Privacy Policy

1. Who is the data controller?

The controller of your personal data is FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI “TWÓJ STARTUP”, with its registered office in Warsaw, ul. Żurawia 6/12, lok. 766, 00-503 Warsaw, Poland.

This Privacy Policy applies to the websites:

• https://nexinlab.com
• https://pl.nexinlab.com

and to services provided under the Nexinlab brand by the Foundation Beneficiary: Andrei Liahovich.

Contact details:

• general contact e-mail: [email protected]
• privacy / GDPR contact e-mail: [email protected]
• phone: +48 786 810 312

2. Nature of the website

The Nexinlab websites are informational and contact-oriented.

Through the website, a user may submit an enquiry, request contact, request an initial review, or start a conversation about potential cooperation.

The website does not allow users to automatically purchase services or make online payments. The scope, price, timeline and cooperation terms are agreed individually before any service starts.

3. What services does Nexinlab provide?

Nexinlab provides or may provide services related to:

• website audits;
• website lead path analysis;
• enquiry path analysis;
• UX improvement;
• CTA and contact form improvement;
• basic SEO;
• tracking and analytics;
• website optimization;
• process automation;
• website improvement implementation;
• website development;
• custom CRM solution development;
• consulting related to improving enquiry generation through websites.

4. Why do we process personal data?

Personal data may be processed for the following purposes:

A. Handling enquiries sent through forms or e-mail

We process data to respond to an enquiry, contact the person submitting the form, assess the situation related to the website and suggest a possible next step.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in handling enquiries and communicating with potential clients.

B. Preparing an offer and taking steps before entering into a contract

If the enquiry leads to cooperation discussions, data may be processed to prepare a proposal, define the scope of work, price, timeline and terms.

Legal basis: Article 6(1)(b) GDPR.

C. Performing a contract

If cooperation starts, data will be processed to perform the service, communicate with the client, deliver work results, handle settlements and documentation.

Legal basis: Article 6(1)(b) GDPR.

D. Legal, accounting and tax obligations

Data may be processed to comply with legal obligations, especially accounting, tax and documentation requirements.

Legal basis: Article 6(1)(c) GDPR.

E. Establishing, pursuing or defending claims

Data may be processed to protect the controller’s rights, pursue claims or defend against claims.

Legal basis: Article 6(1)(f) GDPR.

F. Website analytics

If the user consents to analytics cookies, technical data and information about website interactions may be processed to analyse website performance, traffic sources, form submissions, CTA clicks, e-mail clicks, phone clicks and to improve the website.

Legal basis: user consent, Article 6(1)(a) GDPR.

G. Marketing communication

If the user voluntarily consents, data may be processed to send occasional messages about website improvement, enquiry generation, analytics and related services.

Legal basis: user consent, Article 6(1)(a) GDPR.

Consent may be withdrawn at any time by contacting: [email protected].

5. What data may be processed?

Depending on how you contact us, we may process the following data:

• full name;
• company name;
• e-mail address;
• phone number;
• website URL;
• message content;
• business type or industry;
• reason for contact;
• selected enquiry type or preferred next step;
• additional information voluntarily submitted through the form;
• technical data related to form submission;
• information about the source of the visit, if included in the URL or stored based on user consent.

Most form fields are optional. However, failure to provide some information may make it difficult or impossible to respond to the enquiry.

6. Website forms

Forms may be available in particular at:

• https://nexinlab.com/contact/
• https://pl.nexinlab.com/

The forms are used to submit an enquiry, describe the website situation, request contact or start a discussion about a potential service.

7. Cookies and technical data

The website uses cookies and similar technologies as described in the Cookie Policy.

In particular, the website may use:

• a cookie remembering the user’s consent choices;
• a campaign attribution cookie, only after consent to analytics or marketing;
• Google Tag Manager / Google Analytics, if the user consents to the relevant cookie categories;
• Cloudflare Turnstile to protect forms from abuse;
• Cloudflare security mechanisms, which may use technical security cookies.

8. Who may receive the data?

Data may be transferred or made available to the following categories of recipients:

• Fundacja Rozwoju Przedsiębiorczości “Twój Startup”;
• the Beneficiary providing services under the Nexinlab brand;
• hosting, infrastructure and security providers, in particular Cloudflare;
• e-mail service provider, in particular Zoho;
• analytics tool providers, in particular Google, if the user consents to analytics;
• accounting, tax, documentation or settlement service providers;
• legal or tax advisors, if necessary;
• public authorities, where required by law.

At the current stage, form data is used only internally within the Nexinlab project.

9. Is data transferred outside the European Economic Area?

Some tools used on the website or for enquiry handling may involve data transfers outside the European Economic Area, in particular services provided by Google, Cloudflare or Zoho.

In such cases, appropriate data protection mechanisms are used, in particular standard contractual clauses or other mechanisms required under GDPR.

10. How long do we keep data?

Data is stored for the period necessary to achieve the purpose for which it was collected.

Indicative storage periods:

• form enquiry data: for the time needed to handle the enquiry and related communication;
• data related to a potential offer: for the duration of sales discussions and then for the period needed to protect against claims;
• data related to contract performance: for the duration of the contract and for the period required by law;
• accounting and tax data: for the period required by law;
• data processed based on consent: until consent is withdrawn;
• marketing data: until consent is withdrawn or an objection is submitted.

11. Is data profiled?

User data is not used for automated decision-making that produces legal effects or similarly significantly affects the user.

The website may use analytics data to assess website effectiveness, traffic sources and user actions, but only in accordance with the user’s consent and for the purpose of improving the website and services.

12. What rights do users have?

The user has the right to:

• access their data;
• rectify their data;
• delete their data;
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time;
• lodge a complaint with the President of the Personal Data Protection Office in Poland.

To exercise your rights, please contact:

[email protected]

13. Contact

For privacy and personal data matters, please contact:

[email protected]

For general Nexinlab service enquiries:

[email protected]