~ / legal

RFC Technical Documentation

Last Revised: September 2026 // Compliance Framework v2.4

devnuvexa-legal-specs.md RFC-2026

§1. Corporate Registry Identification

ENTITY: DevNuvexa

REGISTERED_ADDRESS: 53842 Am Bergeracker 38, Troisdorf West, Germany

SUPPORT_INBOX: [email protected]

PHONE: +49 1607 9284150

ACTIVITY: Backend Systems Engineering, CI/CD Pipeline Development, Enterprise Software Architecture

JURISDICTION: Federal Republic of Germany / EU Commercial Framework

§2. Privacy Policy & Data Processing (GDPR)

2.1 Data Controller

The data controller for all personal data processed through this platform is DevNuvexa, registered at 53842 Am Bergeracker 38, Troisdorf West, Germany. For privacy inquiries, contact [email protected].

2.2 Data Collection & Purpose

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), we collect and process personal data exclusively for the following purposes:

  • ▸ Client communication and project delivery coordination
  • ▸ Technical proposal generation and scope analysis
  • ▸ Contractual obligation fulfillment and invoicing
  • ▸ Statutory tax reporting and regulatory compliance
  • ▸ Service improvement through anonymized analytics

2.3 Data Retention

Personal data is retained for the duration necessary to fulfill the purposes for which it was collected, or as required by applicable law. Active client data is retained for the duration of the business relationship plus 10 years for tax and accounting compliance under German commercial law (HGB §257).

2.4 Third-Party Sharing

We never sell, rent, or distribute personal information to unauthorized third-party data brokers. Data may be shared with:

  • ▸ Cloud infrastructure providers (AWS, Cloudflare) — for hosting and security services
  • ▸ Payment processors (Stripe) — for transaction handling
  • ▸ Legal and tax advisors — as required by law

2.5 Data Security

All personal data is securely retained within encrypted EU-hosted cloud systems. We implement TLS 1.3 encryption in transit, AES-256 encryption at rest, and maintain compliance with ISO/IEC 27001 information security management standards.

2.6 Your Rights (GDPR Articles 15-22)

You have the right to:

  • ▸ Access — Request a copy of all personal data we hold about you
  • ▸ Rectification — Request correction of inaccurate personal data
  • ▸ Erasure — Request deletion of your personal data (right to be forgotten)
  • ▸ Restriction — Request restriction of processing of your personal data
  • ▸ Portability — Request transfer of your data in a structured, machine-readable format
  • ▸ Objection — Object to processing of your personal data for specific purposes

To exercise any of these rights, send a written request to [email protected]. We will respond within 30 days.

2.7 Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. The competent authority for DevNuvexa is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).

§3. Terms of Service

3.1 Scope of Services

DevNuvexa provides backend systems engineering, CI/CD pipeline development, and enterprise software architecture services. All services are governed by explicitly contracted Statements of Work (SOW) executed between the Client and DevNuvexa.

3.2 Intellectual Property

Upon complete settlement of agreed commercial invoices, DevNuvexa assigns all worldwide intellectual property rights in client-specific software deliverables, design tokens, and digital assets directly to the Client. DevNuvexa retains the right to use general methodologies, patterns, and non-client-specific tools.

3.3 Client Obligations

The Client agrees to:

  • ▸ Provide timely access to required systems, credentials, and documentation
  • ▸ Designate a primary point of contact for project coordination
  • ▸ Review and approve deliverables within agreed review windows
  • ▸ Make payments according to the agreed invoicing schedule

3.4 Liability

DevNuvexa's total liability under any engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. DevNuvexa shall not be liable for indirect, incidental, or consequential damages.

3.5 Termination

Either party may terminate an engagement with 30 days written notice. In the event of termination, the Client shall pay for all work completed up to the date of termination. All completed deliverables and associated IP shall be transferred to the Client upon final settlement.

§4. Cookie Policy

4.1 What Are Cookies

Cookies are small text files placed on your device when you visit our website. They help us recognize your browser and remember certain information.

4.2 Types of Cookies We Use

  • ▸ Strictly Necessary Cookies — Required for basic site functionality. Cannot be disabled.
  • ▸ Functional Cookies — Remember your preferences and settings (e.g., cookie consent status).
  • ▸ Analytics Cookies — Help us understand how visitors interact with our site. Anonymized and aggregated.

4.3 Cookie Consent

By clicking "Download Weights" on our cookie banner, you consent to the use of functional and analytics cookies. You may withdraw consent at any time by clearing your browser cookies or contacting [email protected].

4.4 Managing Cookies

You can control and manage cookies through your browser settings. Disabling certain cookies may affect site functionality.

§5. Refund & Reimbursement Policy

5.1 Project Deposits

A 50% deposit is required before project commencement. This deposit is non-refundable once work has begun, as it covers initial scoping, architecture planning, and resource allocation.

5.2 Milestone-Based Payments

Remaining project fees are invoiced at agreed milestones. If a project is terminated by the Client after a milestone is completed and approved, that milestone payment is non-refundable.

5.3 Refund Eligibility

Full or partial refunds may be issued in the following circumstances:

  • ▸ Project cancellation before any work has commenced
  • ▸ Failure to deliver agreed milestones within the contracted timeline due to DevNuvexa's responsibility
  • ▸ Material breach of the Statement of Work by DevNuvexa

5.4 Refund Process

Refund requests must be submitted in writing to [email protected] within 14 days of the issue. Approved refunds are processed within 30 business days via the original payment method.

5.5 SLA Retainers

Monthly SLA retainer fees may be cancelled with 30 days written notice. No partial-month refunds are issued for the current billing period.