep data in anonymised form, which no longer allows you to be identified, for statistical purposes.

10. Security and data breach

The Site is served over HTTPS, administration access is restricted and components are kept up to date. As no method of transmission or storage is infallible, we cannot guarantee absolute security.

Should a Personal Data breach be established or suspected, we undertake to identify its cause, to take the measures needed to remedy it, and to notify it — within 72 hours where Articles 33 and 34 of the GDPR require it — to the competent supervisory authority, to the Swiss Federal Data Protection and Information Commissioner, and to the persons concerned.

11. Your rights

Under Articles 15 to 22 of the GDPR you may at any time ask for access to your Personal Data, its rectification, its erasure, the restriction of its processing or its portability, withdraw your consent under Article 7(3), or object to processing based on our legitimate interest.

Write to hello@nexya.dev. We answer within one month, as Article 12(3) of the GDPR provides. We may ask you to prove your identity before acting, so as not to hand your data to someone else. Exercising these rights is free of charge.

You also have the right to lodge a complaint with a supervisory authority: the authority of your country of residence or of your place of work in the European Union, or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland.

12. Children’s data

The Site addresses professionals and offers no service intended for children within the meaning of Article 8 of the GDPR. We do not knowingly collect Personal Data concerning them. If you believe a child has sent us data, write to us and we will erase it.

13. Third-party sites

Some pages link to third-party sites, notably wordpress.org and Freemius, through which the nexya modules will be distributed. This Policy does not cover how those third parties process your data: their own policies apply as soon as you leave the Site.

14. Changes

This Policy may change with the Site. The date at the top gives the version in force, applicable as soon as it is published. Should a change substantially affect your rights, we would say so clearly.

15. A question?

Write to us at hello@nexya.dev.

16. Liability

The Site is provided for information. We try to keep it accurate and available, without being able to guarantee it: its content may be incomplete or out of date, and access may be interrupted for maintenance or for a cause beyond our control.

The nexya modules are distributed separately, each under its own licence, whose terms prevail over this page for everything concerning their use.

Installing, configuring and updating a plugin on a third-party site is the sole responsibility of the person doing it. It is up to them, in particular, to hold a working backup before any intervention, and to check compatibility with their hosting, their theme and their other plugins.

To the extent permitted by law, we accept no liability for direct or indirect damage resulting from the use of the Site or of a module, in particular a service interruption, a loss of data, an incompatibility or a loss of profit. This limitation applies neither in the event of intentional fault or gross negligence, nor where the law forbids it.

17. Governing law

This Policy is governed by Swiss law. As far as the law permits, the place of jurisdiction is Orbe, Switzerland. Mandatory consumer protection provisions of your country of residence remain reserved, as do the rights the GDPR gives you.