Privacy policy
What personal data the NextX platform and the NextX mobile app process, who is responsible for it, and how to exercise your rights.
01Who we are
NextX is a platform developed, hosted and run by RO VISION MEDIA S.R.L., registered office Str. Berzelor nr. 30, 137180 Crevedia, jud. Dâmbovița, Romania, Trade Register no. J2021001511153, tax ID RO44991398 ("RO Vision Media"). RO Vision Media also publishes the NextX mobile app (ro.nextx.app) on Google Play. The platform is used by NEXT MAINTENANCE S.R.L., registered office Calea București nr. 325C, Craiova, jud. Dolj, Romania, Trade Register no. J2013001436161, tax ID RO32232548 ("Next M") for its maintenance work.
02Controller and processor
For the data entered or generated in the platform (accounts, tickets, interventions, timesheets, fleet), the controller is Next M, as employer and as service provider to its clients. RO Vision Media processes that data as processor, only on Next M's instructions and under the data processing agreement (POL-04). RO Vision Media is controller only for the nextx.ro website and for the technical data needed to keep the service secure. For details on how employee data is processed, contact Next M at office@nextm.ro.
03Data we process
Accounts: name, username, email, phone, role, team and password, stored only as a hash. Sessions: IP address, browser and the name of the device used to sign in. Activity: tickets, interventions, start and end times, materials, remarks, and who assigned or completed the work. Proof of work: photos of the work, and the client representative's name and signature on the intervention report. Timesheets and leave, imported from Papervee. Fleet: vans and their journeys (start and stop coordinates, distance, idle time), imported from Safefleet and linked to a team. Contact details of stores and clients.
04The NextX mobile app
The technician app uses the camera only for photos taken in the app during interventions. It does not access the phone's location, photo library, contacts or microphone. Photos are resized and re-saved before upload, without their original metadata (including any location). Work data kept for offline use stays on the phone until sign-out, when it is deleted; the access token is kept in the system's secure storage. The app sends Expo technical data about updates and screen load times, without ticket content.
05Purposes and legal basis
Next M sets the purposes: organising and carrying out the interventions contracted with its clients, drawing up and sending intervention reports and cost estimates (Art. 6(1)(b) and (f) GDPR), and keeping records of working time and fleet use (Art. 6(1)(c) and (f) GDPR). RO Vision Media processes technical data (logs, errors, IP addresses) in its legitimate interest in keeping the platform secure and working (Art. 6(1)(f) GDPR).
06Automated decisions and AI
The platform makes no decisions based solely on automated processing that produce legal or similarly significant effects on employees (Art. 22 GDPR); reports are reviewed by people. The platform currently sends no data to AI services. If such a feature is enabled, employee data will be pseudonymised, and this policy and the subprocessor list will be updated before it goes live.
07Who receives the data
Next M's authorised users, within their role, and the RO Vision Media staff who run the platform. Intervention reports and cost estimates are emailed to the Next M clients where the work was done; for the client Profi, ticket status is synchronised with its system. Technical providers are listed in POL-08. Data is not sold or used for advertising.
08Where data is stored
The application and database are hosted in the European Union (Frankfurt, Germany). Some technical providers are US companies; transfers rely on Decision (EU) 2023/1795 (EU-US Data Privacy Framework) for certified entities, or on the standard contractual clauses in Decision (EU) 2021/914. The web panel loads fonts from Google Fonts and maps from OpenStreetMap, which receive the browser's IP address.
09Retention
Platform data is kept for the term of the contract between RO Vision Media and Next M. Supporting documents (intervention reports, cost estimates) and working-time records are kept as long as accounting, tax and labour law require, under rules set by Next M. When the contract ends, the data is handed to Next M on request and deleted from live systems within 30 days. Web sessions expire after 120 minutes of inactivity and mobile-app tokens after 30 days.
10Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right not to be subject to a solely automated decision. For platform data, send requests to Next M at office@nextm.ro; you can also send them to privacy@nextx.ro, and RO Vision Media will pass them to Next M and help resolve them. You will get an answer within one month, which can be extended by two months for complex requests. Account deletion is described in POL-09. You can complain to the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
11The nextx.ro website
The website uses no cookies, traffic analytics or third-party services. Your language preference is kept in your browser (POL-03). Cloudflare, which hosts the site, processes your IP address to deliver pages and protect against attacks.
12Contact and changes
Questions about this policy: privacy@nextx.ro, or RO Vision Media at office@rovisionmedia.ro, +40 753 101 028. Changes are published on this page with a new version and date.