Privacy Policy

1. Data Controller

Nexyzen is a product developed and operated by Camera di Compensazione S.r.l. The data controller for all personal data processed through this website and platform is:

2. Scope of This Policy

This Privacy Policy describes how we collect, use, store, and protect personal data when you visit www.nexyzen.com or sign up for the Nexyzen platform. It applies to all users who are natural persons, as well as to natural persons acting on behalf of a company (e.g. representatives, CFOs, accountants). The platform is designed exclusively for business-to-business (B2B) use within the European Union.

3. Data We Collect

3.1 Data you provide voluntarily

• Name and email address (waitlist registration, contact form, demo request)

• Company name, VAT number, and registered address (during platform onboarding)

• Invoice data uploaded or imported via connector (active and passive invoices)

• Any other information you include in free-text fields or messages to us

3.2 Data collected automatically

• IP address and technical navigation data (pages visited, session duration, browser and device type)

• Technical cookies necessary for the website to function

• Analytical cookies in aggregated and anonymised form (see Section 7)

4. Purposes and Legal Bases

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Invoice Data

Invoices uploaded by users may contain data relating to legal entities and, in some cases, to natural persons (e.g. sole traders). Such data is processed exclusively to run the multilateral offset algorithm and is not shared with other network participants beyond what is strictly necessary to complete a clearing cycle that you have reviewed and signed. All processing is carried out in compliance with Regulation (EU) 2016/679 (GDPR).

Nexyzen does not use invoice data for any purpose other than performing the clearing service. Invoice data is never sold, licensed, or disclosed to third parties for commercial purposes.

6. Data Retention

7. Cookies

This website uses:

• Technical cookies — strictly necessary for navigation and session management. No consent is required.

• Analytical cookies — used in aggregated and anonymised form to understand how pages are used. We do not use profiling cookies for advertising purposes.

You can manage your cookie preferences via the banner shown on your first visit, or by adjusting your browser settings at any time. Blocking technical cookies may affect the functionality of the platform.

8. Sharing of Data with Third Parties

We do not sell your data. Data may be shared with:

• Technical service providers (hosting, email delivery, analytics) bound by data processing agreements compliant with Art. 28 GDPR

• Competent authorities if required by applicable EU or Italian law

• Integration partners (e.g. e-invoicing platforms) to the extent necessary to deliver the service, and only with your prior consent

All third-party processors are contractually bound to process data only on our instructions and in accordance with GDPR requirements.

9. International Data Transfers

Your data is processed and stored on servers located within the European Union. In the event that any transfer outside the EEA becomes necessary, it will be carried out in compliance with Articles 44–49 GDPR — in particular through Standard Contractual Clauses (SCCs) approved by the European Commission — and users will be informed in advance.

10. Your Rights

Under Articles 15–22 GDPR, you have the right to:

• Access your personal data (Art. 15)

• Rectify inaccurate or incomplete data (Art. 16)

• Obtain erasure of your data ('right to be forgotten') (Art. 17)

• Restrict processing in certain circumstances (Art. 18)

• Receive your data in a portable format (Art. 20)

• Object to processing based on legitimate interest (Art. 21)

• Not be subject to automated decision-making with legal or similarly significant effects (Art. 22)

To exercise any of these rights, contact us at privacy@nexyzen.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority. If you are based in Italy, the competent authority is the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

11. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, accidental loss, or destruction, in accordance with Art. 32 GDPR. These include encrypted transmission (HTTPS/TLS), access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform affected users without undue delay.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users by email and highlighted on this page with a new 'Last updated' date. We encourage you to review this page periodically.

13. Contact

For any question regarding this Privacy Policy or the exercise of your rights: