Privacy Policy

1. Data Controller

The controller of your personal data is NextPath Capital Sp. z o.o., with its registered office at ul. Królewska 18, 00-103 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 12th Commercial Division of the National Court Register, under KRS number: 0001228410, NIP (Tax ID): 5253082551, REGON: 544226473.

2. Data Protection Officer

We have not appointed a Data Protection Officer — we are not obliged to do so under Article 37 GDPR. For matters related to the processing of personal data, please contact us at: kontakt@nextpathcapital.pl

3. Categories of Personal Data Processed

Through the contact form we collect the following categories of personal data:

  • first and last name;
  • email address;
  • phone number (optional);
  • company name (optional);
  • industry (optional);
  • approximate annual revenue (optional);
  • subject of the enquiry (optional);
  • the content of the message and any other personal data that you voluntarily include in it (optional).

4. Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

  • responding to your enquiry — legal basis: Article 6(1)(a) GDPR (voluntary consent given through the contact form);
  • marketing of products and services offered by the Controller through electronic means of communication (email, telephone, SMS), subject to a separate consent — legal basis: Article 6(1)(a) GDPR;
  • performance of a contract or taking steps necessary to enter into a contract — legal basis: Article 6(1)(b) GDPR (e.g. telephone or email contact to send an offer, to set the date of service performance, or to cancel or change such a date);
  • conducting business correspondence and archiving — legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller);
  • safeguarding against possible claims — legal basis: Article 6(1)(f) GDPR (legitimate interest of the Controller).

5. Recipients of Data

We may share your personal data with the following categories of recipients, only to the extent necessary to fulfil the purposes listed above:

  • providers of hosting services and server infrastructure;
  • providers of email services;
  • entities providing accounting and legal services (where necessary).

6. Transfer of Data to Third Countries

We do not transfer your personal data outside the European Economic Area. All website assets (including fonts) are hosted locally on servers located in the EU.

We do not transfer your personal data to any international organisation.

7. Data Retention Period

Your personal data will be processed:

  • for the period necessary to respond to your enquiry;
  • where processing is necessary for the performance of a contract — until the limitation period for claims arising from it has expired;
  • in the case of marketing activities based on consent — until that consent is withdrawn.

8. Rights of the Data Subject

In connection with the processing of your personal data, you have the following rights:

  • the right to access your data and obtain a copy of it (Article 15 GDPR);
  • the right to rectify (correct) your data (Article 16 GDPR);
  • the right to erasure — the “right to be forgotten” (Article 17 GDPR);
  • the right to restrict processing (Article 18 GDPR);
  • the right to data portability (Article 20 GDPR);
  • the right to object to the processing of your data (Article 21 GDPR);
  • the right to withdraw consent at any time (where processing is based on consent) — the withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal;
  • the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, www.uodo.gov.pl.

9. Voluntariness of Providing Data

Providing personal data is entirely voluntary, however it is necessary to respond to an enquiry sent through the contact form, or to enter into and perform a contract, or to receive an offer.

10. Profiling and Automated Decision-Making

Your personal data is not used for profiling or for automated decision-making within the meaning of Article 22 GDPR.

11. Cookies

Our website uses only necessary cookies, which do not require additional consent. We do not use any analytics, marketing or tracking tools.

12. Changes to the Privacy Policy

We reserve the right to introduce changes to this privacy policy. Each version of the privacy policy will be marked with the date of its last update.

Last updated: 30 April 2026.