1. Data Controller

The controller of your personal data is NextPath Capital Sp. z o.o., with its registered office at ul. Królewska 18, 00-103 Warsaw, Poland, registered in the Polish National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register.

2. Data Protection Officer

We have not appointed a Data Protection Officer, as we are not required to do so under Art. 37 GDPR. For any questions regarding the processing of personal data, please contact us at: kontakt@nextpathcapital.pl

3. Categories of Data Collected

Through the contact form, we collect the following categories of personal data:

  • name and surname
  • email address
  • phone number (optional)
  • company name (optional)
  • industry, approximate annual revenue (optional — for preliminary qualification)
  • message content and inquiry subject

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

  • responding to your inquiry — legal basis: Art. 6(1)(a) GDPR (voluntary consent given through the contact form)
  • conducting business correspondence and archiving — legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller)
  • protecting against potential claims — legal basis: Art. 6(1)(f) GDPR (legitimate interest of the controller)

5. Recipients of Data

Your personal data may be shared with the following categories of recipients, only to the extent necessary to achieve the purposes listed above:

  • hosting and server infrastructure providers
  • email service providers
  • accounting and legal service providers (if necessary)

6. Transfer of Data to Third Countries

We do not transfer your personal data outside the European Economic Area. All website resources (including fonts) are hosted locally on servers located in the EU.

7. Data Retention Period

We process your personal data for the period necessary to respond to your inquiry, and then retain it for a maximum of 3 years from the date of the last contact, solely for the purpose of protecting against potential claims.

8. Your Rights

In connection with the processing of your personal data, you have the following rights:

  • the right to access your data and obtain a copy of it (Art. 15 GDPR)
  • the right to rectification (correction) of data (Art. 16 GDPR)
  • the right to erasure — “right to be forgotten” (Art. 17 GDPR)
  • the right to restriction of processing (Art. 18 GDPR)
  • the right to data portability (Art. 20 GDPR)
  • the right to object to processing (Art. 21 GDPR)
  • the right to withdraw consent at any time — withdrawal does not affect the lawfulness of processing carried out before withdrawal
  • the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl

9. Voluntary Provision of Data

Providing personal data is entirely voluntary, but necessary to respond to your inquiry submitted via the contact form.

10. Profiling and Automated Decision-Making

Your personal data is not used for profiling or automated decision-making within the meaning of Art. 22 GDPR.

11. Cookies

Our website uses only strictly necessary cookies, which do not require additional consent. We do not use analytics, marketing, or tracking tools.

Name Purpose Retention Category
pll_language remembers the selected language (Polylang) 1 year strictly necessary

12. Changes to the Privacy Policy

We reserve the right to make changes to this privacy policy. Each version of the policy will be marked with the date of the last update.