Privacy policy

Definitions:

ADO – Personal Data Administrator – Nomino Sp. z o.o. (Ltd.)

RODO – General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

nomino.pl – our website there we are presenting service and product offers. https://nomino.com.pl/

cookies – – IT data saved on user device, allowing user to browse Nomino website

Użytkownik –Adult person browsing and uses offers and services presented on Nomino Ltd. Website.

Data Administrator:

Nomino Ltd. Located in Kolbuszowa, ul. Handlowa 2a, Poland is legal data administrator for website.

Your data handling:

We are taking all necessary actions to make sure your data is safe and secured. Our website is using secure data transfer (SSL) during subscription or form sending from our service. SSL guarantee data secure, and access to your data by unauthorized systems or people.

What are personal data according to RODO? (GDPR):

According to RODO (GDPR), personal data is any information relating to an identified or identifiable person. When visiting our website, such data are, for example, name and surname, e-mail address, IP address, telephone number. Personal data may be saved in cookies or similar technologies (e.g. local storage) installed by us or our Partners on our website and devices that you use when using our services.

Legal basis and purpose of data processing:

The processing of personal data requires the demonstration of the legal basis. The GDPR provides for several types of legal grounds for data processing, and in the case of using our services, there will be, as a rule, three of them:

1. Necessity of processing to conclude or perform a contract, to which you are a party. The contract is, in our case, the terms and conditions of a given service. So, if we conclude a contract with you for the implementation of a particular service (e.g. a service that provides you with the opportunity to familiarize yourself with nomino.pl based on the content of this website regulations), we may process your data to the extent necessary to perform this contract.
2. Necessity to process data for purposes resulting from legally argued interests pursued by the administrator or by a third party. This basis for data processing applies to situations where their processing is justified due to our justified needs, which includes, the obligation to ensure the security of the service, improve our services and adapt them to the needs and comfort of users (e.g. personalizing content in services). ) as well as conducting marketing and promotion of own services.
3. Your voluntary consent, is necessary especially when marketing services are provided to you by third parties (i.e. the Partners referred to below) and when we provide services to third parties. In order to be able to show the advertisements, you are interested in (e.g. for a product that you may need), advertisers and their representatives, must be able to process your data. There is no obligation to give such consent, and you do not have to give it, if you do not wish to. Thanks to our solution, you also have the option to narrow down the scope or change your consent at any time. Your other rights resulting from the consent are presented below.

As part of our services, your data will be processed only if we, or another data processor, have one of the legal bases permitted by the RODO (GDPR) and only for the purpose adapted to the given basis, as described above. Your data will be processed until there is basis for their processing, from the time of consent until its withdrawal, restriction or other actions on your part limiting this consent, if there is a need for data to perform the contract – for the duration of its performance, and if the basis for data processing is the argued interest of the administrator – until this legitimate interest exists.

Data administrator can process personal data in purpose listed below, on specified basis in given period of time.:

Data processing purpose:	Legal basis for data process:	Period of time in which data is stored:
Fulfilling contract or actions on demand of the data subject before contract realization.	Art 6 ust. 1 lit. b) RODO ordinance (contract realization) – processing is necessary for the fulfillment of a contract to which the data subject is party, or to take steps at the request of the data subject prior to processing contract	The data is stored for the period necessary to perform, terminate or otherwise terminate the concluded contract.
Direct Marketing	Art 6 ust. 1 lit. f) RODO ordinance ( legitimate Administrator interest) – processing is necessary for the purposes of the Administrator legitimate interests – consisting in caring for the interests and good image of the Administrator	The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator claim against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years). The administrator may not process data for the purpose of direct marketing in the event of an effective objection in this regard by the data subject.
Marketing	Art 6 ust. 1 lit. a) RODO ordinance (consent) – the data subject has consented to the processing of its personal data for marketing purposes by the Administrator	The data is stored until the data subject withdraws his consent for further processing of his data for this purpose.
Customer opinion	Art 6 ust. 1 lit. f) RODO ordinance – ( legitimate Administrator interest) – processing is necessary for the purposes of the Administrator legitimate interests – consisting in caring for the interests and good image of the Administrator	The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator’s claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years).
Keeping tax books	Art 6 ust. 1 lit. c) RODO ordinance, art. 86 § 1 Tax ordinance from 17.01.2017r (Dz.U from 2017r poz. 201) – data processing is necessary to fulfill the legal obligation incumbent on the Administrator	The data is stored for the period required by law requiring the Administrator to store tax books (until the expiry of the limitation period for the tax obligation, unless tax laws provide otherwise).
Determining, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator	Art 6 ust. 1 lit. f) RODO ordinance (legitimate Administrator interest) – processing is necessary for purposes from the legitimate interests of the Administrator – consisting from establishing, investigating or defending claims that may be raised by the Administrator or which may be raised against the Administrator	The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of claims that may be raised against the Administrator (the basic limitation period for claims against the Administrator is six years).
Using Administrator services or ensuring their correct operation.	Art 6 ust. 1 lit. f) RODO ordinance (legitimate Administrator interest) – data processing is necessary for the purposes of the Administrator legitimate interests – consisting in the provision of services	The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator’s claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years).
Creating statistic reports and website traffic analysis.	Art 6 ust. 1 lit. f) RODO ordinance (legitimate Administrator interest) data processing is necessary for the purposes of the Administrator legitimate interests – consisting in keeping statistics and analyzing website traffic.	The data is stored for the duration of the legitimate interest pursued by the Administrator, but no longer than for the period of limitation of the Administrator’s claims against the data subject due to the economic activity conducted by the Administrator. The limitation period is defined by law, in particular by the Civil Code (the basic limitation period for claims related to running a business is three years).

