Node_Legal // Compliance Matrix

Regulatory Alignment & Protocol Compliance

All operational protocols governing Northixlux digital manufacturing services.

Protocol_001

Privacy Policy

1. Data Controller Identification

The data controller responsible for processing personal data collected through this website is Northixlux, registered at 540540 | Str. Muncii nr. 19 | Targu Mures, Jud. Mures | Romania, Romania. For all privacy-related inquiries, contact our designated officer at [email protected].

2. Categories of Personal Data Processed

We collect and process the following categories of personal data through our contact forms and service engagement channels:

  • Identification data: full name, professional designation
  • Contact data: email address, telephone number
  • Communication data: message content, service interest selection, inquiry metadata
  • Technical data: IP address, browser type, operating system, referring URLs, pages visited, timestamp of access
  • Consent records: cookie preferences, marketing opt-in/out status, timestamp of consent actions

3. Legal Basis for Processing

All personal data processing activities are conducted under the following legal bases as defined by Article 6 of the EU General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a)): Cookie analytics data and optional marketing communications are processed only after explicit, informed, and freely given consent.
  • Contract Performance (Article 6(1)(b)): Contact form submissions and service inquiry data are processed to fulfill pre-contractual measures and eventual service agreements.
  • Legitimate Interest (Article 6(1)(f)): Technical log data and security monitoring are processed to maintain website integrity, prevent unauthorized access, and ensure service availability.

4. Data Retention Periods

Personal data is retained according to the following schedule:

  • Contact form submissions: 24 months from date of receipt, or until the conclusion of any resulting business relationship.
  • Cookie consent records: 12 months from date of consent action.
  • Technical log data: 90 days from date of collection.
  • Contract-related documentation: Duration of the contract plus 5 years, in compliance with Romanian commercial record-keeping obligations.

5. Data Recipients and Transfers

Personal data may be shared with the following categories of recipients: hosting infrastructure providers (EU-based data centers), email service providers for communication delivery, and analytics platforms operating under Data Processing Agreements. Northixlux does not sell, rent, or commercially distribute personal data to third parties. All data transfers outside the European Economic Area are conducted using Standard Contractual Clauses or equivalent safeguards under Chapter V of the GDPR.

6. Data Subject Rights

Under the GDPR, you possess the following rights regarding your personal data:

  • Right of Access (Article 15): Request a copy of all personal data we hold about you.
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): Request deletion of personal data where processing is no longer necessary or consent is withdrawn.
  • Right to Restriction (Article 18): Request limitation of processing in specific circumstances.
  • Right to Data Portability (Article 20): Receive your personal data in a structured, machine-readable format.
  • Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.

7. Right to Lodge a Complaint

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

8. Changes to This Policy

This Privacy Policy is subject to periodic review and may be updated to reflect changes in our data processing practices or regulatory requirements. Material changes will be communicated through a prominent notice on this website.

Protocol_002

Cookies Policy

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They serve to recognize your browser, remember your preferences, and provide analytical data about website usage patterns.

2. Cookies We Use

Northixlux employs the following cookie categories:

  • Strictly Necessary Cookies: These cookies are essential for website functionality. They enable core features such as page navigation, form submission handling, and session state management. Without these cookies, the website cannot operate as requested. These cookies do not require consent under the ePrivacy Directive.
  • Analytics Cookies (Optional): These cookies collect anonymized data about how visitors interact with our website, including pages visited, time spent on pages, and navigation patterns. This data helps us optimize site performance and user experience. These cookies are only activated after you provide explicit consent through our cookie banner.
  • Preference Cookies (Optional): These cookies remember your choices such as language selection or display preferences to provide enhanced, personalized functionality.

3. Cookie Consent Management

Upon your first visit, a cookie consent banner is displayed allowing you to accept or decline optional cookies. Your choice is stored in your browser's localStorage and respected across all subsequent visits. You may change your cookie preferences at any time by clearing your browser's localStorage for this domain and revisiting the site to trigger the consent banner again.

4. Third-Party Cookies

Our website may include embedded content (such as Google Maps) from third-party providers that may set their own cookies. We do not control the cookie practices of third-party services. We encourage you to review the cookie policies of any third-party services embedded on our website.

