Privacy policy

Controller and contact details

The controller of personal data collected through this website's contact forms is NEXOS PSS SP. Z O.O., KRS 0001107291, NIP 8943236683, REGON 528711548. For personal data enquiries, email kontakt@nexospss.com or write to ul. Legnicka 48A, 54-202 Wrocław.

Where your enquiry requires another entity operating under the NEXOS PSS brand, we share with it the information necessary to handle the enquiry. That entity may process the data as a separate controller for its own services. Its details and processing information are provided when the relevant engagement is established.

Data we collect

The form asks for your full name, company or organisation, email and a description of your needs. You may provide a telephone number and preferred contact method. The proposal form also allows you to specify practice areas, a service, the stage of your enquiry and expected timing. We record the submission date, its identifier and the versions of the privacy information provided and form terms accepted.

Providing data is voluntary. Required fields are necessary to process the form and respond. You may also contact us by email or telephone. Do not enter special categories of personal data, passwords, identity document numbers or confidential information. The form does not accept attachments.

Purposes and legal bases

Submitting an enquiry does not subscribe you to a newsletter or constitute consent to marketing unrelated to your enquiry. We do not require consent to data processing as a condition of responding where another appropriate legal basis applies.

• Responding to enquiries and conducting business correspondence — Article 6(1)(f) GDPR; our legitimate interest is managing communications and business relationships.
• Taking steps at your request before entering into a contract to which you would be a party — Article 6(1)(b) GDPR. Where you contact us on behalf of an organisation, Article 6(1)(f) GDPR is the basis for processing its representative's data.
• Protecting the website against misuse and establishing, exercising or defending legal claims — Article 6(1)(f) GDPR, to the extent necessary to protect those interests.
• Compliance with legal obligations arising in connection with a matter, where applicable — Article 6(1)(c) GDPR.

Recipients of data

Data are accessible to authorised persons handling enquiries. Data may be processed by hosting, IT and email providers under appropriate data protection arrangements, and by the NEXOS PSS entity responsible for the relevant services. Disclosure to public authorities takes place where required by law.

The form mechanism does not send data to analytics, advertising or public AI services. It delivers the submission to a corporate mailbox on the NEXOS PSS server and does not save an additional copy of its contents in the application directory. Any subsequent transfer outside the European Economic Area requires compliance with the GDPR and information about the transfer basis and how to obtain a copy of the safeguards.

How long we retain data

We retain enquiry data in the email system for as long as necessary to respond and conclude the correspondence, and thereafter only where a further justified need exists, such as ongoing engagement discussions, a legal obligation or protection against claims. In those cases, retention depends on the nature of the matter and applicable statutory periods. Submissions no longer needed for those purposes are deleted.

For 14 days, the form mechanism retains a content-free technical receipt consisting of the submission identifier, delivery date and a keyed, non-reversible digest. It is used solely to prevent duplicate delivery. Anti-spam limits use short-lived identifiers derived from the network address. Separate server logs and backups are subject to the infrastructure administrator's security and retention rules.

Your rights

To exercise your rights, email kontakt@nexospss.com. Where there are reasonable doubts, we may request the information necessary to verify your identity. The scope of each right depends on the legal basis and circumstances of the processing.

• Access to your data, receipt of a copy and rectification of inaccurate data.
• Erasure or restriction of processing in the circumstances provided for by law.
• Objection on grounds relating to your particular situation where processing is based on legitimate interests.
• Data portability where processing is automated, based on consent or a contract, and the conditions for this right are met.
• Withdrawal of consent where we process data on that basis in a separate situation; withdrawal does not affect the lawfulness of earlier processing.
• Lodging a complaint with the President of the Polish Personal Data Protection Office.

Automation, security and recruitment

We do not use form submissions to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Selecting the team and responding to an enquiry involve human input.

The mechanism limits submission volume, validates fields and delivers content only to the configured corporate mailbox. Please use an up-to-date browser and an encrypted HTTPS connection.

Recruitment documents must not be sent through the contact form. Applications are submitted through the platform specified in the vacancy and are governed by the data processing information for that recruitment process.