Introduction
We want you to feel fully informed about how we process your personal data. That is why we have created this privacy policy, which explains in a simple and accessible way what information we collect, for what purpose we process it and how we protect it.
As a company operating in the internet industry, we are aware of the importance of protecting privacy. That is why we use modern technical and organizational measures, including data transmission encryption (SSL), to ensure the security of your data.
Please read the information below – it only takes a few minutes and will help you better understand how we look after your data.
1. Personal data administrator
The controller of personal data is NUDYESS Sp. z o. o. with its registered office in Skarżysko-Kamienna (ul. Działkowa 20, 26-110 Skarżysko-Kamienna). The company is entered into the National Court Register under the KRS number: 0000652200, NIP: 6631872824, REGON: 365458354, and its share capital is PLN 5,000.
In the context of this policy, “Administrator” refers to our company.
2. How can you contact us?
In matters relating to the processing of personal data, you can contact us via:
- e-mail: contact@nudyess.com,
- postal address: ul. Działkowa 20, 26-110 Skarżysko-Kamienna,
- telephone: +48 533 429 770 .
We have also appointed a Data Protection Officer (DPO) – Tomasz Czyżewski, whom you can contact by writing to the following address: dataprotection@nudyess.com.
3. Legal basis for data processing
Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). In situations not covered by the GDPR, we apply the provisions of the Act of 10 May 2018 on the Protection of Personal Data.
Our goal is to fully comply with applicable regulations and ensure that your data is processed legally and transparently.
4. What personal data do we process and for what purposes?
We offer a variety of services on our Site that require the processing of your personal data. Each of these activities is carried out in accordance with the appropriate legal bases and has a clearly defined purpose.
User Account
When creating an account on the Website, we ask you to provide the following information:
- name and surname,
- email address,
- password.
This information is necessary to create and manage your account. Failure to provide the required data will prevent you from creating an account.
We process data for the following purposes:
- Account management and communication : enabling the use of the Service's functions and contact in matters related to its operation. The legal basis for processing is the execution of the contract, and in the case of data provided voluntarily - consent.
- Analysis and statistics : study of user activity in order to improve the functions of the Service. The legal basis is our legitimate interest.
- Informing about the activities of the Service : sending messages unrelated to the commercial offer. The legal basis is our legitimate interest.
- Legal protection : securing the possibility of pursuing claims or defending against them. The legal basis is our legitimate interest.
Orders on the Website
When ordering products, please provide the following information:
- name and surname,
- delivery address,
- email address,
- telephone number,
- billing address (if different from shipping address).
If you wish to issue a VAT invoice, you must also provide your Tax Identification Number and company details.
Failure to provide the mandatory data will prevent the order from being fulfilled.
We use this data for the following purposes:
- Order fulfillment : processing necessary to fulfill the contract, including handling any complaints.
- Legal obligations : fulfilling tax and accounting requirements, such as issuing invoices and archiving them.
- Legal protection : securing the ability to pursue claims or defend against them.
- Marketing and newsletter : if you have given your consent, sending marketing content via newsletter.
Newsletter and User Communication
Newsletter subscription
If you have provided us with your email address to receive the newsletter, we provide you with access to information about our products, services and news. Providing data is voluntary, but necessary for us to be able to provide this service.
You can always unsubscribe by using the unsubscribe link found in every message.
Your data is used to:
- Sending marketing content : this is based on your consent and our legitimate interest.
- Analysis and service improvement : processing takes place for the purpose of improving the content and functionality of the Website, which constitutes our legitimate interest.
- Legal protection : securing the ability to pursue claims or defend against them.
Contact via email
When you contact us by email, we process your data, such as your email address and any other information you include in your message. If circumstances require it, we may ask for additional data that is necessary to resolve the reported matter.
We process this data for the purpose of:
- Handling your request or question : this action results from our legitimate interest and consent to data processing.
Contact via contact form
When you use the contact form on the Website, you provide us with your data, such as name, e-mail address or phone number. This data is processed in order to contact you and answer your question.
The legal basis for processing is our legitimate interest and your consent.
Data from social media profiles
If you interact with our profiles on Facebook, Instagram, YouTube, TikTok or Pinterest, your data, such as your account name, comments, likes or other public information, may be processed.
The purpose of processing is:
- Managing our profiles : including promoting the brand, products and services and communicating with users.
- Improving the quality of services provided : analysis of user activity in social media.
We emphasize that the administrators of the social media platforms themselves are responsible for the processing of your data.
Data collected automatically
When you use the Service, we automatically collect data that allows us to analyze how users use the site. These include:
- IP address,
- Browser type,
- Operating system,
- Information about entering the site.
This data is used solely for statistical purposes and to optimize the Service. It is not combined with other user information and is used solely to improve the comfort of using the Service, which is our legitimate interest.
Providing data is voluntary, but necessary to use certain functions of the Service, such as creating an account or placing orders. You can contact us at any time with questions regarding the processing of your personal data.
