Ask us for an offer, write:
hello@nais.coFree industry reports?
Subscribe to the newsletterEN
Ask us for an offer, write:
hello@nais.coFree industry reports?
Subscribe to the newsletterEN
The information presented in this document is the fulfilment of the information obligation in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the Regulation, GDPR).
The document is a general declaration of the applicable principles of personal data processing. Detailed information can be found in the relevant Information Clause.
The document applies to all natural persons whose personal data are processed by the Personal Data Administrator in connection with conducting business activity and is the fulfilment of the information obligation indicated in Articles 13 and 14 of the GDPR.
The Controller of Personal Data is the Service Provider. Each data subject may contact the Personal Data Administrator by sending correspondence to the address of the registered office of the Personal Data Administrator or by sending an e-mail to the address dziendobry@nais.co or hello@nais.co, or by sending a message using the chat function available on the Service Provider's websites or by sending an inquiry in the contact form available on the website https://www.nais.co/en/contact. A list of Service Providers can be found on the page https://www.nais.co/en/legal/service-providers.
The Data Protection Officer is Łukasz Kołodziejczyk. the data subject may contact the Data Protection Officer by sending an email to the address iod@nais.co or privacy@nais.co or by sending appropriately addressed correspondence to the address of the registered office of the Personal Data Administrator.
The personal data that we collect and process as part of our business may be processed for various, strictly defined by us.
The purposes of personal data processing may be tailored and presented within a specific process or business context related to the activities we carry out.
You can find more detailed information on this subject in the relevant documents and Information Clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
Personal data is obtained directly mainly in the process of collecting documents, sending electronic forms, forwarding e-mails or written correspondence. The personal data collected in this way primarily includes data declared by the person to whom it relates.
Personal data are obtained indirectly, mainly in the process of collecting information about potential customers, co-workers or persons representing entities that may be interested in establishing business relationships. The personal data collected in this way include, in particular, data published on websites, as contact details, and data published on information society services (social networks) of a business nature.
Personal data is obtained automatically mainly during the use of websites. In this way, we primarily obtain data provided by the web browser or the device used by the end user when connecting to the Internet. This data primarily concerns the way our websites are used and is used by us to monitor interest in our products and offers, to improve the solutions used or to adjust the content and offers of products and services. This information may include the IP address of your Internet connection, the type of web browser, the type of operating system, the time you spend on our websites, the offers you browse and select.
The legal bases for the processing of personal data are always linked to and adapted to the purposes of the data processing. Each time we collect personal data, we will indicate the purposes of the personal data processing that we intend to pursue and the related legal bases.
We may process personal data primarily on the basis of consent, in connection with taking actions aimed at concluding a contract, in connection with the performance of a contract, in connection with the performance of legal obligations or on the basis of a legitimate interest.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
The period of processing personal data results from the purpose for which the data was collected and for which it is processed, as well as the legal basis for their processing.
Personal data processed on the basis of consent is processed by us until you withdraw your consent or object to further processing, and after this period they are deleted or anonymized.
Personal data processed in connection with the implementation of activities aimed at concluding a contract are processed by us for the period of performing these activities or until an objection to further data processing is lodged and examined, and after this period only to the extent necessary to comply with the obligations arising from the provisions of law. and in connection with any claims or defenses against claims. and after this period they are deleted or anonymized.
Personal data processed in connection with the performance of the contract are processed by us for the duration of the contract to the extent necessary for its proper performance, and after this period only to the extent necessary to comply with the obligations arising from the provisions of law and in connection with any claims or defense against claims, and after this period they are deleted or anonymized.
Personal data processed in connection with the performance of obligations arising from the provisions of applicable law are processed by us for the period indicated or resulting from these provisions of law to the extent necessary for their proper implementation, and after this period they are deleted or anonymized.
Personal data processed in connection with the implementation of our legitimate interest is processed by us for the period necessary to achieve a specific purpose or until an objection to such data processing is lodged and examined, and after this period it is deleted or anonymized.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
Personal data are made available primarily to our employees in accordance with the rights and authorizations they have in order to ensure the proper handling of the data processing processes carried out and in the necessary time and scope.
Our employees have been trained in the applicable rules of personal data processing and applicable laws regarding the principles of personal data processing and protection and have been obliged to keep this information confidential.
In justified cases, personal data may also be made available to trusted cooperating entities, only for the purposes and to the extent necessary to perform the duties or rights of the Controller.
Personal data may also be shared with our experts, in situations where it is necessary to carry out tasks resulting from the data subject's requests, in accordance with legal provisions and internal procedures.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
We provide all possible and available technical and organizational measures so that data subjects can exercise their rights without hindrance. Therefore, all notices and requests to exercise your rights should be directed to our electronic office address or physical office address.
In justified cases, in order to correctly identify the individual, we may ask for additional information or to provide the necessary documents to prove the identity of the person submitting the application.
Any requests related to the exercise of the rights of data subjects should be submitted directly to the Personal Data Administrator. In a situation where we process personal data as a Processor, i.e. on behalf of another personal data controller, we will provide the requesting person with appropriate information in this regard.
The data subject has the right to freely give or withdraw consent to the processing of personal data. In the event that personal data is processed on the basis of consent, we will provide the possibility to withdraw it at any time, either automatically using the mechanisms provided, or manually on the basis of an appropriate request sent to us in accordance with the indicated communication rules.
