Nexu Logo
Do you want to talk with an specialist?We will help you out!

Privacy Policy

This privacy policy (the "Privacy Policy") aims to inform, in a clear and precise manner, users (hereinafter, "End Users") who browse and use the platform created (the "Platform"), as well as to inform those professionals who have contracted or wish to contract Nexu’s services (the "Professionals"), about the processing of personal data collected by the company MH CASA TECHNOLOGY SPAIN S.L.U. ("Nexu" or the "Company") through the aforementioned Platform. In this Privacy Policy, both Professionals and End Users will be collectively referred to as "Users" or, individually, as "User."

This Privacy Policy only applies to the Platform made available by Nexu to the Users, and the Company declines any responsibility for the different privacy policies and personal data protection that may be contained in the websites accessible through hyperlinks located on the Platform but not directly managed by Nexu.

This Privacy Policy applies to the information that Nexu collects through the Platform, for example, through a registration form, contact form, or browsing activity.

In accordance with applicable law, the Company informs Users that the data provided through the Platform will be incorporated into its data files, for which it is responsible.

Filling out the registration form by Users, as well as the data provided by the User during the provision of services, necessarily implies, without reservation, the knowledge and acceptance of this Privacy Policy. Therefore, Users are recommended to carefully read this Privacy Policy beforehand.

Identity and Contact Details of the Data Controller

The owner of this Platform is MH CASA TECHNOLOGY SPAIN S.L.U., with a registered office in Marbella (Málaga), Urbanización Parra Palomeras, Villa la Perla, number 1, C.P. 29602, with Tax Identification Number B01600998, and registered in the Commercial Registry of Málaga, Volume 5944, Page 6, Sheet MA-155938.

Contact email: [email protected]

Data Necessary for Certain Processing Activities

Providing data through the registration or contact form, as well as during the use of the Platform, is voluntary, although failure to provide certain data may result in the inability to access certain services provided by the Company.

Users will be responsible for the truthfulness, accuracy, validity, and authenticity of the personal data provided, and the Company reserves the right to exclude services to Users who have provided false data, without prejudice to any other legal actions that may be taken.

Information Collected from Users

The Company processes the following personal data of Users:

  • Identification data, such as name and surname.
  • Contact details, such as email address, phone number, and postal address.
  • Banking details, such as debit or credit card numbers and bank account information.
  • Academic and professional data, such as degrees, specializations, and professional registration numbers applicable to Professionals.
  • Other personal data that may be shared between Professionals and End Users as necessary for the provision of services carried out by the Company.
  • Other personal data that may appear in messages, suggestions, and/or opinions submitted by Users to Nexu.

Purposes and Legal Bases for Data Processing

The Company aims to process all data lawfully, and for that, it must base the processing of your data on a sufficient legal basis. Accordingly, the Company uses the data for the following purposes and on the following legal bases:

  • Service Provision: Nexu uses the data to provide its services, such as facilitating contact between Professionals and End Users and creating the professional profile of the Professionals within the Platform. This data processing is necessary for the execution of the contract between the Company and Users. If Users do not provide certain data, the Company may not be able to provide some of its services.
  • Verification: Nexu uses the data to verify the User’s details. The Company considers that it has a legitimate interest in processing such data to ensure the accuracy and ownership of the information provided.
  • Handling Complaints: The data may also be used to process, manage, and resolve any complaints, suggestions, or inquiries from the User. The Company considers it has a legitimate interest in processing the data to improve its services and the User experience.
  • Marketing Communications: The Company may use the data to contact Users and inform them of the latest news regarding the Company’s services. These communications will only be sent after obtaining the User's consent, except when the User is already a client of Nexu, in which case similar product and service updates may be sent.
  • Payment Management: Nexu may process Users' banking details to manage service payments. The legal basis for such processing is the execution of the contractual relationship between Nexu and its Users.
  • Platform Improvement: Nexu may use the data to evaluate the operation of the Platform and obtain User feedback. The Company considers it has a legitimate interest in processing the data to improve service quality and the User experience.

User Acceptance

By accepting the Platform's Legal Notice and this Privacy Policy, Users acknowledge having read and understood the terms of use and legal conditions established in this Privacy Policy, and they expressly and unequivocally accept its application to their use of the Platform during navigation and service provision.

Users expressly declare themselves informed and authorize the Company to collect and process their data for the purposes described in this Privacy Policy.

Users are responsible for notifying the Company of any changes to the data provided and ensuring the accuracy of the information provided at all times. Users must also refrain from uploading any false or inadmissible content according to the law, morality, good faith, or public order, or that may infringe third-party rights.

The Company reserves the right to deny services or remove content from Users who provide false or incomplete data, without assuming any responsibility for damages resulting from the falsity or inaccuracy of the data provided.

Nexu as the Data Processor

According to data protection regulations, there is a distinction between the "controller" and the "processor" of personal data. Therefore, the User is the data controller for their personal data, and Nexu is the data processor. Furthermore, End Users are informed that personal data provided through the Platform, particularly medical data, will be processed under the responsibility of the Professionals.

Data Disclosure and International Transfers

Personal data collected through the Platform will not be transferred to third parties for purposes other than those for which the User has given consent.

However, when an End User registers on the Platform or requests service provision, the Company will share the personal data with the following third parties:

  1. Professionals: Nexu's service facilitates contact between Professionals and Users. The shared data will be minimal, limited to what is necessary for the Professionals to provide the requested services.
  2. Public Authorities: The Company may disclose personal data to authorities or public bodies when required by applicable law or at the request of competent authorities.

Additionally, Nexu works with third-party companies that assist in providing services to Users. These companies act as sub-processors of the data. The full list of these sub-processors can be found via this link. Nexu ensures that all sub-processors act confidentially, fairly, and comply with applicable data protection laws. Some of these entities may store data outside the EU and EEA, which may involve an international data transfer. The Company ensures that such transfers are subject to adequate safeguards as described by applicable laws, such as signing standard data protection clauses.

Data Retention Periods

The Company stores Users' personal data as long as necessary to use it according to the purpose for which it was collected, and according to the legal basis for processing. The Company will retain personal data while a contractual and/or commercial relationship exists with the User and while they do not exercise their right to object or request deletion of the personal data. In such cases, the Company will block the data, without further use, while they may be needed for legal claims or contractual obligations.

Users' Rights

Users can exercise their rights to Access, Rectification, Deletion, Objection, Portability, and the Right to Be Forgotten by writing to [email protected], attaching a copy of their passport or ID (data subject), and expressly indicating the request:

  • Access: Learn what personal data is being processed by the Company, its purpose, origin, and possible transfer to third parties.
  • Rectification: Modify personal data that is inaccurate or incomplete.
  • Deletion: Request deletion of personal data for being inappropriate or excessive.
  • Objection: Object to data processing for specific purposes, such as advertising or decision-making based solely on automated data processing.
  • Portability: Receive personal data in a structured, commonly used format and transfer it to another controller if technically feasible.
  • Right to be Forgotten: Request the deletion of personal data without undue delay under certain conditions.

Policy Modifications

The Company reserves the right to modify this Privacy Policy to adapt it to legislative or judicial changes, or industry practices. Any modifications will be communicated to the User, and if necessary, the User's acceptance will be requested. If the User does not accept the new terms, they may not be able to continue receiving services from the Company.

Security Measures

The Company treats Users' personal data with absolute confidentiality. It has implemented technical and organizational measures to ensure the security of personal data, preventing its destruction, loss, or unlawful access. In determining these measures, factors such as the scope, context, and purposes of the processing, the state of technology, and the existing risks were considered.

If you have any questions about our Privacy Policy, please contact us at [email protected]. You also have the right to file a complaint with the Spanish Data Protection Agency at:

Phone: 901 100 099 / 91 266 35 17 Postal Address: C/ Jorge Juan, 6 28001-Madrid Electronic Headquarters: https://sedeagpd.gob.es