Skip to main content
In force since15 November 2025

Privacy Policy

In the event of any discrepancy between language versions, the Polish version prevails.

1. General information

This Privacy Policy explains how personal data is processed in connection with the use of the thenest.pl website (the "Website").

The data controller is:

NEST EQUINOX CAPITAL PARTNERSul. Piękna 49, 00-672 WarsawNIP: 7010710681kontakt@thenest.pl

2. Scope and purposes of processing

2.1. Contact form

Data
first name, surname, e-mail address, telephone, message content.
Purpose
replying and conducting correspondence.
Legal basis
Article 6(1)(f) GDPR (legitimate interest).
Period
up to 12 months after the contact ends, or until an effective objection.

2.2. Analytics – Google Analytics 4

Purpose
statistics, analysis of how the Website is used.
Legal basis
Article 6(1)(a) GDPR — consent given.
Scope
online identifiers, device data, activity, events.
Period
up to 14 months.

Google Ireland Ltd. applies measures compliant with Article 46 GDPR (even where data is transferred outside the EEA).

2.3. Free online tools

Data
none. The tool computes everything in your browser; your answers are not sent to us and not stored by us.
Storage
none. Answers are not written to browser storage or to the page address and disappear when the tab is refreshed or closed.
Files
the PDF and the calendar file are created on your device; we do not receive a copy.
Analytics
if you consent to analytics, Google Analytics 4 records the visit to the tool page like any other page of the Website — without the content of your answers.

Verified with a network test on 19 September 2026, including after consenting to analytics: no request sent by the page contains the answers entered in the tool.

3. Data recipients

  • Vercel Inc. — hosting (GDPR processing agreement).
  • Resend Inc. — e-mail delivery API.
  • Google Ireland Ltd. — GA4 (after consent).
  • IT and legal service providers — where necessary.

Data is not sold or passed to third parties for marketing purposes.

4. Hosting and server logs

The Website is hosted by Vercel Inc.

Logs may contain: IP address, date and time of connection, browser and system information, pages visited.

Logs are used solely to ensure security (Article 6(1)(f) GDPR).

5. Your rights

You have the right to:

  • access your data,
  • rectification,
  • erasure,
  • restriction of processing,
  • data portability,
  • object,
  • lodge a complaint with the President of the Polish DPA (UODO).

Contact: kontakt@thenest.pl

6. Transfers outside the EEA

Data may be transferred outside the EEA in connection with:

  • Vercel hosting,
  • the use of Resend,
  • the operation of GA4.

Standard Contractual Clauses (SCC) are applied in all such cases.

7. Voluntary provision of data

Providing data is voluntary but necessary in order to make contact.

8. Data security

The measures we apply include:

  • SSL encryption,
  • server-side safeguards,
  • access control,
  • software updates,
  • internal security procedures.

9. Changes to the Privacy Policy

We may update this policy. The version published on the website always applies.