NEXTON TECHNOLOGIES

Legal information.
Privacy and your rights.

Understand how we handle information, how our website may be used and where to direct a privacy request.

Revision: 7 September 2026 · English / Spanish

Website and business inquiriesApplications and CVsFind the rights applicable to your request

02

Privacy notice

This notice explains the data collected through our website and professional interactions, its purposes, and the channels available to exercise your rights. The candidate-specific provisions in section 03 complement this notice.

Data we process

  • Contact and business information you provide: name, email, telephone when supplied, company, role and the contents of an inquiry.
  • Application information: the position or area of interest, professional experience, education, skills, CV and profile links you choose to submit.
  • Technical information associated with access and security, such as IP address, browser, device, request logs and your cookie preference, depending on the service used.

Purposes and applicable legal grounds

  • Responding to business inquiries, managing requested proposals and evaluating applications for the vacancy or area identified.
  • Protecting communication channels, preventing misuse and maintaining service continuity.
  • Meeting legal obligations and responding to lawful requests, within the scope of the applicable requirement.
  • Optional marketing, a future-opportunities talent pool or another separate purpose requires its own applicable legal basis and, where required, separate consent. The Careers checkbox does not authorize these uses.

Recipients and service providers

Authorized personnel and service providers may access the information needed for their function. The website and candidate form use Webflow; email and collaboration services may involve Microsoft 365. These providers process information under the applicable service and data-processing arrangements.

Nexton does not sell or rent the personal information described in this notice. Disclosures to clients, affiliates or other independent recipients must have a defined purpose, an applicable legal basis and the information or consent required by law. Legal requests are handled within their lawful scope.

03

Candidate privacy notice

Controller and address

For recruitment in Mexico managed by SIIA, the data controller is SIIA Servicios de Ingeniería en Integración y Automatización, S.A. de C.V., Vía Atlixcáyotl 1499, C.P. 72810, San Andrés Cholula, Puebla, Mexico.

For recruitment in the United States managed by Nexton Technologies LLC, that company is responsible for the application information: 6220 Westpark Dr, 149, Houston, Texas 77057, US. The entity managing a specific opportunity must be identified when the information is collected.

Purposes necessary for your application

  • Review the experience and skills you provide in relation to the vacancy or area you identify.
  • Manage your application and coordinate the interviews or evaluations explained during the process.
  • Contact you about the progress and outcome of that selection process.

Submitting an application does not constitute an employment offer or guarantee selection. Required contact information allows us to process and respond to your request.

Data categories and optional attachments

Provide your name, email, position or area of interest and relevant professional background. The form allows an optional CV attachment or professional-profile link. Do not include health information, political or religious beliefs, bank details, identification documents or unrelated third-party information at this stage.

How the application is handled

The form records the information in Webflow and makes it available to authorized recruitment personnel. CV files are uploaded when selected, before the final form submission; the privacy checkbox is placed before that step. Recruitment inquiries can be sent to joinus@nextontech.io.

This form does not automatically score or reject candidates. If a specific process introduces additional assessments, reference checks, sensitive information or significant automated decisions, the corresponding information and safeguards must be provided before that processing begins.

Optional purposes: future vacancies

An application does not automatically enroll you in an indefinite talent pool or authorize unrelated communications. Before keeping your profile for a separate future-opportunities program, Nexton must explain its scope and retention period and obtain a separate choice where consent is required. Declining that optional use does not affect the current application.

Sharing a profile with a client

If a position requires presenting your profile to a client or another hiring entity, that recipient and purpose must be identified before the disclosure, with the authorization or other legal basis applicable to the case.

Retention, rights and withdrawal

You can withdraw an application through joinus@nextontech.io. Requests about access, correction, deletion, objection or withdrawal of data-processing consent should be sent to privacy@nextontech.io. Withdrawing an application does not automatically erase an already uploaded file; request deletion through the privacy channel, subject to lawful retention obligations.

The general privacy provisions and retention and security criteria form part of this notice. The corresponding rights and request procedures are explained separately for Mexico, the United States and GDPR-covered processing.

04

Mexico: privacy and ARCO rights

For processing subject to Mexico's LFPDPPP, consent and the statutory exceptions are assessed under that law. A legal basis available under the GDPR does not automatically constitute an exception under Mexican law. A material change of purpose requires prior information and, where applicable, new consent.

For processing subject to Mexican law, contact privacy@nextontech.io to request access, rectification, cancellation or objection (ARCO), limit use or disclosure, or withdraw consent where processing relies on it. These rights may be exercised independently under the applicable legal conditions.

  • Include your name and a reply address; describe the right you wish to exercise and provide information that helps locate the relevant records, such as a vacancy and application date.
  • For corrections, identify the information to change and the supporting evidence. If acting for someone else, explain the representation.
  • Nexton will explain the proportionate identity or representation verification required before disclosing or changing personal data. Do not send an unredacted identity document in your first email unless it is necessary and a suitable channel has been agreed.

For ARCO requests governed by the Mexican LFPDPPP, the ordinary legal period is 20 business days to communicate the decision and, if applicable, 15 further business days to implement it. Each period may be extended once by an equal period when legally justified. Any refusal must state its grounds.