Data transfer:

Your data will be processed by Nomino Sp. z o.o. (Ltd.) and Partners Nomino Sp. z o.o. (Ltd.), if you give them your consent, but they may also be entrusted for processing to other entities. In each such case, the transfer of data does not provide the recipient legal basis for any use of it, but only for the purposes expressly indicated by Nomino Sp. z o.o. (Ltd.) or its Partner. The transfer of data most often takes place at the time of cooperation with a subcontractor (e.g. a marketing agency) or a service provider (e.g. a data storage service provider). In any case, the transfer of data does not release the Administrator from responsibility for their processing. The data may also be directed to public authorities, provided that they are authorized to do so by applicable regulations and submit an appropriate request, but never in another case.

How can you contact us:

Due to the processing of your personal data by us, you have a number of rights. Each of the rights can be exercised by contacting us by e-mail at the following address: rodo@nomino.pl

What data do we process and why:

In connection with the services we provide via website nomino.pl, we process your data for various purposes. We can also process them when you enter our website. Below we have listed all the cases when we process your data. We have also indicated the scope of this data and the legal basis in accordance with the provisions of the RODO (GDPR).

We process your data such as: name and surname, email, telephone number for the purposes of:

• recruitment
• marketing of own products and services,
• sending commercial information by electronic means of communication;

In all of the above-mentioned cases, we can process your data as entering website equals your consent for data process.

Personal data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

Collected data

Personal data or information means any information relating to an individual from which that person can be identified. This does not mean data that does not contain identity data (anonymous data). We may collect, use, store and transfer various types of personal data about users, which we categorize as follows:

1. Identity Information – Includes full name, maiden name, username or similar identifier, marital status, title, date of birth, and gender.
2. Contact information – includes home address, delivery address, email address, and telephone numbers.
3. Financial data – Includes bank account or payment card details.
4. Transaction Data — includes payment details between us and you or information about products or services you have purchased from us.
5. Technical data – includes the user IP address, login data, type and version of the web browser, settings regarding the time zone and location, types and versions of browser plug-ins, operating system and platform or information regarding other technologies and devices used by the user to access to the site.
6. Profile data – includes username and password, purchases or orders placed by the user, his interests, preferences or survey responses.
7. Usage Data – includes information about how the user uses the website, products or services.
8. Marketing and Communications Data – includes your preferences for receiving commercial or communication information from us or third parties.

We may also collect, use and share Aggregated Data, such as statistical or demographic data, for any purpose. Aggregated data may be derived from user personal data, but is not considered personal data itself under applicable law, as it does not reveal their identity in any way. For example, we may aggregate usage data to calculate the percentage of users that use a specific feature on a website. However, if we combine Aggregated Data with Personal Data in a way that directly or indirectly identifies you, we will treat such Data as Personal Data that will be used in accordance with this Privacy Notice. We do not collect any Special Categories of Users’ Personal Data (e.g. data about their race or ethnic origin, religion or belief, life or sexual orientation, political opinions, trade union membership or information about their health and genetic and bio-metric data). We also do not collect any information about committed crimes or offenses. If the user does not provide any personal data. If the collection of your personal data is required by applicable law or the provisions of contracts signed with you, and you do not provide us with the required personal data, we may not be able to fulfill the contract signed or to be signed (e.g. to provide you with products or In such cases, we may need to cancel the product or service in question, but you will be informed accordingly.

