Privacy Policy
Last updated: 26 August 2026
International Section Nexus (“Nexus”, “we”, “us”, or “our”) operates the website nexusorebro.com.
This Privacy Policy explains how we collect, use, store, and protect personal data when you visit or use our website.
This Privacy Policy applies only to the Nexus website and the personal data processed in connection with it. It does not constitute a general privacy policy for Nexus membership, events, or other activities conducted outside the website.
1. Data Controller
The data controller responsible for personal data processed through this website is:
International Section Nexus
Örebro, Sweden
Email: nexus.president@orebrostudentkar.se
If you have questions about how your personal data is processed, or wish to exercise your rights, you can contact us using the email address above.
2. Personal Data We Collect
The personal data we collect depends on how you interact with the website.
2.1 Contact Forms
When you contact Nexus through a contact form, we may collect:
- Your name
- Your email address
- The topic of your message
- The contents of your message
We use this information solely to respond to your enquiry, provide assistance, or take appropriate action regarding your message.
Contact-form submissions are retained only for as long as reasonably necessary to handle and resolve the matter. Once the matter has been resolved, the submission is deleted unless there is a legitimate reason to retain it for a longer period.
2.2 Website Accounts
The website contains restricted WordPress user accounts for authorised Nexus board or committee members and or other relevant individuals.
These accounts may contain information such as:
- Name or username
- Email address
- Account and login information
- Information necessary to administer the user’s access to the website
These accounts are used solely to administer and maintain the Nexus website.
Access to these accounts is restricted to authorised persons. User accounts and associated information are generally retained for the relevant operational year and reviewed as part of the transition to a new Nexus board.
2.3 Technical Information and Logs
When you visit the website, technical information may be processed as part of operating, securing, and maintaining the website.
This may include information such as:
- IP address
- Browser and device information
- Date and time of access
- Requested pages or resources
- Technical error information
- Other information contained in standard web-server logs
This information may be processed by our hosting provider and by the website itself as necessary to operate and protect the service.
We do not use technical information collected through the website to identify visitors unnecessarily.
3. Google Analytics
We use Google Analytics to understand how visitors use our website and to improve its content and functionality.
Google Analytics may collect information such as:
- Pages visited
- Approximate geographic location
- Device and browser information
- How visitors interact with the website
- Approximate duration of visits
- Other usage and technical information
Google Analytics is configured with a two-month retention period for user-level and event-level data. Google’s retention settings apply to user-level and event-level Analytics data; aggregated reporting data may remain available after this period.
Where required, analytics cookies and related processing are activated only after the visitor has provided the relevant consent through our cookie-consent mechanism.
You can refuse analytics cookies through the cookie banner or withdraw your consent through the available cookie settings.
Google provides information about how its consent mechanisms operate and how Analytics responds to users’ choices.
For more information about how Google processes data, please refer to Google’s own privacy documentation.
4. Cookies
Our website uses cookies and similar technologies.
Cookies may be used for:
- Essential website functionality
- Maintaining necessary website settings
- Authentication and administration
- Analytics, where you have provided the relevant consent
Some cookies are necessary for the website to function and cannot reasonably be disabled while using certain website functions.
Non-essential cookies, including analytics cookies, are subject to our cookie-consent mechanism where required.
You can use the cookie banner and associated settings to manage your preferences. You may also change your cookie settings through your browser.
Please note that disabling certain cookies may affect the functionality of parts of the website.
5. Embedded Content and Third-Party Services
The Nexus website may contain embedded content or functionality provided by third parties.
This may include services such as:
- Google Calendar
- Google Sheets or other Google Workspace documents
- Google Photos
- Other Google services used to display publicly available Nexus information
When you interact with embedded content, the relevant third-party provider may process information about your visit in accordance with its own privacy policy and terms.
Embedded content may also use cookies or similar technologies controlled by the third-party provider.
We recommend reviewing the privacy policies of the relevant third-party services if you would like more information about how they process personal data.
6. Google Search Console
We use Google Search Console to monitor the technical performance and visibility of the website in Google Search.
Google Search Console primarily provides information to website administrators about search performance, indexing, and technical issues.
We do not use Google Search Console to directly identify individual website visitors.
7. Photographs and Public Information
Nexus may publish photographs, names, positions, and other information relating to Nexus activities and representatives on the website.
