Privacy Policy and Cookie Notice

1. Data controller

The controller of personal data processed through this website is NodetLab, Lipowa 3D, 30-702 Krakow, Poland. Tax ID (NIP): 6793307994. REGON: 529501155.

You can contact us about privacy matters at contact@nodetlab.com. NodetLab has not appointed a Data Protection Officer. Privacy requests should be sent to the contact email above.

2. Personal data we may process

We may process data you provide when you contact us or request an invoice, such as your name, email address, company, phone number, country, billing address, tax ID, order quantity, message content, project information, and any attachments or details you choose to send.

The website and hosting environment may also process technical information such as IP address, browser type, device information, requested URLs, timestamps, security logs, and cookie preference records.

We normally receive personal data directly from you. Technical website data is generated by your browser, device, network connection, WordPress, and hosting/security systems when you use the website.

3. Purposes and legal bases

4. Cookies and local storage

Cookies are small files stored on your device. Local storage is a similar browser storage technology. Some storage is necessary for basic website operation, security, WordPress login/admin features, and remembering your cookie choices.

This theme does not load analytics or marketing tracking by default. If analytics, advertising pixels, maps, videos, chat tools, or other third-party embeds are added later, they should remain disabled until the visitor gives the required consent.

The cookie banner stores your choice in browser local storage under the key nodetlabCookieConsent. The record contains the consent version, necessary status, analytics choice, marketing choice, and update time. Clearing browser storage will reset this choice.

You can change your choices at any time by using the Cookie Settings link in the website footer. More details are available in the Cookie Policy.

5. Recipients and processors

We may share personal data with hosting providers, email providers, IT support providers, analytics or security providers if configured, professional advisers, accounting providers, and public authorities when required by law.

Where required, processors process personal data under appropriate agreements and instructions. We do not sell personal data.

6. International transfers

Where service providers process data outside the European Economic Area, we will use a lawful transfer mechanism where required, such as an adequacy decision or standard contractual clauses.

7. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. No website or email transmission can be guaranteed to be completely secure.

8. Retention

Contact and project enquiry data is kept for as long as needed to handle the enquiry and normally no longer than 24 months after the last communication, unless a longer period is required for contracts, accounting, legal obligations, or claims.

Contract, accounting, and tax records are kept for the statutory periods required by applicable law. Records connected with legal claims may be kept until the relevant limitation periods expire.

Technical logs are kept for the period needed for security, diagnostics, abuse prevention, and hosting operations. Cookie preference information is kept until you change or clear your browser storage.

9. Your rights

Subject to GDPR conditions, you may request access to your data, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You can withdraw cookie consent by changing your choices in Cookie Settings or clearing browser storage.

We may need to verify your identity before acting on a privacy request. We respond without undue delay and generally within one month, unless the GDPR allows an extension because a request is complex or there are multiple requests.

You also have the right to lodge a complaint with the Polish supervisory authority, Prezes Urzedu Ochrony Danych Osobowych (UODO), ul. Stanislawa Moniuszki 1A, 00-014 Warsaw, Poland, or with another competent EU or EEA supervisory authority.

10. Voluntary provision of data

Providing personal data is voluntary, but we may be unable to respond to your enquiry, prepare an offer, provide support, or perform a contract if you do not provide the information needed for that purpose.

Some technical data is processed automatically when you visit the website because it is necessary to deliver, secure, and maintain the website.

11. Automated decision-making and profiling

We do not use personal data collected through this website for automated decision-making, including profiling, that produces legal effects or similarly significant effects for visitors.

12. Contact forms and email

Please do not send sensitive personal data unless it is necessary for your request. If you send confidential project information, we will handle it with reasonable care and use it only for the purpose of responding to your request or providing agreed services.

13. Changes to this policy

We may update this Privacy Policy and Cookie Notice when the website, services, or legal requirements change. The latest version will be published on this page.