Privacy Policy

Last updated: August 2026

Data Controller:
Nevel sp. z o.o., ul. Tadeusza Wendy 2B, 52-407 Wrocław, Poland
E-mail: serwis@nevel24.pl  ·  Phone: +48 607 622 999

1. General provisions

This Privacy Policy sets out the rules for processing and protecting the personal data of users of the websites nevel24.pl and nevel24.com, as well as individuals contacting Nevel sp. z o.o. for commercial or service-related matters.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), the Polish Personal Data Protection Act, and other applicable legislation.

2. What data we collect and why

We process personal data in the following cases and for the following purposes:

  • Contact form / e-mail: first name, last name, e-mail address, phone number, company name — in order to respond to an enquiry or provide a service (Art. 6(1)(b) and (f) GDPR).
  • Service requests: identification data, site location, fault description — for the purpose of performing a service contract (Art. 6(1)(b) GDPR).
  • Recruitment: data contained in CVs and application documents — for the purpose of conducting the recruitment process (Art. 6(1)(a) and (b) GDPR).
  • Cookies and analytics: data about activity on the website — to improve the site’s performance and analyse traffic (Art. 6(1)(f) GDPR, or with the user’s consent).
  • Invoicing and accounting: company and personal data — as required by law (Art. 6(1)(c) GDPR).

3. Legal basis for processing

We process data on the following legal grounds:

  • Art. 6(1)(a) GDPR — consent of the data subject (e.g. analytical cookies, recruitment).
  • Art. 6(1)(b) GDPR — necessity for the performance of a contract or to take steps prior to entering into a contract.
  • Art. 6(1)(c) GDPR — compliance with a legal obligation (e.g. tax and accounting regulations).
  • Art. 6(1)(f) GDPR — legitimate interests of the controller (contact handling, security, analytics).

4. Data retention periods

  • Contact form data — up to 12 months from the last contact, or for the duration of the business relationship.
  • Service contract and order data — for 5 years from the end of the year in which the contract expired (tax requirements).
  • Recruitment data — for the duration of the recruitment process; with the candidate’s consent, up to 12 months for future recruitment needs.
  • Invoice data — for 5 years from the end of the calendar year in which the tax payment deadline fell.

5. Recipients of data

Personal data may be shared with:

  • Providers of hosting, IT and system maintenance services (processing data on our behalf).
  • The accounting firm handling Nevel sp. z o.o.’s bookkeeping.
  • Providers of e-mail and communication services.
  • State authorities and courts — solely on the basis of applicable law and a valid request.

We do not sell personal data or transfer it outside the European Economic Area without the appropriate safeguards required by the GDPR.

6. Rights of data subjects

You have the following rights:

  • Right of access — you may obtain information about whether and what data we process.
  • Right to rectification — you may request correction of inaccurate or incomplete data.
  • Right to erasure — you may request deletion of your data in cases provided for by the GDPR.
  • Right to restriction of processing — you may request restriction of processing in certain circumstances.
  • Right to data portability — you have the right to receive your data in a structured, commonly used format.
  • Right to object — you may object to processing based on the controller’s legitimate interests.
  • Right to withdraw consent — at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint — you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise any of the above rights, please contact us at: serwis@nevel24.pl. We will respond within 30 days of receiving your request.

7. Cookies

Our websites use cookies — small text files stored by your browser on your device. We use the following types of cookies:

  • Strictly necessary cookies — required for the website to function properly. No consent is required.
  • Analytical cookies — allow us to analyse traffic and user behaviour (e.g. Google Analytics). Require consent.
  • Functional cookies — remember user preferences. Require consent.

You can change your cookie settings in your browser at any time, or withdraw your consent via the cookie banner on the website.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. Access to data is restricted to authorised persons who are bound by a duty of confidentiality.

9. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy. We will notify you of any significant changes via a notice on the website or by e-mail. The date of the last update is shown at the top of this document.

10. Contact

For matters relating to the protection of personal data, please contact us: