Legal

Privacy Policy

Document version: privacy_v1.0

Last updated: 06/07/2026

1. Purpose

This Privacy Policy explains how ProNexus processes personal data in connection with the use of its ERP, CRM and operational management platform.

2. Controller and processor roles

When a business uses ProNexus to manage its own customers, suppliers, employees, documents, transactions and operational data, that business generally acts as the data controller for the data it enters into the platform. ProNexus acts as a service provider and data processor for that business, except where ProNexus processes data for its own administrative, security, billing or compliance purposes.

3. Personal data processed

The platform may process account data, identification data, contact data, company data, role and permission data, audit logs, technical logs, document metadata and operational records entered by the business or its authorized users.

4. Purposes of processing

Personal data is processed to provide the platform, authenticate users, manage access permissions, operate business workflows, maintain security, generate audit evidence, provide support, comply with legal obligations and improve service reliability.

5. Legal basis

Depending on the context, processing may be based on contract performance, legitimate interests, legal obligations or consent where required by applicable law.

6. Retention

Data is retained for as long as necessary to provide the service, comply with legal obligations, preserve audit records, resolve disputes and enforce agreements. Business data retention may also depend on the configuration and instructions of the relevant business account.

7. Data subject rights

Individuals may have rights of access, rectification, erasure, restriction, portability and objection under applicable data protection law. Requests related to business-controlled data should normally be addressed to the relevant business controller.

8. Contact

For privacy-related requests, contact ProNexus through the official contact channels published on the website.

This document is provided as a compliance-oriented operational notice and should be reviewed by qualified legal counsel before being used as final legal advice.