Privacy Policy

This policy explains what personal information is handled when you use nexaline.online, why, for how long, and what rights you have. It is written for readers in New Zealand under the Privacy Act 2020 and its Information Privacy Principles. Because the publisher is established in France, it also applies the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The agency responsible for personal information on this site, and the controller for GDPR purposes, is:

Privacy questions and requests go to that email address.

2. What is collected

The site is built to collect as little as possible. In full:

• Nothing through the site itself. There are no forms, accounts, newsletters, comment sections or chat tools.
• No cookies. The site sets no cookies and allows no third party to set them. It uses no local storage, no session storage and no analytics. The Cookie Policy explains this in more detail.
• Server logs. Like almost every website, the web server records each request for a page: the IP address it came from, the browser's user agent string, the address requested, the time, the referring page if the browser sends one, and whether the request succeeded. Requests for images, styles and scripts are not logged.
• Emails you send. If you write to info@nexaline.online, the publisher receives your email address and whatever you choose to include.

When you follow an affiliate link to the vendor's site, you leave Nexaline. The vendor and the affiliate network then handle any information under their own privacy policies; Nexaline does not receive your name, email or payment details from them.

3. Why it is used

• Server logs are used to keep the site secure and working: to detect and block abusive traffic, investigate errors and keep the server stable. They are not used to profile visitors, and they are not combined with other information.
• Emails are used only to read and reply to your message, and to keep a record of the correspondence.

Under the Privacy Act 2020, this information is collected for these lawful purposes connected with running the site. Under the GDPR, the legal basis for both is legitimate interests: keeping the site secure, and answering people who contact the publisher. Consent is not relied on, because the site sets no cookies and carries out no optional processing.

4. How long it is kept

• Server logs are rotated daily and deleted after 14 days. If a log entry is needed to investigate a specific security incident, that extract may be kept until the investigation ends, and no longer than 6 months.
• Emails are kept for 12 months after the last message in a conversation, then deleted, unless a longer period is needed to deal with a legal claim.

5. Who it is shared with

Personal information is not sold, rented or shared for marketing. It is handled by:

• The hosting provider that operates the server on which the site and its logs are stored, acting on BATI ENERGIA's instructions.
• The email service that receives and stores mail for the nexaline.online domain, also acting on BATI ENERGIA's instructions.

The site makes no requests to any other third party. It uses no external fonts, scripts, analytics, advertising tags or embedded content. Information may also be disclosed if required by law.

Cross-border handling. The publisher is based in France, and the server and email service are located outside New Zealand. This means server logs and emails are held and accessed outside New Zealand. Under the Privacy Act 2020, information held by a service provider solely on BATI ENERGIA's behalf is treated as held by BATI ENERGIA, which remains responsible for it; Information Privacy Principle 12, which governs disclosures to overseas recipients, is noted here so readers know plainly where their information goes. Within the EU, the GDPR applies to all of this information, and any transfer to a provider outside the European Economic Area is covered by the safeguards the GDPR requires.

6. How it is protected

• The whole site is served over HTTPS, so pages and requests are encrypted in transit.
• Access to the server and its logs is limited to the publisher and the hosting provider's technical staff, using individual credentials.
• Server log files are readable only by administrative accounts on the server.
• Because the site collects so little, there is very little to lose in the event of a breach.

7. Your rights under the Privacy Act 2020

You have the right to ask for access to personal information held about you, and to ask for it to be corrected. To make a request, email info@nexaline.online. The publisher will respond within 20 working days, as the Privacy Act requires, and may need to confirm your identity first. Because server logs record IP addresses rather than names, it may not be possible to match a log entry to you with confidence.

If you are unhappy with how your information has been handled, please contact the publisher first so the issue can be put right. If it is not resolved, you can complain to the Office of the Privacy Commissioner, which handles privacy complaints in New Zealand.

8. Privacy breaches

If a privacy breach occurs that has caused, or is likely to cause, serious harm, BATI ENERGIA will notify the Privacy Commissioner and the affected people as soon as practicable, as Part 6 of the Privacy Act 2020 requires, and will notify the French supervisory authority where the GDPR requires it.

9. Your rights under the GDPR

Because BATI ENERGIA is established in France, you also have these rights over personal information it holds about you, wherever you live:

• the right of access to your information;
• the right to rectification of inaccurate information;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object to processing based on legitimate interests.

To use any of these rights, email info@nexaline.online. A reply will be given within one month. You also have the right to lodge a complaint with a supervisory authority; in France that is the Commission nationale de l'informatique et des libertés (CNIL).

10. Children

The site is not directed at people under 16 and collects nothing from them beyond the server logs that every visit produces.

11. Changes to this policy

If this policy changes, the updated version will be published on this page with a new effective date. If a change affects how personal information is used in a significant way, for example if cookies or analytics were ever introduced, a notice will also appear on the home page before the change takes effect.

12. Contact

For any privacy question, write to BATI ENERGIA at info@nexaline.online, or by post to 7 Impasse de la Rivoire, 38500 Saint-Cassien, France.