Photographs published on the website are handled in accordance with Nexus’s applicable practices for obtaining appropriate permission or consent for publication.
If you believe that a photograph or other personal information has been published on the website inappropriately, please contact us at:
nexus.president@orebrostudentkar.se
We will assess the request and, where appropriate, remove or amend the material.
8. How We Use Personal Data
We process personal data collected through the website for purposes including:
- Operating and maintaining the website
- Responding to enquiries
- Managing authorised website accounts
- Maintaining website security and functionality
- Understanding website usage and improving the website
- Monitoring website performance and search visibility
- Displaying Nexus information and content
- Complying with applicable legal obligations
We do not sell personal data to third parties.
9. Legal Bases for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases under the General Data Protection Regulation (GDPR):
Consent
We rely on consent where required, including for certain non-essential cookies and analytics processing.
You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Legitimate Interests
We may process personal data where this is necessary for our legitimate interests, such as:
- Operating and maintaining the website
- Maintaining website security
- Managing authorised website accounts
- Responding to enquiries
- Improving the website
- Preventing misuse of the website
When relying on legitimate interests, we consider whether our interests are balanced against the rights and freedoms of the individuals concerned.
Legal Obligation
We may process personal data where processing is necessary to comply with a legal obligation applicable to Nexus.
10. Who May Receive Personal Data
Personal data may be processed by service providers that help us operate the website.
These may include:
- Hetzner, our web-hosting provider
- Google, through services such as Google Analytics and embedded Google services
- WordPress and relevant technical service providers necessary for operating the website
We only use such services where they are relevant to operating, maintaining, or improving the website.
Where a service provider processes personal data on our behalf, appropriate contractual and organisational safeguards are used where required by applicable data-protection law.
11. Hosting
The Nexus website is hosted using Hetzner Web Hosting.
Hetzner provides data-processing arrangements intended to meet the requirements of Article 28 of the GDPR where applicable. Hetzner states that data associated with its non-cloud products is processed and stored within the EU.
Technical information and server logs may therefore be processed as part of providing and securing the website.
12. International Data Transfers
Some third-party services used by the website, particularly services provided by large international technology companies, may involve processing of personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, the relevant service provider is responsible for applying the appropriate safeguards required under applicable data-protection law.
The applicable safeguards may include an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism recognised under the GDPR.
13. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.
Our general practices include:
| Type of data | General retention |
|---|---|
| Contact-form submissions | Until the matter has been resolved, then deleted |
| Website user accounts | Generally for the relevant operational year |
| Google Analytics user/event-level data | Two months |
| Technical/server logs | According to the operational and retention practices of the hosting provider |
| Public website content | As long as it remains relevant and appropriate to publish |
Retention periods may vary where necessary to comply with legal obligations, resolve disputes, protect our rights, or maintain the security of the website.
14. Security
We take reasonable technical and organisational measures to protect personal data processed through the website against unauthorised access, loss, misuse, alteration, or disclosure.
Access to the website’s administrative systems is restricted to authorised Nexus personnel.
No method of transmitting or storing information online can be guaranteed to be completely secure. However, we take reasonable steps to maintain an appropriate level of security for the information we process.
15. Your Rights Under the GDPR
Depending on the circumstances, you have rights under the GDPR concerning your personal data.
These may include the right to:
- Access your personal data
- Correct inaccurate or incomplete personal data
- Request deletion of your personal data
- Request restriction of processing
- Object to certain processing
- Receive your data in a portable format, where applicable
- Withdraw consent where processing is based on consent
You also have the right to lodge a complaint with a supervisory authority if you believe that your personal data has been processed unlawfully.
In Sweden, the relevant supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
16. Exercising Your Rights
To exercise any of your data-protection rights, or if you have questions about our processing of personal data, contact:
International Section Nexus
Email: nexus.president@orebrostudentkar.se
Please provide enough information for us to understand your request and identify the relevant information where necessary.
We will handle requests in accordance with the applicable requirements and time limits under the GDPR.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Changes may be made when:
- The website’s functionality changes
- We introduce or remove third-party services
- Our data-processing practices change
- Legal or regulatory requirements change
The latest version will always be published on this page.
The date at the top of this Privacy Policy indicates when it was last updated.
18. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data through the Nexus website, please contact:
International Section Nexus
Email: nexus.president@orebrostudentkar.se