Polityka prywatności

1. This Privacy Policy explains the principles for collecting, processing, and storing your personal data by the website www.nexx.pl.
   The Service collects only the personal data necessary to provide and develop the services offered therein, i.e. real estate development services.
2. Personal data collected through the Service is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as GDPR), as well as the Polish Personal Data Protection Act of 10 May 2018.

The personal data administrator is NEXX DEVELOPER, a limited liability company with its registered office at ul. Borowinowa 25, 43-230 Goczałkowice-Zdrój, entered into the Register of Entrepreneurs of the National Court Register under KRS number: 0001022280, Tax Identification Number (NIP): 6381752880, National Business Registry Number (REGON): 241071111, represented by the company owner and the person appointed by the PDA – the Personal Data Inspector and Information System Administrator (ISA) for protecting privacy on the website.

You can contact the Personal Data Protection Officer by sending a registered letter to the postal address of NEXX Spółka z o.o., 43-230 Goczałkowice-Zdrój Borowinowa 25, or by email to zbigniew@nexx.pl.

You can contact the Information System Administrator (ISA) by sending a registered letter to the postal address of NEXX Developer Sp. z o.o., 41-400 Mysłowice, Chopina 34A, or by email to zbigniew@nexx.pl.

1. Your personal data is used for the following purposes and on the following legal bases (Article 6 of the GDPR):

• concluding and performing a commercial contract, after-sales service – Article 6(1)(b) of the GDPR (necessity for the performance of the contract),
• registering an account, enabling login to the Website, and verifying the user’s identity – Article 6(1)(b) of the GDPR,
• implementing services and e-services provided by the Controller – Article 6(1)(b) of the GDPR,
• communicating with the user (contact form, live chat) – Article 6(1)(b) of the GDPR or Article 6(1)(f) of the GDPR (legitimate interest – ongoing customer service),
• sending a newsletter – Article 6(1)(a) of the GDPR (user consent),
• operating a commenting system and social media services – Article 6(1)(b) of the GDPR (b) or (f) of the GDPR,
• promotion of the Controller’s offer, marketing, remarketing, affiliation, content personalization – Article 6 paragraph 1(f) of the GDPR (legitimate interest of the Controller) or Article 6 paragraph 1(a) of )the GDPR (within the scope of activities requiring consent, e.g., marketing cookies),
• analytical and statistical activities – Article 6 paragraph 1(f) of the GDPR,
• debt collection – Article 6 paragraph 1 (f) of the GDPR,
• establishing, pursuing, or defending against legal claims – Article 6 paragraph 1 (f) of the GDPR,
• fulfilling the legal obligations by the Controller (e.g., accounting, tax, archiving) – Article 6 paragraph 1(c) of the GDPR.

2. Providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Website.

The Personal Data Administrator may process the User’s personal data such as: name and surname, date of birth, residential address, e-mail address, telephone number, Tax Identification Number (NIP).

Users’ personal data will be stored for the following periods:

• where the processing is based on a contract – until its performance and then until the expiry of the limitation period for claims arising from the contract (generally 6 years, and for periodic and business-related claims – 3 years, unless specific provisions provide otherwise),
• where the processing is based on consent – ​​until its withdrawal and, after withdrawal, until the expiry of the limitation period for claims related to data processing,
• where the processing is based on a legal obligation – for the period required by applicable regulations (e.g., tax, accounting, archiving),
• where the processing is based on the legitimate interest of the Personal Data Administrator – until the User effectively objects or until such interest expires (e.g., completion of debt collection proceedings, expiration of claims).

In any case, the data storage period may be extended if continued storage is necessary to establish, pursue, or defend claims.

• Users’ personal data may be transferred to entities affiliated with the Personal Data Administrator, its subcontractors, entities cooperating with the Controller, e.g., e-payment companies, courier/postal services, and law firms. 
• Users’ personal data will not be transferred outside the European Economic Area (EEA).