5. Managing Cookies Through Browser Settings

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Note that disabling certain cookies may impact the functionality of this website.

Protocol_003

Refund Policy

1. Scope of Application

This Refund Policy governs all commercial transactions between Northixlux and its clients for digital services rendered from our registered office at 540540 | Str. Muncii nr. 19 | Targu Mures, Jud. Mures | Romania, Romania.

2. Milestone-Based Payment Structure

All projects are structured around defined milestones with corresponding payment schedules. Each milestone payment becomes non-refundable upon delivery and client acceptance of the corresponding deliverable. Milestones are documented in the service agreement and require formal sign-off from the client.

3. Refund Eligibility Criteria

A refund may be requested under the following circumstances:

  • Services have not commenced: Full refund of any advance payment minus administrative processing fees (5% of the payment amount).
  • Services commenced but not delivered: Pro-rata refund calculated based on the percentage of work completed versus remaining deliverables, assessed by an independent technical review.
  • Material defect in deliverables: If deliverables fail to meet the specifications defined in the service agreement after two rounds of revision, a partial refund proportional to the affected scope may be issued.

4. Non-Refundable Items

  • Custom design and development work that has been delivered and accepted by the client.
  • Third-party license fees, domain registrations, or hosting payments made on behalf of the client.
  • Consultation and scoping services that have been delivered in full.
  • Late payment penalties or interest charges.

5. Refund Request Procedure

Refund requests must be submitted in writing to [email protected] within 14 calendar days of the relevant milestone delivery date. The request must include the project identifier, the specific deliverable in question, and the grounds for the refund. Northixlux will acknowledge receipt within 3 business days and provide a resolution within 20 business days.

6. Cancellation by Client

The client may cancel a project at any time by providing written notice. Cancellation refunds are calculated as follows: work completed up to the date of cancellation is billed at the agreed rate, and any advance payments exceeding this amount are refunded within 30 business days.

7. Cancellation by Northixlux

Northixlux reserves the right to cancel a project if the client fails to provide required materials, feedback, or access credentials within 30 calendar days of the agreed deadline. In such cases, all payments made to date are retained, and any remaining deliverables are archived for 90 days.

Protocol_004

Terms of Service

1. Acceptance of Terms

By accessing this website or engaging Northixlux for services, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service. If you do not agree to these terms, you must not access this website or engage our services.

2. Service Description

Northixlux provides digital engineering services including but not limited to web development, API architecture, infrastructure deployment, design system creation, and digital transformation consulting. Detailed service specifications are provided in individual project proposals and service agreements.

3. Intellectual Property Rights

All deliverables produced under a service agreement become the exclusive property of the client upon full payment of all outstanding invoices. Northixlux retains the right to display project case studies and portfolio entries unless the client explicitly requests confidentiality in writing prior to project commencement. Pre-existing intellectual property, frameworks, and tooling used in service delivery remain the property of Northixlux.

4. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information disclosed during the course of engagement. This obligation survives the termination of the service agreement for a period of 24 months. Confidential information includes but is not limited to business strategies, technical architectures, user data, and financial projections.

5. Limitation of Liability

To the maximum extent permitted by applicable law, Northixlux shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to the use of our services. Our total aggregate liability for any claim arising from a service agreement shall not exceed the total fees paid by the client under that agreement in the 12 months preceding the claim.

6. Force Majeure

Northixlux shall not be liable for delays or failures in performance resulting from causes beyond our reasonable control, including but not limited to natural disasters, government actions, pandemic conditions, internet infrastructure failures, or cyberattacks targeting third-party services.

7. Governing Law and Jurisdiction

These Terms of Service are governed by and construed in accordance with the laws of Romania. Any disputes arising from or relating to these terms or our services shall be submitted to the exclusive jurisdiction of the courts located in Targu Mures, Jud. Mures, Romania.

8. Modifications to Terms

Northixlux reserves the right to modify these Terms of Service at any time. Changes take effect upon publication on this website. Continued use of our services following the publication of modified terms constitutes acceptance of the revised terms.

9. Severability

If any provision of these terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary so that the remaining terms shall remain in full force and effect.