Withdrawal of consent does not invalidate earlier lawful processing. Cancellation may require restricted retention before deletion when necessary to meet legal obligations or address liabilities. You may pursue the applicable procedure before Mexico's Secretaría Anticorrupción y Buen Gobierno or another competent authority.

Prepare a privacy request

05

United States: privacy notice

Nexton Technologies LLC, 6220 Westpark Dr, 149, Houston, Texas 77057, US, is responsible for the website and U.S. recruitment it manages. Read this section with the data, purposes and recipients, candidate notice and retention provisions.

Rights and applicable scope

U.S. privacy rights depend on state law and its coverage. They may include access, correction, deletion, portability and choices concerning sale, targeted advertising or certain profiling. California may additionally provide rights concerning sharing for cross-context advertising and sensitive information. Applicable rights may be exercised without unlawful discrimination.

The Texas consumer privacy law excludes certain employment-related data and generally exempts small businesses, with exceptions. California may cover applicants and business contacts when its business-coverage requirements are met. A Houston address alone does not determine which protections apply.

Requests, representatives and review

Write to privacy@nextontech.io or the Houston address above with your contact details, state of residence, relationship to Nexton and request. Necessary identity or representative authorization checks depend on the request. If a right to appeal applies, reply through the same channel identifying the decision and requesting review. Applicable response periods and complaint rights remain in force.

06

GDPR and international processing

The EU GDPR applies where the processing falls within its territorial and material scope. Necessary pre-contractual steps requested by an applicant may rely on Article 6(1)(b). Professional inquiry management or channel security may rely on a documented legitimate interest, subject to the individual’s rights; legal obligations and separately requested optional activities have their corresponding basis. Applicable UK rights and safeguards are assessed under UK law.

Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction, portability or objection, and withdraw consent. You may also complain to the competent supervisory authority, including where you habitually reside or work. Send requests to privacy@nextontech.io.

GDPR rights requests are answered without undue delay and ordinarily within one month. A necessary extension of up to two further months must be communicated within the first month with its reasons. Identity checks and any refusal or lawful charge are subject to the regulation.

Transfers across borders

Website, application and collaboration data may be processed in the United States, Mexico or locations used by service providers. For transfers subject to the GDPR, an applicable Chapter V mechanism is required, such as an adequacy decision covering the recipient or appropriate contractual safeguards with any necessary additional measures. A provider's country alone does not establish that protection.

Contact the privacy channel for information about the recipient, transfer mechanism and the safeguards applicable to your data. Transfers subject to Mexican law must also meet its notice, consent or exception requirements.

07

Retention and security

Retention is determined by the purpose, completion of the relevant request or relationship, necessary follow-up, applicable statutory periods and any documented legal hold. A general website notice does not create an indefinite retention period.

  • Inquiries and commercial contacts: while needed to respond and manage the requested relationship, with any retention required for related obligations.
  • Applications and CVs: during evaluation and necessary closure; after the process, only the information needed for justified legal obligations or claims should remain restricted. A separate talent pool requires its own disclosed retention terms.
  • Technical records: according to the security purpose, incident handling and applicable provider retention settings. Backup copies may follow a separate deletion cycle with restricted use.

Protection and incident handling

Nexton applies reasonable organizational and technical safeguards proportionate to the information, including authorized access and confidentiality. No system offers absolute security. A personal-data incident must be assessed and notified to affected people or authorities where the applicable law requires it.

Requests for deletion must consider form records, CV files and any related recruitment mailbox copies. Closing the browser or unchecking a form box does not delete data already transmitted.

09

Website and communication terms

Use of content

You may consult and share links to this website for legitimate informational and business-evaluation purposes. Preserve attribution and proprietary notices when using materials expressly made available for download. Reproduction, alteration or commercialization beyond permitted use requires authorization or another lawful basis.

Acceptable use

Do not introduce malicious code, attempt unauthorized access, disrupt the service, impersonate others or submit information unlawfully. Legitimate security research must respect applicable law and agreed scope. Access may be restricted when reasonably necessary to protect the service or meet legal obligations.

Intellectual property and third-party references

Nexton content and branding belong to their respective rights holders. SAP, Microsoft, AWS and other referenced names or marks remain the property of their owners. References to technologies do not, by themselves, imply a certification, endorsement or particular partnership status.

Meetings and recordings

Before recording or transcribing a meeting, the organizer must explain the purpose, intended access and applicable retention, and obtain any consent required by law. Attendance alone is not treated as blanket authorization. If you object, notify the organizer so an appropriate alternative or lawful arrangement can be considered.

External links are provided for convenience. Review the privacy and service terms of the destination. A third party's policies do not remove Nexton's own obligations for processing under its responsibility.

Information, availability and liability

Website content is general information; a binding scope of service is established in the corresponding agreement. Availability and accuracy cannot be guaranteed in every circumstance. Any limitation of liability applies only to the extent permitted by law and does not exclude non-waivable duties or rights.

Access, law and disputes

Restrictions on website access do not extinguish privacy rights. Website terms are assessed under applicable Texas and U.S. law, without displacing mandatory protections or competent authorities in other jurisdictions. A separate signed contract governs the services covered by it.