Privacy Policy

Processing of personal data

We would like to inform you about the security of processing your personal data and the principles on which it takes place.

What is GDPR?

The GDPR (General Data Protection Regulation) is a legal act of the European Parliament and the Council (EU) 2016/679 of April 27, 2016, on the protection of individuals concerning the processing of personal data and the free movement of such data and repealing Directive 95/46/EC. It sets the legal framework for processing personal data throughout the European Union and has been in force since May 25, 2018.

To better understand the GDPR

Basic definitions that we should assimilate to better understand the GDPR:

Personal data: Any data that allows us to identify an individual. An identifiable person is a person whose identity can be determined directly or indirectly.
Data processing: An operation or set of operations performed on personal data, regardless of whether they are performed automatically or manually. Data processing includes: collection, recording, transmission, archiving, storage, retrieval, browsing, use, merging, etc.
Controller: A natural or legal person, public authority, agency or another body that manages personal data and determines the methods of their processing.
Processor: A natural or legal person, public authority, agency or another body that processes personal data on behalf of the controller.
In this case, Novaline is both the controller and processor of your data.

Novaline acts as a data controller when determining the purposes and methods of processing your data, such as when collecting your data necessary for account creation, invoicing, or contact.

Novaline, as a data processor, processes personal data on behalf of the data controller (client), but they are still the property of the controller.

Who is the controller of your personal data?

Novaline is the Controller of your personal data.

What are the contact details of our contact point?

For matters concerning the protection of your personal data and the exercise of your rights, you can contact us via email: or in writing at the address: Novaline, I. Kaczmarka 22, 60-475 Poznań

For what purpose and on what legal basis do we process your personal data?

To conclude a contract for a service based on your interest in our offer (basis of Article 6(1)(b) GDPR).
To perform and based on the contract you have concluded with us for a given service (basis of Article 6(1)(b) and (c) GDPR).
For archival (evidentiary) purposes to secure information in case of legal need to prove facts, which is our legitimate interest (basis of Article 6(1)(f) GDPR).
For the purpose of possibly determining, pursuing or defending against claims, which is our legitimate interest (basis of Article 6(1)(f) GDPR).
For the purpose of handling inquiries directed to us (basis of Article 6(1)(b) GDPR).
For the purpose of contacting you for the needs of handling the inquiry (basis of Article 6(1)(b) GDPR).
What categories of your data do we process?

We will process the following categories of your data:

Basic identification data.
Identification data assigned by public authorities.
Electronic identification data.
Residence data.
Who are the recipients of your data?

We may share your personal data with the following categories of entities:

Our service subcontractors.
Entities authorized to obtain data based on applicable law, e.g., courts or law enforcement authorities – of course, only if they request it based on an appropriate legal basis.
The company entrusted with the accounting affairs of our company.
Do you have to provide us with your personal data?

Providing your data is:

A condition for concluding and performing the contract.
And what if you don’t provide us with your data?

We may refuse to enter into a contract.

How long do we store your data?

Your data obtained for the purpose of entering into a contract is stored for the duration of the contract negotiations and until the end of the calendar year following the year in which you last contacted us regarding its conclusion.
Your data obtained in connection with the conclusion of the contract are processed until the end of the limitation period for potential claims arising from the contract, with the retention periods resulting from tax and accounting regulations.
What are your rights?

You have:

The right to access your personal data and receive a copy.
The right to rectify (correct) your data.
The right to delete data. If you believe there is no basis for us to process your data, you may request that we delete it.
Restriction of data processing.
You may request that we restrict the processing of your personal data to storage only or the performance of actions agreed upon with you if you believe we have incorrect information about you or we are processing it without justification; or you do not want us to delete it because you need it to determine, pursue or defend claims: or for the duration of your objection to data processing.

The right to object to data processing.
You have the right to object to the processing of your data based on a legitimate interest. You should indicate your specific situation, which, in your opinion, justifies the cessation of processing subject to the objection. We will stop processing your data for these purposes unless we demonstrate that the grounds for processing your data by us are overriding your rights or that your data is necessary for us to determine, pursue or defend claims.

The right to data portability.
The right to lodge a complaint with a supervisory authority.
If you believe that we process your data unlawfully, you can file a complaint with the competent supervisory authority.

The right to withdraw consent for the processing of personal data
At any time, you have the right to withdraw your consent to the processing of personal data that we process based on your consent. Withdrawal of consent does not affect the lawfulness of the processing that was carried out based on your consent before its withdrawal.

Do we transfer your data to third countries or international organizations?

We do not transfer your data outside Poland / EU / European Economic Area.

Do we process your personal data automatically (including profiling) in a way that affects your rights?

We do not process your personal data automatically (including profiling) in a way that affects your rights.