Legal

Privacy Policy

Last updated: 17 August 2026

1. Who we are and how to reach us

This Privacy Policy applies to the website nutawe.info and all services offered through it. The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended) is the operator of the nutawe.info website.

You may contact us at any time regarding data protection matters:

  • By email: [email protected]
  • By post: Władysława Broniewskiego 4/lok. G/221, 15-203 Białystok, Poland
  • By telephone: +48 85 651 24 26

2. What personal data we collect

We collect personal data only to the extent necessary to operate our website and respond to enquiries. The categories of data we may process include:

  • Contact data: name and email address provided when you submit the contact form on our website.
  • Message content: the text of any message you send us through the contact form.
  • Technical data: IP address, browser type, device type, operating system, pages visited, and time of visit. This data is collected automatically when you access the website.
  • Cookie data: data stored in cookies placed on your device. The types of cookies used are described in our Cookie Policy.

We do not collect sensitive personal data (special categories of data as defined in Article 9 of the GDPR) and we do not collect financial or payment information through this website.

3. Legal bases for processing

We process your personal data on the following legal bases as set out in Article 6 of the GDPR:

  • Article 6(1)(a) — Consent: where you have given explicit consent, for example by accepting non-essential cookies through our cookie consent panel.
  • Article 6(1)(b) — Performance of a contract or pre-contractual steps: where processing is necessary to respond to your enquiry about our course offerings.
  • Article 6(1)(c) — Legal obligation: where we are required to process data to comply with applicable Polish or EU law.
  • Article 6(1)(f) — Legitimate interests: for the processing of technical data necessary to maintain the security and proper functioning of the website. Our legitimate interest is the secure and effective operation of the website and prevention of misuse.

4. Purposes for which we use your data

Your personal data is used for the following purposes:

  • Responding to messages and enquiries submitted through the contact form.
  • Providing information about the Nutawe online course upon request.
  • Maintaining the technical security and functionality of the website.
  • Analysing website usage in aggregate, anonymised form to improve content and user experience.
  • Complying with legal obligations applicable to us under Polish and EU law.

We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 of the GDPR.

5. How long we keep your data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

  • Contact form data (name, email, message content) is retained for a maximum of 24 months from the date of submission, unless a longer retention period is required by law or a continuing relationship justifies retention.
  • Technical log data is retained for up to 12 months for security and operational purposes.
  • Cookie preference data is retained for the duration of the cookie lifetime as described in our Cookie Policy.

After the applicable retention period, data is securely deleted or anonymised.

6. Sharing your data with third parties

We do not sell, rent, or trade your personal data. We may share data with third parties in the following limited circumstances:

  • Service providers: companies that provide hosting, email delivery, or technical infrastructure services necessary to operate the website. These providers act as data processors under written agreements and may not use your data for their own purposes.
  • Legal authorities: where required by applicable law, court order, or request from a competent Polish or EU public authority.

Any transfer of personal data outside the European Economic Area (EEA) is subject to appropriate safeguards as required by Chapter V of the GDPR, including Standard Contractual Clauses approved by the European Commission where applicable.

7. Your rights as a data subject

Under the GDPR and applicable Polish law, you have the following rights with respect to your personal data:

  • Right of access (Article 15 GDPR): you may request confirmation of whether we process your data and, if so, a copy of that data.
  • Right to rectification (Article 16 GDPR): you may request correction of inaccurate or incomplete data.
  • Right to erasure (Article 17 GDPR): you may request deletion of your data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
  • Right to restriction of processing (Article 18 GDPR): you may request that we limit processing of your data in certain circumstances.
  • Right to data portability (Article 20 GDPR): where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used format.
  • Right to object (Article 21 GDPR): you may object to processing based on legitimate interests at any time.
  • Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 of the GDPR.

8. Right to lodge a complaint

If you believe that our processing of your personal data violates the GDPR or applicable Polish data protection law, you have the right to lodge a complaint with the supervisory authority. In Poland, the competent supervisory authority is:

Urząd Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Website: uodo.gov.pl

You may also lodge a complaint with the supervisory authority in the EU member state of your habitual residence or place of work.

9. Security of your data

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access, in accordance with Article 32 of the GDPR. These measures are reviewed and updated regularly. While we take reasonable precautions, no method of transmission over the internet or electronic storage is entirely secure.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the way the website operates. The date at the top of this page indicates when the policy was last revised. Where changes are material, we will take reasonable steps to notify users. Continued use of the website after any update constitutes acceptance of the revised policy.