Privacy Policy
1. Definitions
1.1. Controller – NODER P.S.A., ul. Olszańska 5H, 31-513 Kraków, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register, under KRS number 0001259281, with share capital of PLN 400,000.00, NIP (tax identification number) 6751713494, REGON 384284557, BDO 000520803.
1.2. Personal Data – information about an identified or identifiable natural person, identifiable by one or more specific factors determining the physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP address, online identifier, and information collected through cookies and other similar technologies.
1.3. Policy – this Privacy Policy.
1.4. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
1.5. Website – the website operated by the Controller at https://noder.systems/
1.6. User – any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.
2. Processing of Personal Data in connection with the use of the Website
2.1. In connection with the User’s use of the Website, the Controller collects data to the extent necessary to provide the individual services offered. The detailed rules and purposes of processing Personal Data collected during the User’s use of the Website are described below.
3. Purposes and legal bases for processing Personal Data on the Website
A) Use of the Website
3.1. The Personal Data of all persons using the Website is processed by the Controller:
3.1.1. for the purpose of providing services by electronic means consisting in making the content collected on the Website available to Users – in which case the legal basis for processing is that processing is necessary for the performance of a contract (Article 6(1)(b) of the GDPR);
3.1.2. for the purpose of establishing and pursuing claims or defending against claims – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), consisting in the protection of its rights.
B) Contact form
3.2. The Controller provides the option of contacting it using an electronic contact form. Using the form requires providing the Personal Data necessary to establish contact with the User and respond to the enquiry. The User may also provide other data in order to facilitate contact or the handling of the enquiry. Providing the data marked as mandatory is required in order to accept and handle the enquiry, and failure to provide it means that the enquiry cannot be handled. Providing the remaining data is voluntary.
3.3. Personal Data is processed in order to identify the sender and handle their enquiry submitted via the provided form – the legal basis for processing is that processing is necessary for the performance of a contract for the provision of a service (Article 6(1)(b) of the GDPR); with respect to data provided optionally, the legal basis for processing is consent (Article 6(1)(a) of the GDPR).
C) Marketing
3.4. The User’s Personal Data may also be used by the Controller to send marketing content through various channels, i.e. by email or MMS/SMS. Such actions are undertaken by the Controller only if the User has given consent to them, which may be withdrawn at any time. In such a case, the legal basis for processing Personal Data is the User’s consent (Article 6(1)(a) of the GDPR).
3.5. Personal Data is processed:
3.5.1. for the purpose of sending the requested commercial information – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR) in connection with the consent given;
3.5.2. for analytical and statistical purposes – the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) of the GDPR), consisting in analysing User activity on the Website in order to improve the functionalities in use.
4. Cookies
4.1. The Controller uses cookies within the Website. The purposes and rules regarding the use of cookies are set out in the Cookie Policy.
5. Period of processing Personal Data
5.1. The period of data processing by the Controller depends on the type of service provided and the purpose of processing. As a rule, data is processed for the duration of the service, until consent is withdrawn or an effective objection to the processing is lodged, where the legal basis for processing is the Controller’s legitimate interest.
5.2. The period of data processing may be extended where processing is necessary to establish and pursue possible claims or defend against claims, and after that time only where and to the extent required by law.
6. User rights
6.1. The User has the right to access the content of their data and to request its rectification, erasure, cessation or restriction of processing, the right to data portability, and the right to lodge a complaint with a supervisory authority responsible for the protection of Personal Data.
6.2. The User also has the right to object to the processing of data carried out on the basis of the Controller’s legitimate interest.
6.3. To the extent that the User’s data is processed on the basis of consent, this consent may be withdrawn at any time.
6.4. The User may exercise all of the rights referred to in points 6.1–6.3 by contacting the Controller at the email address: info@noder.systems
7. Recipients of Personal Data
7.1. In connection with the provision of services, Personal Data is disclosed to IT service providers enabling the proper use of the Website.
7.2. The Controller reserves the right to disclose selected information concerning the User to competent authorities or third parties who request such information, relying on an appropriate mandatory legal basis and in accordance with applicable law.
8. Transfer of Personal Data outside the EEA
8.1. The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Controller transfers Personal Data outside the EEA only where necessary, and with an appropriate level of protection ensured, primarily by:
8.1.1. cooperating with entities processing Personal Data in countries in respect of which an appropriate decision of the European Commission has been issued confirming an adequate level of protection of Personal Data;
8.1.2. applying standard contractual clauses issued by the European Commission;
8.1.3. applying binding corporate rules approved by the competent supervisory authority.
8.2. The Controller always informs the User of its intention to transfer Personal Data outside the EEA at the time of collecting it.
9. Security of Personal Data
9.1. The Controller carries out ongoing risk analysis to ensure that Personal Data is processed by it in a secure manner – ensuring, above all, that only authorised persons have access to the data, and only to the extent necessary for the tasks they perform. The Controller ensures that all operations on Personal Data are recorded and carried out only by authorised employees and associates.
9.2. The Controller takes all necessary measures to ensure that its subcontractors and other cooperating entities also provide a guarantee that appropriate security measures are applied whenever they process Personal Data on behalf of the Controller.
10. Contact details
10.1. The Controller can be contacted via email at
11. Changes to the Privacy Policy
11.1. The Policy is reviewed on an ongoing basis and updated where necessary.
11.2. The current version of the Policy is published on the Website each time.