Privacy and Cookie Policy

Last updated: 15 September 2026. This policy covers both language versions of nexuspm.pl.

1. Data controller and contact

The controller is Marcin Zaworski, trading as NexusPM Marcin Zaworski, Poland, tax identification number (NIP) 7772759651. For enquiries and data protection requests, email kontakt@nexuspm.pl.

2. Data, purposes and legal bases

Situation	Data and purpose	GDPR legal basis
Enquiry about a service for yourself	Name, email, company, optional phone and project information — answering and taking steps you request before a contract	Article 6(1)(b)
Contact on behalf of a company or another general enquiry	Business contact details and correspondence — communication and organising cooperation	Article 6(1)(f): legitimate interest in handling business correspondence
Providing an agreed service	Contact details and information needed to perform the agreement	Article 6(1)(b) for a contracting individual; Article 6(1)(f) for communication with company representatives
Statutory duties arising from cooperation	Relevant transaction and billing data	Article 6(1)(c), where an applicable legal obligation requires processing
Security and availability	Technical logs, such as IP address, request time, resource, browser and errors — troubleshooting and detecting abuse	Article 6(1)(f): legitimate interest in protecting the website and communications
Establishing, exercising or defending claims	Correspondence and evidence relevant to a particular claim	Article 6(1)(f): legitimate interest in protecting legal rights
Optional Google Analytics 4	Visits, interactions, referral information, device/browser, approximate location and pseudonymous identifiers	Article 6(1)(a): consent

Accepting a privacy policy is not a separate legal basis for answering an enquiry. Submitting the form does not subscribe you to a newsletter or authorise unrelated marketing.

3. Form and email

The forms in both languages collect fields marked as required and any optional information you choose to provide, including the project stage and required support, a project description, and optional budget and timing information. Neither form accepts attachments.

Providing data is voluntary. Without required contact details and a description, the form cannot be submitted; alternatively, you can email me. Do not send passwords, access tokens, health data or unnecessary personal data about other people. Remove information not needed to assess the project from documents sent by email.

Web3Forms processes submitted form data and technical information needed for delivery and spam prevention. The message is delivered to my mailbox; the provider can also retain a copy in its infrastructure. Visiting a page does not submit the form.

4. Recipients and providers

Data may be disclosed, as necessary, to:

• OVHcloud, for website hosting and technical infrastructure;
• the provider operating the controller's email service, for receiving and storing correspondence;
• Web3Creative, operator of Web3Forms, for delivery, storage and anti-spam processing, with its authorised infrastructure providers;
• Google, for Google Analytics 4, only after analytics consent;
• authorised IT support, accounting or legal advisers where needed, and public authorities where disclosure is legally required.

Web3Forms documents its infrastructure and anti-spam providers in its privacy policy and data processing agreement. NexusPM does not sell enquiry data. Fonts are served from NexusPM, not requested from Google Fonts by your browser.

5. Processing outside the EEA

Web3Creative operates in India and uses international infrastructure. Its data processing agreement provides Standard Contractual Clauses for applicable EEA transfers. Google's processing may involve the United States and other countries; Google describes applicable adequacy decisions and contractual safeguards in its transfer framework information.

Contact the controller for information about safeguards relevant to your data and how to obtain a copy. Refusing analytics does not affect use of the website or contact options. Email is an alternative to the Web3Forms form.

6. Retention

• Enquiries: for the time needed to answer and complete the conversation. Afterwards, correspondence is retained only where needed for ongoing cooperation, a legal duty or a specific potential claim; duration depends on that purpose and the applicable limitation period.
• Contracts and accounting records: during cooperation and for the statutory retention or limitation period applicable to the particular document. Not every website enquiry is an accounting record.
• Web3Forms copies: the provider declares default maximum submission retention of three years, subject to earlier deletion or a shorter applicable setting. This is separate from the mailbox copy.
• Technical logs: for investigating errors or abuse and maintaining security, according to the hosting or mail provider's retention cycle. Incident evidence may be retained until resolution and expiry of relevant claims.
• GA4 data: until expiry of the applicable user/event retention period in the property, subject to earlier deletion where required. Standard GA4 properties offer two- or fourteen-month user/event retention; aggregated reports are treated differently. Withdrawing consent stops further measurement in this browser but does not automatically erase earlier data. Contact me to request erasure.

7. Cookies and browser storage

Item	Purpose	Duration
nx-consent-v2 in localStorage	Remembers acceptance or refusal of analytics; no advertising purpose	Six months, or until you change the choice or clear website data
_ga and _ga_* cookies	GA4 visitor/session measurement, only after acceptance	Configured by this site to expire after 180 days, without renewal of the expiry by this site's configuration

The site uses basic consent mode: the Google Analytics script is not loaded before acceptance. Analytics events do not intentionally include form content, email addresses or phone numbers. Advertising personalisation and Google signals are disabled in the website configuration.

Use Cookie settings in the footer to change your choice. Reject withdraws earlier analytics consent, removes accessible GA cookies and reloads the page with analytics blocked. Withdrawal does not affect the lawfulness of earlier processing. You may also clear website data in your browser. If localStorage is blocked, your choice may not persist between pages. Necessary hosting security mechanisms do not depend on analytics consent.

8. Your rights

Under the conditions in the GDPR, you may access and obtain a copy of data, rectify it, request erasure or restriction, and object to legitimate-interest processing because of your particular situation. Portability applies to automated processing based on consent or a contract. Rights are not absolute; a statutory retention duty may prevent immediate erasure.

You may withdraw consent at any time. Send requests to kontakt@nexuspm.pl. A response is normally provided within one month. If complexity or the number of requests justifies a lawful extension, you will be informed within that month. Proportionate identity verification may be needed if there are reasonable doubts.

You may complain to the President of the Polish Personal Data Protection Office (Prezes UODO) at uodo.gov.pl, or another competent supervisory authority, particularly where you habitually reside, work or where the alleged infringement occurred.

9. Automated decisions and external links

NexusPM does not use enquiry data for solely automated decisions producing legal or similarly significant effects. Technical spam filters may reject a submission; use email if the form fails. External websites linked in articles apply their own privacy rules when you visit them.

10. Changes

The policy is updated when website processing changes. The date at the top identifies the current version. Both languages describe the same processing.