Personal data may also be processed by us based on a legitimate purpose, which is, m.in, marketing our own products and services. In this case, we also give you the opportunity to object to such processing.
The withdrawal of consent will have immediate effect from the moment of doing so and will not affect the processing that took place before the withdrawal.
The withdrawal of consent does not entail any negative consequences, but it may prevent you from continuing to use the services or websites offered in the manner specified by us.
The data subject has the right to access the personal data being processed. We exercise this right primarily by means of electronic communication, providing information on request about what data we currently have.
The data subject may also receive copies of the information we hold from us. In this case, we will provide a copy of the personal data processed in a structured, commonly used and machine-readable format. We do not charge a fee for the preparation, processing and release of the first copy of the data.
We may charge a fee for subsequent requests based on the cost of preparing, processing and providing such data. In this case, the applicant will be informed about the fee before preparing another copy of the data.
The data subject has the right to rectify (change) his or her personal data. This right can be exercised primarily by means of electronic communication, which enable the transmission of information about changes in personal data. In the event that this is not possible, the data subject has the right to demand that we immediately correct, supplement or delete the data accordingly.
The data subject has the right to request the deletion of his or her personal data. We exercise this right on the basis of a clear request for deletion of data provided to us. Requesting deletion of personal data may result in the termination of the service or the use of services and tools provided by us or those of our trusted partners.
Every data subject has the right to erasure if:
However, the exercise of the right to request the erasure of personal data may be restricted if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
The data subject has the right to request the restriction of the processing of personal data. We exercise this right on the basis of an explicit request to restrict processing with justification submitted to us.
The data subject may exercise the right to restrict the processing of personal data:
The data subject has the right to object to the processing of personal data. We exercise this right on the basis of a clear objection to the processing of your personal data submitted to us.
The data subject may exercise the right to object to the processing of personal data in a situation where this processing is carried out in connection with the implementation of our legitimate interest - e.g. marketing of our own products and services.
The data subject has the right to submit a request regarding the transfer of personal data to another controller. However, for security reasons and in the absence of standards related to data portability, we will not always be able to comply with such a request. However, in accordance with our policies, the data subject may receive a copy of the personal data from us.
The data subject has the right to file a complaint related to the processing of personal data at any time to the supervisory authority - the President of the Office for Personal Data Protection.
We respect privacy and guarantee the possibility of exercising the rights resulting from the provisions of law regarding the processing of personal data. In order to avoid unnecessary disputes, we encourage you to contact our Data Protection Officer directly to resolve any disputes before filing such a complaint.
The above-mentioned rights and the manner of their exercise may be subject to restrictions in justified cases. Such a situation will occur if this limitation results from the obligations indicated in the provisions of law, which we are obliged to apply. In this case, we will provide you with the relevant information along with the reasons for our decision.
Providing personal data may be necessary for the proper performance of a specific activity, the proper provision of services or the execution of a request or notification, and the fulfilment of obligations arising from the provisions of applicable law.
By applying the principle of minimization, we do not collect more data than is necessary to carry it out. Whenever the provision of additional personal data is necessary for the achievement of a specific purpose, we will provide the relevant information directly or this information will be made available in the appropriate information clause.
Failure to provide the required information may result in the restriction or cessation of our provision of services, suspend or terminate the contract or prevent the fulfilment of a request or request, as well as result in a breach of obligations arising from the provisions of law.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
In connection with the processing of personal data, we use computer IT systems in which data processing processes take place in an automated manner.
The activities we carry out in the field of automated processing of personal data are aimed at increasing the quality, efficiency, efficiency of data processing operations and information security.
In certain cases, computer IT systems may make automated decisions affecting the manner in which personal data is processed and the manner in which the rights of data subjects are exercised. We will make every effort to ensure that such situations are properly communicated, at the same time we ask you to report any doubts in this regard in accordance with the established rules of communication.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
In order to tailor our offer, improve the functions and increase the functionality of our websites and the tools we provide, we collect and process information about how users of our websites use our website and what products and services they are interested in.
The information is also used for statistical and analytical purposes and may be used for automated processes of matching the offer, including for purposes related to the marketing of our products and services.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
Personal data may be transferred to third countries, i.e. outside the European Economic Area, mainly for the purpose of using information society services. In such cases, the security measures required by law will be applied to guarantee an adequate level of data protection and the rights and freedoms of data subjects.
You can find more detailed information on this subject in the relevant documents and information clauses, which we publish on our websites or make available directly each time in the process of obtaining personal data.
In accordance with the needs, rules of business and changes in the law, we will update the Privacy Policy with appropriate provisions.
We will inform you of any changes through our websites by posting the relevant information on the page of this Privacy Policy.
In addition, in the event of significant changes related to the protection of privacy and the protection of personal data, we may send additional information to the e-mail address provided to us or require you to re-accept the principles of personal data processing and privacy protection in connection with the processing of information.
The document and the rules described therein are effective at the time of publication. Any deviations from the described general principles are governed by other documents and detailed provisions provided during the collection and further processing of personal data as part of the processes and operations of personal data processing.
Date of update: 2025-10-09
Your business data is safe in Nais.
Check out our certifications.
Copyright © Grupa Nais 2025. All rights reserved.