How do we collect personal data:

We use various methods to collect personal data, including:

1.Direct interaction

The User may provide us with his / her identity, contact and financial details by filling in the appropriate forms or as part of postal, telephone, e-mail or other correspondence. This means the personal data provided to us during:

•ordering our products or services,

•creating an account on our website,

•subscribing to our services or publications,

•reporting willingness to receive commercial information,

•participate in a competition, promotion or survey

•issuing opinions about us.

2. Automatic technologies or interactions

We may collect technical data about users hardware, browser activity, or browsing patterns when they interact with our website. We collect this type of personal data via cookies, server logs or other similar technologies.

3. Third Parties and Public Data Sources.

We may collect and receive personal information about you from various third parties that have your permission to provide us with your information and from publicly available sources.

Profiling:

Profiling means the processing of personal data consisting for example from IP address, to evaluate some of your characteristics. However, we want to assure you that we do not make automated decisions in relation to you, and that we only perform profiling to match the marketing offer of Nomino Sp. z o.o. and to create customer personality profile.

Who do we share your data with and where we pass it on:

We may disclose your data only if you give your consent, or to authorized entities, if necessary. In addition, access to your data will be available to our employees, for whom, it is necessary to perform their daily duties, and subcontractors, i.e. entities that we use to process your data: IT companies, accounting companies, marketing agencies and other independent recipients: business partners.

Your data may also be made available to entities authorized to obtain them on the basis of applicable law, e.g. law enforcement authorities, the President of the Personal Data Protection Office, etc. To the extent permitted by applicable law, we may also disclose your data to institutions dealing with debt collection and debt trading.

Our suppliers are based mainly in Poland, but also in the European Union and around the world. In connection with the transfer of your data, we made sure that our suppliers guarantee a high level of personal data protection. These guarantees result in particular from the obligation to use standard contractual clauses adopted by the Commission (EU) or participation in the „Privacy Shield” program established by the Commission Implementing Decision (EU) 2016/1250 of 12 July 2016 on the adequacy of the protection provided by the EU-US Privacy Shield.

How long do we process your data:

Your data, such as name and surname, e-mail address, telephone number, which we process for the purposes of direct marketing of our products, will be stored until you object to their processing. For this purpose, you should withdraw your consent. Otherwise, we may decide to terminate the processing of this data, if we determine that the consent received from you has become obsolete. Data obtained during the recruitment process are stored only for the duration of a given recruitment.

Depending on the purpose for which we process your personal data, they may be processed by us for the following periods

1. Fulfilling of contracts – for the period of fulfillment of the contract that you have concluded with us or that your employer or the entity with which you cooperate with us, as well as for the period of limitation of claims under the contract,
2. Recruitment – until the end of recruitment for the position for which you are applying, and if you have given separate consent to the processing of data for the purposes of future recruitment, we will store your data for a period of 2 years from the moment of collection,
3. Providing answers – for the period of maintaining our current relations (e.g. answering questions, presenting offers, exchanging correspondence), and after the termination of relations for a period of one year.
4. Keeping statistics – until an objection is raised, but no longer than for a period of 50 months from your last activity on the website
5. Archival purposes – for the period necessary to achieve this goal,
6. Establishing, investigating or defending against claims – for the period necessary to achieve this goal,
7. Provision of the newsletter service – until you unsubscribe from the newsletter.

What are your rights?

We want you to know that you are entitled to:

• Access to data and receiving a its copy. You have the right to obtain confirmation from us as to whether we process your personal data, and if this is the case, you have the right to:
  1. get access to your personal data,
  2. obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of this data, the planned period of storage of your data or the criteria for determining this period, your rights under the GDPR and the right to lodge a complaint with the supervisory authority, the source of these data data, about automated decision-making, including profiling, and about the security measures used in connection with the transfer of such data outside the European Union,
  3. obtain a copy of your personal data.
• to rectify (correct) data.You have the right to rectify and supplement the personal data provided by you. With regard to other personal data, you have the right to request us to correct this data (if it is incorrect) and to supplement it (if it is incomplete);
• to to delete data (the right to be forgotten)if in your opinion there is no reason for us to process your data, you can request that we delete it. You have the right to request the deletion of personal data if:
  1. you have withdrawn your specific consent to the extent to which personal data was processed based on your consent;
  2. your personal data are no longer necessary for the purposes for which they were collected or processed;
  3. you have objected to the use of your data for marketing purposes;
  4. you objected to the use of your data for the purpose of keeping statistics on the use of nomino.pl and satisfaction surveys, and the objection was found to be justified;
  5. your personal data is processed unlawfully.

