We care about the privacy of visitors to nimweo.dev. This policy explains who processes your personal data, how, and what rights you have, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
1. Data controller
The controller of your personal data is Maciej Mierzejewski (esuu.dev) (the “Controller”).
You can contact the Controller about personal data at: [email protected].
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to enquiries sent through the contact form or by e-mail and conducting correspondence | Name, e-mail address, company name (optional), topic and content of the message, site language, date sent | Art. 6(1)(f) GDPR (legitimate interest: handling enquiries). Where the enquiry concerns entering into a contract: Art. 6(1)(b) GDPR (steps taken at the data subject’s request before entering into a contract) | Until the correspondence ends, but no longer than 12 months from receipt of the message; longer if needed to establish, pursue or defend legal claims or if a contract has been concluded |
| A product launch notice you ask for by choosing the “Product launch news” topic in the form: saving your address on a list in our database, a one-off confirmation of the sign-up and a message when the products launch | E-mail address, name, company name (optional), site language, sign-up date | Art. 6(1)(a) GDPR (consent given by sending the form with this topic). You can withdraw consent at any time by replying to the confirmation message or writing to the address given in section 1 | Until the launch notice is sent or consent is withdrawn, and no longer than 24 months from signing up |
| Operating and securing the site (server logs, abuse protection, rate limiting) | IP address, date and time of the request, URL, response code, browser data (user agent) | Art. 6(1)(f) GDPR (legitimate interest: security and proper functioning of the site) | No longer than 30 days; longer only in the event of a security incident, until it is resolved |
| Strictly necessary cookies (session, form protection, remembering the cookie notice choice) | Identifiers stored in cookies (see the Cookie Policy) | Art. 6(1)(f) GDPR (legitimate interest: proper functioning of the site) | As stated in the Cookie Policy |
| Meeting legal obligations (e.g. tax and accounting), if a contract is concluded | Data needed to issue and retain accounting documents | Art. 6(1)(c) GDPR | For the period required by law |
| Establishing, pursuing or defending legal claims | Data needed to demonstrate events and circumstances of the case | Art. 6(1)(f) GDPR (legitimate interest) | Until the claims become time-barred |
This policy covers the nimweo.dev site. We will explain how data is processed in Nimweo products once they become available.
3. Providing data is voluntary
Providing data in the contact form is voluntary, but the marked fields are necessary for us to reply. Certain technical data (e.g. your IP address) is processed automatically with every connection to the site. The site cannot be displayed without it.
4. Recipients of data
We do not sell your data. It may be shared only with:
- service providers we use to run the site and handle correspondence, in particular the hosting and server infrastructure provider (OVH sp. z o.o. (OVHcloud), Wrocław, KRS 0000220286) and the e-mail provider. They process data under a data processing agreement (Art. 28 GDPR) and only on our instructions;
- bodies entitled to receive data under the law (e.g. public authorities, courts);
- legal, accounting and tax advisers, to the extent necessary to provide services to us and subject to confidentiality.
5. Transfers outside the European Economic Area
As a rule we process data within the European Economic Area. If a service provider processes data outside the EEA, this happens only with the safeguards required by the GDPR, in particular on the basis of a European Commission adequacy decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses. You can obtain a copy of the safeguards by contacting us.
6. Your rights
In connection with the processing of your data you have the right to:
- access your data and receive a copy of it (Art. 15 GDPR);
- rectify your data (Art. 16 GDPR);
- erase your data, the so-called “right to be forgotten” (Art. 17 GDPR);
- restrict processing (Art. 18 GDPR);
- data portability (Art. 20 GDPR), where we process data on the basis of a contract and by automated means;
- object to processing based on legitimate interests (Art. 21 GDPR), on grounds relating to your particular situation;
- withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before it.
To exercise these rights, write to [email protected]. We may ask for information needed to verify your identity. We will respond without undue delay and in any event within one month.
You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also complain to the supervisory authority in the EU Member State where you live or work or where the infringement took place.
7. Automated decision-making and profiling
We do not make decisions about you solely by automated means and we do not carry out profiling that produces legal effects concerning you or similarly significantly affects you.
9. Data security
We apply technical and organisational measures appropriate to the risk, including encrypted HTTPS connections, limiting access to data to those who need it, and regular software updates. The site’s fonts are hosted locally, so loading them does not send your data to third parties.
10. Changes to this policy
This policy may be updated, for example when our processing or the law changes. The current version is always available on this page, with the date of the last change.