Privacy policy

This policy explains what personal data we collect on nova360.pl, why, and what rights you have. We keep it as plain as possible.

1. Data controller#

The data controller is MENTIO spółka z ograniczoną odpowiedzialnością (limited liability company), ul. Lwowska 76, 34-100 Wadowice, Poland, entered in the National Court Register (KRS) under no. 0001264429, tax ID (NIP) 5472262448, owner of the Agencja Marketingowa Nova brand. For anything related to personal data, write to hello@nova360.pl.

2. What data we process and why#

Source	Data	Purpose	Legal basis
Contact form	name, email, optionally company, phone, budget, scope, message	answering your enquiry, preparing an offer	consent (Art. 6(1)(a) GDPR) and pre-contractual steps (Art. 6(1)(b))
Email and phone	data you send us	correspondence	legitimate interest (Art. 6(1)(f))
Website security	hash of your IP address, browser type	spam and abuse protection	legitimate interest (Art. 6(1)(f))
Analytics (only with consent)	anonymous visit data	statistics and improving the site	consent (Art. 6(1)(a))

We never store full IP addresses — only an irreversible hash. We do not make automated decisions about you or profile you.

3. Who receives the data#

Data may only be shared with companies that help us run the website and reply to messages, under data processing agreements:

• hosting and database — the infrastructure provider running the site,
• email delivery — a transactional email provider (form confirmations),
• spam protection — Cloudflare Turnstile (if enabled),
• analytics — a statistics provider, only after you consent in the cookie banner.

Some providers may process data outside the European Economic Area. In that case we rely on the mechanisms provided by the GDPR — the European Commission's decision (EU-US Data Privacy Framework) or standard contractual clauses.

4. How long we keep data#

• Form data — for the duration of our conversation, then until the limitation period for any claims expires. If we don't start working together, we delete it after 12 months at the latest.
• Data processed on the basis of consent — until you withdraw it.
• Security data (IP hashes) — up to 90 days.

5. Your rights#

You have the right to:

• access your data and receive a copy,
• rectify your data,
• erase your data ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw consent at any time — without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).

To exercise your rights, write to hello@nova360.pl. We reply within one month.

6. Cookies#

The site uses strictly necessary technical mechanisms that do not require consent:

• nova:visited (browser session storage) — remembers that you have seen the intro animation; cleared when you close the tab,
• nova:consent (browser local storage, 12 months) — your choice in the cookie banner,
• nova_admin (cookie, 8 hours) — only in the admin panel, for signed-in staff.

Analytics (Google Analytics 4 or Plausible) and marketing tools are switched on only after you consent in the cookie banner. Until then none of their scripts is even downloaded (Google Consent Mode v2). Google Analytics then stores the _ga and _ga_* cookies for 13 months, with IP anonymisation. Plausible uses no cookies.

You can change or withdraw your consent at any time with the "Cookie settings" link in the footer.

7. Changes#

If we change how we process data, we will update this page. The date of the last update is shown at the bottom.