Privacy Policy

1. Data Controller

The controller of your personal data is:

For any matters relating to the protection of personal data, please contact the Controller at the email address above.

2. Legal Basis for Processing

The Controller processes personal data on the following legal bases under Article 6 of the GDPR:

• Art. 6(1)(a) GDPR — Consent: processing based on the freely given, specific, informed and unambiguous consent of the data subject — in particular for analytics cookies and marketing communications.
• Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual steps: processing necessary to respond to enquiries submitted via the contact form or to fulfil requests for resource downloads.
• Art. 6(1)(f) GDPR — Legitimate interests: processing for the purposes of website security, fraud prevention, and defence against potential legal claims.

3. Purposes and Data Processed

3.1. Contact form

Data provided in the contact form (full name, company, email address, message; optionally: position, phone number) are processed for the purpose of responding to the submitted enquiry and conducting correspondence. Legal basis: Art. 6(1)(b) GDPR. Retention period: 2 years from the date of last contact.

3.2. Resource downloads

Data provided when downloading resources (first name, email address; optionally: company name) are processed for the purpose of delivering the requested materials and — with prior consent — keeping the subscriber informed of new resources. Legal basis: Art. 6(1)(b) GDPR (delivery of materials) and Art. 6(1)(a) GDPR (marketing communications). Retention period: until consent is withdrawn.

3.3. Website analytics (Google Analytics 4)

With the explicit consent of the user expressed in the cookie preference panel, the Controller uses Google Analytics 4 to analyse website traffic. Data collected by GA4 includes anonymised IP addresses, browser and device information, pages visited and visit duration. This data is not linked to the user's identity. Legal basis: Art. 6(1)(a) GDPR. Retention period: 26 months per Google's default data retention settings.

4. Data Recipients

Personal data may be transferred to the following processors:

• Formspree Inc. (USA) — contact form processing service. Data transfer to the USA is carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission.
• MailerLite UAB (Lithuania, European Union) — email marketing platform for managing subscribers and delivering resources. Data is processed within the EU and the service is GDPR compliant.
• Google LLC (USA) — Google Analytics 4 service provider. Data transfer to the USA is carried out on the basis of Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework. Data sent to GA4 is anonymised prior to storage.

The Controller does not sell or share personal data with third parties for commercial purposes other than the services described above.

5. Your Rights

Every person whose data we process has the following rights under the GDPR:

• Right of access — to obtain information about which data we process and for what purpose (Art. 15 GDPR).
• Right to rectification — to request correction of inaccurate or completion of incomplete data (Art. 16 GDPR).
• Right to erasure — to request permanent deletion of data ("right to be forgotten"), where there is no lawful basis for continued processing (Art. 17 GDPR).
• Right to restriction of processing — to request that processing be suspended in certain circumstances (Art. 18 GDPR).
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format (Art. 20 GDPR).
• Right to object — to object to processing based on the Controller's legitimate interests (Art. 21 GDPR).
• Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out prior to withdrawal (Art. 7(3) GDPR).

To exercise any of the above rights, please contact the Controller at: kontakt@nomadirection.pl. The Controller will respond to your request without undue delay and no later than one month from receipt.

6. Cookies

The website nomadirection.pl uses cookies — small text files stored on your device by your browser. The cookies used on this site are categorised as follows:

6.1. Essential cookies

Required for the proper operation of the website. No consent is required.

6.2. Analytics cookies (require consent)

Collect anonymous information about how the website is used. Active only after the user grants consent.

6.3. Marketing cookies

Reserved for future advertising campaigns. Currently none are active. These will require user consent when introduced.

You can manage your cookie preferences at any time via the cookie settings button in the site footer, or by changing your browser settings.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority competent for data protection in your EU member state of residence.

In Poland, the competent supervisory authority is:

8. Changes to this Privacy Policy

The Controller reserves the right to update this Privacy Policy. Changes take effect upon publication of the updated version on the website. In the case of significant changes affecting data already being processed, the Controller will notify affected individuals by email.

Last updated: January 2025

9. Contact

For all matters relating to the protection of personal data and this Privacy Policy, please contact us at:

kontakt@nomadirection.pl