Privacy Policy

1. General Information

This Privacy Policy defines the rules for processing and protecting personal data provided by Users in connection with their use of nendro services (hereinafter: the "Service").

2. Data Controller

The controller of personal data contained in the Service is nendro, registered as VULPESEC Piotr Zawiślak, NIP: 8952244067, email: [email protected] (hereinafter: the "Controller").

3. Purposes and Legal Bases for Processing

The Controller processes Users' personal data for the following purposes:

Performance of the electronic services agreement (Art. 6(1)(b) GDPR)
Handling contact inquiries and correspondence (Art. 6(1)(b) GDPR)
Marketing of the Controller's own products or services (Art. 6(1)(f) GDPR - legitimate interest: informing about own services and acquiring clients)
Analysis of Service traffic, maintaining statistics (Art. 6(1)(f) GDPR - legitimate interest: improving the functionality and content of the Service)

4. Data Retention Period

Users' personal data will be stored for the period:

In the case of contract performance - for its duration and until the limitation period for claims expires
In the case of marketing - until an objection to such processing is raised
In the case of analysis and statistics - until an objection to such processing is raised
In the case of correspondence - for 3 years from the last contact

5. Data Recipients

Recipients of Users' personal data may include:

Entities processing data on behalf of the Controller (IT service providers, CRM tools, email services)
Entities authorized to obtain data under applicable law (courts, law enforcement authorities)

6. User Rights

Users have the following rights related to the processing of personal data:

Right of access to their data and to receive a copy of it
Right to rectification (correction) of their data
Right to erasure of data
Right to restriction of data processing
Right to object to data processing
Right to data portability (applies to processing based on consent or contract, carried out by automated means)
Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (applies to consent-based processing)
Right to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office)

7. Voluntary Data Provision

Providing personal data is voluntary, but may be necessary to use the Service's services or to perform a contract. Failure to provide data may prevent a response to an inquiry or the provision of services.

8. Cookies and Analytics Tools

The Service uses cookies to ensure proper website operation, traffic analysis, and content personalization. The User can change browser settings regarding cookies at any time. Disabling cookies may affect the functionality of the Service.

Google Analytics 4

The Service uses Google Analytics 4 provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This tool collects anonymous statistical data about the use of the website (including number of visits, time spent on the site, device type, country of origin). This data is processed by Google on servers in the United States.

Google Analytics and Google Ads are activated only after the User gives consent through the cookie banner visible on the first visit to the site. Until consent is given, no analytics or marketing data is collected (Consent Mode v2). The User can accept all categories, reject them, or choose specific ones (analytics, marketing). The User can change or withdraw consent at any time by clicking the "Cookie settings" link in the page footer.

Data transfer to the USA is based on Standard Contractual Clauses (SCC) approved by the European Commission. More information: Google's Privacy Policy.

Legal basis for processing: user consent (Art. 6(1)(a) GDPR).

9. Data Security

The Controller applies appropriate technical and organizational measures to ensure the security of processed personal data, including data encryption during transmission (SSL/TLS), access control, and regular security audits.

10. Changes to Privacy Policy

The Controller reserves the right to change this Privacy Policy. Users will be informed of any changes through publication of updates on the Service website. The date of the last modification is indicated at the beginning of each document.

11. Contact

For matters related to personal data, please contact us at: [email protected]