1. The Website User has the right to: access, rectify, erase, restrict processing, transfer, object to processing, and withdraw consent at any time (which does not affect the lawfulness of processing based on consent before its withdrawal).
2. Notification of the User’s exercise of the rights arising from the above rights should be sent to: zbigniew@nexx.pl
3. The Website User has the right to withdraw consent at any time by changing browser settings. Personal data will be processed and stored depending on the duration of the technology’s use. Consent may also be withdrawn by email or by sending a written message to the Controller.
4. The Controller shall comply or refuse to comply with the request promptly – no later than one month from its receipt.
5. The User has the right to file a complaint with the President of the Personal Data Protection Office if they believe that the processing violates their rights and freedoms (GDPR).

1. NEXX Developer Sp. z o.o. applies technical and organizational measures to ensure the protection of personal data processing appropriate to the risks and categories of data, and in particular secures personal data.
2. It applies technical and organizational measures to ensure the protection of personal data processing appropriate to the risks and categories of data, and in particular secures personal data.
3. Access to personal data is limited to those authorized to process it and required to maintain confidentiality. All entities entrusted with the processing of personal data under a contract are obligated to protect it using appropriate security measures and will be obligated not to disclose your data without our consent and knowledge.
4. Nexx Developer Sp. z o.o. makes every effort to ensure all means of physical, technical, and organizational protection of personal data against accidental or intentional destruction, accidental loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations.

The website uses cookies and similar technologies to ensure the proper operation of the website, improve the quality of services provided, maintain statistics, and – with the User’s consent – ​​for analytical and marketing purposes.

The following types of cookies are used:

• necessary – necessary for the proper operation of the website and do not require the User’s consent,
• analytical/statistical – help understand how Users use the website; the legal basis for their use is the User’s consent (Article 6, (1) (a)  of the GDPR),
• marketing – allow for the customization of content and advertising to the User’s preferences; the legal basis is the User’s consent (Article 6, (1) (a) of the GDPR).

The User can at any time specify the scope of use of cookies in their browser settings or in the settings available on the website. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Cookies may be stored on the User’s device for the period specified in their parameters or until they are deleted by the User. The Website also uses cookies and other third-party tracking technologies, including:

• Google Analytics – enables the analysis of how Users use the Website, including the number of visits, time spent on the website, and navigation paths within the Website.
• Google Search Console – enables monitoring the Website’s presence in Google search results and optimizing content for search engines.
• Google Ads – enables the display of advertisements tailored to Users’ interests and measuring the effectiveness of advertising campaigns.
• Google Tag Manager – enables the management and implementation of marketing and analytical tags on the Website without the need to modify the source code.
• Microsoft Clarity – used to analyze User interactions with the Website, including session recording, cursor movement analysis, and click tracking, which improves the website’s usability.

Therefore, personal data may be transferred to third countries (outside the European Economic Area, in particular to the USA). These providers ensure appropriate data protection mechanisms (e.g., standard contractual clauses approved by the European Commission). These tools are used to analyze how the Website is used, measure the effectiveness of advertising campaigns, tailor advertising content, and improve the user experience (e.g., analyzing cursor movements, recording sessions).

These tools are used to:

• analyze how the Website is used,
• measure the effectiveness of advertising campaigns,
• tailor advertising content to the User’s interests,
• improve the user experience (e.g., analyzing cursor movements, recording sessions).

1. Users’ personal data is not processed in an automated manner that would lead to decisions being made that would have legal effects or significantly affect them in a similar manner (Article 22 of the GDPR). 
2. Personal data may be processed for profiling purposes, i.e., to adapt content and personalize the offer, only after the User has provided separate consent.

1. The Personal Data Administrator has the right to make changes to the Privacy Policy, but Users’ rights will not be limited.
2. Information about any changes will be published on the Website.
3. In matters not covered by this Privacy Policy, the provisions of the GDPR and Polish law shall apply.
4. This Privacy Policy is effective from September 20, 2024, and replaces the previously applicable Privacy Policy of June 3, 2024.