Privacy Policy

1. Who is the Data Controller?

The data controller for personal data collected through this website is Nalasi, with a registered address at Elżbiety 23, Szczecin, Poland. You can contact us regarding data protection matters at [email protected] or by phone at +48 506 185 970.

2. What personal data do we collect?

We collect personal data that you provide directly to us through the contact form on this website. This includes your full name, organization name, email address, phone number, and the content of your message. We also collect data automatically when you visit the website, including your IP address, browser type, operating system, pages visited, and the date and time of your visit. This technical data is collected through server logs and, where you have consented, through cookies.

3. On what legal basis do we process your data?

We process data submitted through the contact form on the basis of Article 6(1)(b) GDPR, where processing is necessary to take steps at your request prior to entering into an agreement, and Article 6(1)(f) GDPR, where we have a legitimate interest in responding to inquiries about our services. Technical data collected automatically is processed on the basis of Article 6(1)(f) GDPR for the legitimate interest of maintaining website security and improving its functionality. Where we use non-essential cookies, we rely on your freely given consent under Article 6(1)(a) GDPR.

4. How do we use your personal data?

Personal data submitted through the contact form is used solely to respond to your inquiry and to communicate with you about the Nalasi webinar series. We do not use your data for automated decision-making or profiling. Technical data is used to ensure the proper functioning and security of the website. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Who do we share your data with?

We may share your data with technical service providers who assist in the operation of this website, including hosting providers and email service providers. These providers act as data processors under written agreements that comply with Article 28 GDPR. They process data only on our instructions and do not use it for their own purposes. We may also disclose data where required by applicable law or by a competent authority.

6. Are data transfers made outside the European Economic Area?

We aim to process all personal data within the European Economic Area. Where any service provider processes data outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission under Article 46(2)(c) GDPR, or that the transfer falls within an adequacy decision under Article 45 GDPR.

7. How long do we keep your data?

Data submitted through the contact form is retained for as long as necessary to respond to your inquiry and for a reasonable period thereafter in case of follow-up questions, typically no longer than 12 months from the date of last contact. Technical log data is retained for no longer than 90 days. Where we are required by law to retain data for a longer period, we comply with that obligation.

8. What rights do you have regarding your personal data?

Under GDPR and applicable Polish law, you have the right to access your personal data (Article 15 GDPR), the right to rectification of inaccurate data (Article 16 GDPR), the right to erasure in certain circumstances (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR), the right to data portability (Article 20 GDPR), and the right to object to processing based on legitimate interests (Article 21 GDPR). Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 GDPR.

9. How can you lodge a complaint?

If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the supervisory authority. In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.

10. How do we protect your data?

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These measures include encrypted data transmission (TLS/HTTPS), access controls, and regular review of our security practices. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page, identified by the "Last Updated" date at the top. We encourage you to review this policy periodically.