1. Data Controller
- The controller of your personal data is NextView Sp. z o.o., with its registered office at ul. Staromiejska 69, 35-231 Rzeszów, Poland.
2. Scope of Processed Data and Purpose of Processing
- Your personal data is processed:
- for the purpose of reading and responding to correspondence sent via the contact form - pursuant to Article 6(1)(b) and (f) of the GDPR,
- for the provision of programming services, including telephone contact in matters related to the performance of an order,
- for issuing VAT invoices and performing accounting processes - in accordance with applicable legal requirements,
- for analyzing website traffic and optimizing its performance using Google Analytics - based on your consent (Article 6(1)(a) of the GDPR),
- for protecting the contact form from abuse and spam using Cloudflare Turnstile - based on the legitimate interest of the controller (Article 6(1)(f) of the GDPR).
2.1. Contact Form
- Processed data: first name, last name, e-mail address.
- Purpose: to respond to the submitted inquiry.
2.2. Contact Data for Service Execution
- We may additionally request your telephone number to clarify matters related to the execution of the order more efficiently.
2.3. Invoice Data
- If issuing a VAT invoice is necessary, we process: first name, last name, telephone number, e-mail address, and company details (full company name, registered office address, VAT ID number, bank account number).
3. Sharing of Personal Data
- Your personal data will be shared only with:
- entities involved in the execution of the ordered service - exclusively with your consent,
- an accounting office for the purposes necessary to carry out accounting services. The accounting office is obliged to maintain confidentiality and secure the data in accordance with the law,
- Google LLC (as part of the Google Analytics service) - regarding data automatically collected during the use of our website,
- Cloudflare, Inc. (as part of the Cloudflare Turnstile service) - regarding data necessary to verify that the sender of a message is a human.
4. Data Retention Period
- We store personal data indefinitely to allow for future contact, except for data contained in accounting documentation (VAT invoices), which is retained for the period required by tax law.
- Data collected through Google Analytics is retained in accordance with the tool`s settings (by default, 26 months), and data processed by Cloudflare Turnstile is stored for the time necessary to verify the request and protect the form.
5. Rights of Data Subjects
- You have the following rights:
- the right to access your personal data,
- the right to rectify your data,
- the right to erase your data (“right to be forgotten”) - excluding data contained in accounting documentation,
- the right to restrict processing,
- the right to object to processing,
- the right to data portability,
- the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO).
6. Transfer of Data Outside the European Union
- Personal data is not transferred outside the European Economic Area, except when related to the use of Google Analytics and Cloudflare Turnstile. In such cases, data may be processed by entities located in the USA, with appropriate legal safeguards in place (e.g., standard contractual clauses).
7. Automated Data Processing
- Data submitted via the contact form may be verified by automated systems for spam and abuse detection (Cloudflare Turnstile) and may be analyzed automatically as part of website traffic statistics (Google Analytics)..
8. Data Protection Measures
- Data from the contact form is transmitted as e-mail messages stored on a secure incoming mail server hosted by cyber_Folks S.A.. The hosting provider`s privacy policy is available at: https://cyberfolks.pl/polityka-prywatnosci/.
- Data in paper form (e.g., VAT invoices) is stored and secured by the accounting office.
- Data collected by Google Analytics and Cloudflare Turnstile is processed in accordance with the privacy policies of these providers:
- Google Privacy Policy
- Cloudflare Privacy Policy
9. Data Breach Procedures
- If a data breach or suspected breach occurs, the Controller will immediately inform the affected individuals about the incident and the remedial actions taken.