Despite the request to delete personal data, in connection with the objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the purposes of establishing, investigating or defending claims. This applies in particular to personal data including: name and surname, e-mail address, telephone number and application history, which we keep for the purpose of handling complaints and claims related to the use of our services.

• Restrictions on data processing – you can request that we limit the processing of your personal data only to their storage or performance of activities agreed with you, if in your opinion we have incorrect data about you or we process it unreasonably, or you do not want us to delete it because you need it to establishing, investigating or defending claims, or for the duration of an objection to data processing. You have the right to request the restriction of the use of your personal data in the following cases:
  1. when you question the correctness of your personal data – then we will limit their use for the time needed to verify the correctness of your data, but no longer than for 5 business days;
  2. when the processing of your data is unlawful, and instead of deleting the data, you request the restriction of their use;
  3. when your personal data are no longer necessary for the purposes for which we collected or used them, but you need them to establish, assert or defend claims;
  4. when you have objected to the use of your data – then the restriction takes place for the time needed to consider whether – due to your special situation – the protection of your interests, rights and freedoms outweighs the interests that we pursue when processing your personal data.
• do To object to the processing of your data for the purpose of direct marketing. If you exercise this right – we will stop processing your data for this purpose. If your objection turns out to be justified and we have no other legal basis to process your personal data, we will delete your data, the use of which you objected to;
• do To transfer data – you have the right to receive from us in a structured, commonly used machine-readable format, e.g. CV, personal data about you that you provided to us based on your consent. You can also order us to send this data directly to another entity;
• Lodge a complaint with the supervisory authority – you can submit complaints, inquiries and requests to us regarding the processing of your personal data and the exercise of your rights. If you believe that we are processing your data unlawfully, you can submit a complaint to the President of the Personal Data Protection Office or another supervisory authority.

Remember that you have the right to withdraw your consent to the processing of your personal data at any time. Withdrawal of consent takes effect from the moment the consent is withdrawn. Withdrawal of consent does not affect the processing carried out by us in accordance with the law before its withdrawal. Withdrawal of consent does not entail any negative consequences for you. However, it may prevent you from continuing to use the services or functionalities that we can legally provide only with your consent.

How can you demand that we exercise your rights:

In order to exercise your rights, send a request to the e-mail address rodo@nomino.pl. Remember that before exercising your rights, we will have to make sure that you are exactly the person who provided us with all the data, i.e. we will identify you accordingly.

If, in exercising the above-mentioned rights, you make a request to us, we comply with this request or refuse to comply with it immediately, but no later than within one month after receiving it. However, if – due to the complexity of the request or the number of requests – we will not be able to meet your request within a month, we will comply with it within the next two months, informing you in advance about the intended extension of the deadline.

For technical reasons, we always need 5 days to update the settings you have selected in our systems. Therefore, it may happen that you will receive an e-mail from us during the system update, from which you have opted out of receiving.

Cookies:

Our website uses technologies such as cookies, local storage and other similar technologies aimed at collecting and processing personal data and operational data in order to personalize the content and advertisements provided and to analyze traffic on our website. Our Partners use this technology in the same way. Cookies are IT data saved in files and stored on your end device (i.e. your computer, tablet, smartphone, etc.). The browser sends this data to the server each time you visit the website from your device, while you visit various websites on the Internet.

Accepting cookies is consent to the processing of your personal data collected in connection with your visit to our website, including their processing in cookies, etc. installed on your devices and read from these files by Nomino Sp. z o.o. and partners. You can do so by clicking the „I accept” button. Expressing consent is voluntary. You can change your preferences regarding your consent at any time, including withdrawing it completely by following our privacy policy. The above consent applies to processing for marketing purposes other than the own purposes of Nomino Sp. z o.o. and partners. We would also like to inform you that Nomino Sp. z o.o. and Partners, as part of the online services provided by them, will process your data for their own marketing and recruitment purposes described in detail above, based on their legitimate interest as an administrator.

Data security:

We have implemented precautions to protect users personal data against random loss, use or access by unauthorized persons, modification or disclosure of them. Additionally, we limit access to users personal data only to employees, agents, contractors and other third parties who have a legitimate need to access it. They will only process your personal data in accordance with our instructions and they will be bound by confidentiality clauses. We have also implemented procedures to adequately respond to any suspected data leakage and we will notify users and relevant controllers of data leakage when required by applicable law.