NEXUS Group — Public compliance documentation
Data Subject Rights
Procedure used by NEXUS Group to receive, validate and fulfil requests from individuals, sellers and marketplace operators regarding personal data processed by NEXUS V2.
- Document
- NX-DSR-01
- Version
- 1.0
- Effective date
- Review cycle
- At least annually, and after any material change to the service.
Commitment to sellers and marketplaces
01Rights we support
| Right | What we do |
|---|---|
| Confirmation and access | Confirm whether we hold data about the individual and provide the records we hold. |
| Correction | Correct inaccurate data. Where the marketplace is the source of truth, we request the correction there and re-sync so the correction is not overwritten. |
| Portability / export | Provide the relevant records in a structured, machine-readable format (CSV or JSON). |
| Deletion | Delete the records from the production database and remove them from backups as the backup rotation expires. |
| Restriction and objection | Stop the specific processing where we are not required by law to continue, and record the restriction. |
| Information about sharing | Disclose which recipients received the data, as published under Sub-processors. |
02How to submit a request
- Send the request to gianlucca.florencio@zeroholding.com.br, addressed to the Privacy Owner / Data Protection Contact.
- State which right is being exercised and, if the request concerns a marketplace order, include the marketplace name and the order identifier so the record can be located.
- A seller or marketplace operator may submit a request on behalf of a user; we accept it without requiring the user to contact us directly.
03Identity verification
We verify that the requester is entitled to the data before disclosing or deleting anything, using the minimum information necessary. Where the request comes through a marketplace or the seller, verification is performed by that party and we act on their instruction. Verification data is used only for this purpose and is discarded once the request is closed.
04Deadlines
| Stage | Commitment |
|---|---|
| Acknowledgement | Within 5 business days of receipt. |
| Fulfilment of a standard request | Within 15 calendar days of a verified request. |
| Complex request | Extended once, up to 30 calendar days in total, with the reason communicated to the requester. |
| Request forwarded by a marketplace or seller | Executed within the deadline stated by that party, and within 15 calendar days when no deadline is stated. |
05Limits we disclose
- Records required by accounting or tax law are retained until the legal period expires; in that case we restrict processing instead of deleting, and inform the requester.
- The marketplace remains the primary controller of the buyer relationship, so deletion in our platform does not delete the record held by the marketplace.
- Requests that would compromise the rights of another person are refused with a written justification.
Retention periods per category are published in Data Retention and Deletion.
06Records of requests
Every request is logged with the date received, the requester category, the right exercised, the action taken and the closing date. The log is retained as evidence of compliance and can be presented to a marketplace reviewer or a supervisory authority on request.
Document control
Public URL: https://v2.nexusgroup.app.br/data-subject-rights.
Approved and maintained by the NEXUS Group Privacy Owner. Reviewed at least annually, and after any material change to the service.