Privacy Notice

Next CPA ("Company") values the security and confidentiality of personal data. This privacy notice explains how personal data obtained through our website is processed in connection with our tax advisory, VAT refund, certification, financial consulting, sector guidance, publications, circulars, calculators, and contact services.

1. Data controller Your personal data is processed by Next CPA as data controller. You may contact us through the contact details published on this website for questions regarding this notice or your personal data.

2. Personal data processed Depending on your interaction with the website, the following data may be processed: name and surname, phone number, email address, company information, service interest, message content, optional attachments or document references you choose to submit, IP address, browser and device information, cookie preference, local storage preference, site usage information, analytics events, and hCaptcha verification token.

3. Purposes of processing Your personal data may be processed to respond to contact requests, evaluate service and advisory needs, carry out proposal and client intake processes, provide information regarding tax, VAT refund, certification and financial consulting services, maintain website and form security, prevent spam and abuse, manage cookie preferences, improve website performance and user experience, prepare anonymized or aggregated analytical assessments, and fulfill legal obligations.

4. Collection method and legal basis Personal data is collected automatically or partly automatically through the website, contact forms, email and electronic communication channels, cookies, local storage, analytics tools, and hCaptcha. Processing may rely on the establishment or performance of a contract, compliance with legal obligations, the Company's legitimate interests in responding to requests and securing the website, and, where required, your explicit consent.

5. Transfers of personal data Your data may be transferred, where necessary and proportionate, to authorized public institutions, legally authorized private persons, and service providers from whom technical infrastructure, hosting, email delivery, analytics, security, captcha, and communication support are obtained. Transfers are carried out in accordance with applicable personal data protection rules, including rules on domestic and international transfers.

6. Cookies, analytics, and local storage The website uses strictly necessary preferences in your browser's local storage, including "next-cpa-theme" for appearance preference, "cookie_consent" for your cookie banner response, and "next-cpa-announcement-dismissed:<id>" for dismissed announcements. Where analytics is enabled with your consent, site usage may be measured to understand page performance and improve content. Analytics is not used for advertising or profiling.

7. hCaptcha verification Contact forms may use hCaptcha to protect the website from spam and automated misuse. When hCaptcha is active, verification data such as the captcha token, IP address, and browser-related signals may be processed by hCaptcha for security verification. If hCaptcha keys are not configured, the site may use its built-in verification method instead.

8. Your rights You may request information on whether your personal data is processed, access to processed data, the purpose of processing, correction of incomplete or inaccurate data, deletion or destruction where legally applicable, information on transfers to third parties, objection to results produced exclusively through automated systems, and compensation if you suffer damage due to unlawful processing. You may submit your requests through the Company's contact channels.