Legal

Privacy Notice

1. Introduction

This Privacy Policy explains how Nested IT Services Sp zoo ("we", "us", "our") collects and processes personal data when you use our website (the "Website") or otherwise interact with us in connection with the Website. We are committed to protecting your privacy and processing your personal data in compliance with applicable data protection laws, in particular the EU General Data Protection Regulation ("GDPR").

Please read this Privacy Policy carefully. By using the Website, you acknowledge that you have read and understood this Policy.

2. Data Controller and Contact Details

The data controller for the purposes of the GDPR is:

Nested IT Services Sp zoo
Address: 191 Rolna Street No. 193, Warsaw, Poland
Email: contact@nesteditservices.com
Registration Number: 524948590
Phone Numbe: +371 25364105

If you have any questions about this Privacy Policy or our data protection practices, you can contact us using the details above.

3. Categories of Personal Data We Collect

We may process the following categories of personal data when you use the Website:

  • Identification and contact data: name, business email address, telephone number, company name, job title (e.g. when you use our contact form or subscribe to updates).
  • Technical and usage data: IP address, browser type and version, device identifiers, operating system, time and date of access, time zone setting, referrer URL, pages viewed, and other usage information collected via cookies and similar technologies.
  • Communication data: content of messages, enquiries and feedback you send to us, and related correspondence.

We do not intentionally collect special categories of personal data (e.g. health data, religious beliefs) through the Website. Please do not provide such information via our contact forms or other fields.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the basis of the legal grounds set out below:

1. Providing and operating the Website

  • To enable you to access and use the Website (e.g. loading pages, ensuring security and functionality).
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR) - our interest in providing a secure, functional website.

2. Responding to enquiries and communications

  • To process and respond to contact requests, project enquiries or support questions submitted via forms, email or phone.
  • Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR), where the enquiry relates to a potential or existing contractual relationship; otherwise legitimate interests (Art. 6(1)(f) GDPR) - our interest in responding to business communications.

3. Analytics and website improvement

  • To analyse how the Website is used, improve content, performance and security, and understand which services are of most interest to visitors.
  • Legal basis: consent (Art. 6(1)(a) GDPR) where required for non-essential cookies/analytics; otherwise legitimate interests (Art. 6(1)(f) GDPR) - our interest in improving and securing the Website.

4. Marketing communications (B2B)

  • To send you information about our services, events or updates that may be relevant to you in a business context (e.g. if you request such information or if permitted by applicable law).
  • Legal basis: consent (Art. 6(1)(a) GDPR) where required, or legitimate interests (Art. 6(1)(f) GDPR) - our interest in promoting our services in a B2B context, subject to your right to object.

5. Compliance, enforcement and legal claims

  • To comply with legal obligations, respond to lawful requests from public authorities, enforce our rights, or defend legal claims.
  • Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR) and/or legitimate interests (Art. 6(1)(f) GDPR) - our interest in protecting our rights and ensuring compliance.

5. Cookies and Similar Technologies

We use cookies and similar technologies on the Website. These may include:

  • Strictly necessary cookies - required for the Website to function (e.g. security, load balancing).
  • Analytics cookies - to gather usage statistics and improve the Website.

Where required by law, we will ask for your consent before placing non-essential cookies (e.g. analytics cookies). You can manage your cookie preferences at any time via the cookie banner or your browser settings.

For more detailed information about the cookies we use, their purposes and storage periods, please refer to our separate Cookie Policy.

6. Recipients of Personal Data

We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

  • Service providers (processors): IT hosting providers, analytics providers, email and communication service providers, and other companies that support the operation and maintenance of the Website. These service providers process data only in accordance with our instructions and under data processing agreements that comply with Art. 28 GDPR.
  • Professional advisers: legal advisers, auditors or insurers, where necessary to protect our legitimate interests or comply with legal obligations.
  • Public authorities and courts: where we are legally obliged to do so or where disclosure is necessary to establish, exercise or defend legal claims.

We do not sell your personal data.

7. International Data Transfers

If we transfer personal data to recipients outside the European Economic Area (EEA) or the United Kingdom, we will ensure that an adequate level of protection is in place in accordance with GDPR requirements. This may include:

  • An adequacy decision by the European Commission (Art. 45 GDPR); or
  • Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR), possibly combined with additional safeguards where appropriate.

You may contact us using the details above if you would like more information about the specific safeguards applied to international transfers.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

In particular:

  • Contact and communication data are generally retained for the duration of our correspondence and, where relevant, for the duration of any contractual relationship, plus applicable limitation periods.
  • Technical and usage data (e.g. log files) are retained for a limited period necessary for security, troubleshooting and analytics, after which they are deleted or anonymised.
  • Data required for compliance with legal obligations (e.g. tax or commercial law) are retained for the statutory retention periods.

When personal data are no longer needed for the specified purposes, we will delete or anonymise them, unless we are legally required or permitted to retain them longer.

9. Your Rights as a Data Subject

Under the GDPR, you have the following rights in relation to your personal data, subject to applicable conditions and limitations:

  • Right of access (Art. 15 GDPR): to obtain confirmation as to whether we process your personal data and, if so, access to that data and additional information.
  • Right to rectification (Art. 16 GDPR): to request correction of inaccurate or incomplete personal data.
  • Right to erasure ("right to be forgotten") (Art. 17 GDPR): to request the deletion of personal data, for example where they are no longer necessary for the purposes for which they were collected or where you withdraw consent (if consent was the legal basis).
  • Right to restriction of processing (Art. 18 GDPR): to request that we restrict processing of your personal data in certain circumstances.
  • Right to data portability (Art. 20 GDPR): to receive the personal data you provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller, where processing is based on consent or contract and carried out by automated means.
  • Right to object (Art. 21 GDPR): to object, on grounds relating to your particular situation, to processing based on our legitimate interests. You also have an unconditional right to object at any time to processing for direct marketing purposes.
  • Right to withdraw consent (Art. 7(3) GDPR): where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise any of these rights, please contact us using the details in section 2. We may need to verify your identity before responding to your request.

10. Right to Lodge a Complaint with a Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State or UK country of your habitual residence, place of work or place of the alleged infringement.

The competent authority for Poland is:
Personal Data Protection Office (Urzad Ochrony Danych Osobowych, or UODO)
https://uodo.gov.pl/en

11. Security of Your Personal Data

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, encryption, network security measures, backup and recovery routines, and regular reviews of our security practices.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping any access credentials (such as passwords) confidential and not sharing them with others.

12. Links to Other Websites

The Website may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the content or privacy practices of such sites. We recommend that you review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our processing activities or legal requirements. We will publish the updated version on this page and adjust the "last updated" date below. We encourage you to review this Privacy Policy periodically.

Last updated: 20/07/2026

14. How to Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our processing of your personal data, please contact us using the information found at the top of this document.