5. How long do we process your personal data?
The processing time of personal data depends on the purpose for which the data is used and the legal basis for its processing. In practice, this means that the data is stored:
- for the period of service provision,
- until you withdraw your consent to their processing,
- until an effective objection to their processing is raised,
- until your request to delete them is fulfilled,
- for the period required by law that obliges us to store it.
In special cases, when processing is necessary for the defense, exercise or determination of claims, this period may be extended. After this time, the data will be stored only to the extent specified by law.
6. What rights do you have in relation to the processing of personal data?
Under the GDPR, you have the following rights:
- Access to data – You can receive information about whether and how we process your data, as well as obtain a copy of it.
- Data rectification – You have the right to request the correction of incorrect or incomplete data.
- Data deletion (“right to be forgotten”) – You can ask for your data to be deleted if it is no longer needed or has been processed unlawfully.
- Restriction of processing – You may request the restriction of processing if, for example, you contest their accuracy or you need them to defend claims.
- Objection to processing – You have the right to object to the processing of your data in certain situations, including for marketing purposes.
- Data portability – You can request that your data be transferred to you or directly to another controller in a structured format.
How to submit your requests?
To exercise any of the above rights, please contact us at: dataprotection@nudyess.com . We will consider your application without undue delay, but within a month at the latest. In the case of particularly complex cases, this period may be extended by another two months, about which you will be informed.
Withdrawal of consent
You have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent will not affect the lawfulness of processing that took place before its withdrawal.
To withdraw your consent, please contact us at: dataprotection@nudyess.com .
The right to file a complaint
If you believe that the processing of your personal data violates the law, you have the right to file a complaint with the appropriate supervisory authority. In Poland, this is the President of the Personal Data Protection Office (PUODO). Detailed information can be found on the PUODO website : https://uodo.gov.pl .
Thanks to these principles, we take care of your rights and transparency in the processing of personal data.
7. Sharing personal data
Personal data may be transferred to trusted entities that cooperate with us on the basis of appropriate agreements. These entities process data only on our behalf and in accordance with our guidelines, maintaining the highest standards of confidentiality and security. We reserve the right to verify whether the processing of data by these entities is carried out in accordance with the agreement.
In some cases, your data may also be transferred to entities that independently carry out specific purposes, such as courier companies or payment service providers.
In situations required by law, personal data may be disclosed to relevant public authorities or other authorized entities.
8. Transfer of data outside the European Economic Area
Some of your personal data may be transferred to countries outside the EEA, in particular to the United States, in connection with the use of services from companies such as Google or Microsoft. Both of these organizations participate in the EU-US Data Privacy Framework, which guarantees an adequate level of data protection.
We take all necessary measures to ensure the security of your data, including conducting a detailed assessment of the risks associated with its transfer and applying appropriate technical and organisational security measures.
9. Social media
Our website may contain plug-ins and integration tools with popular social media platforms such as Facebook, Instagram, TikTok, Pinterest or YouTube.
If you visit our site, your browser may connect to these service providers' servers, which allows them to collect information about your activity, such as your visits to our site or your IP address. If you are logged into one of these platforms, this data may be assigned directly to your social media account.
To minimize this risk, you can:
- Log out of your social media account before visiting our site.
- Use browser extensions that block social plugins.
For more information about the data protection rules of individual platforms, please refer to their privacy policies:
We care about protecting your privacy and make every effort to ensure that your data is processed in accordance with applicable regulations.
10. Cookies
General information
When using our website, cookies, which are small text files, are saved on your device to enable the website to function properly and to adapt its functionality to your needs.
Cookies contain, among other things, the name of the domain from which they originate, the time they are stored on the device and a unique identifier.
Security
The cookies used do not pose a threat to your device. They do not contain viruses or malware and do not provide access to data stored on your device.
Types of cookies
We use two types of cookies:
- Session cookies – stored on your device only during a browser session. They are automatically deleted when you close it.
- Persistent cookies – remain on your device until you manually delete them or they expire.
Neither type of cookie allows us to collect any personal data or confidential information from your device.
Purposes of using cookies
We use cookies for various purposes:
- Functional – ensuring the correct operation of our website and the ability to personalize its content.
- Statistical – enabling the analysis of website traffic thanks to tools such as Google Analytics, managed by Google Ireland Ltd. Google’s privacy policy can be found here .
- Advertising – supporting the presentation of personalised advertising content using tools such as Google Ads and Facebook Pixel, managed by Google Ireland Ltd. and Facebook Ireland Ltd. respectively. Details of their privacy policies can be found here and here .
Cookie management
You have full control over the cookies saved on your device. You can change your browser settings at any time to:
- block the saving of cookies,
- receive notifications about their posting,
- delete already saved cookies.
Detailed instructions on how to manage settings can be found in the help menu of your web browser.
If you would like to customize the ads displayed by the Google Network, please use the tool available here .
11. Privacy Policy Updates
We regularly review and update our privacy policy to ensure compliance with applicable laws and to optimally protect your data. The document was last updated on December 9, 2024.