In force since2 November 2026

Privacy Policy

In the event of any discrepancy between language versions, the Polish version prevails.

1. General information

This Privacy Policy explains how personal data is processed in connection with the use of the thenest.pl website (the "Website").

The data controller is:

NEST EQUINOX CAPITAL PARTNERSul. Piękna 49, 00-672 WarsawNIP: 7010710681kontakt@thenest.pl

2. Scope and purposes of processing

2.1. Contact form

Data: first name, surname, e-mail address, telephone, message content.
Purpose: replying and conducting correspondence.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Period: up to 12 months after the contact ends, or until an effective objection.

2.2. Analytics – Google Analytics 4 and Vercel

Purpose: statistics, analysis of how the Website is used.
Legal basis: Article 6(1)(a) GDPR — consent given.
Scope: online identifiers, device data, activity, events.
Period: up to 14 months (GA4).

Google Ireland Ltd. applies measures compliant with Article 46 GDPR (even where data is transferred outside the EEA).

Vercel Analytics and Speed Insights run only after the same consent and do not use cookies. They record the page address, referrer, approximate location, device type, browser and page speed measurements. They tell visitors apart by a hash created from the request, which is deleted after 24 hours.

You can withdraw your consent at any time with the cookie settings button in the bottom left corner of the page. Withdrawal does not affect the lawfulness of processing before it.

2.3. Free online tools

Data: none. The tool computes everything in your browser; your answers are not sent to us and not stored by us.
Storage: none. Answers are not written to browser storage or to the page address and disappear when the tab is refreshed or closed.
Files: the PDF and the calendar file are created on your device; we do not receive a copy.
Analytics: if you consent to analytics, Google Analytics 4 and Vercel Analytics record the visit to the tool page like any other page of the Website — without the content of your answers.

Verified with a network test on 19 September 2026, including after consenting to analytics: no request sent by the page contains the answers entered in the tool.

2.4. Google Maps

Purpose: showing the location of The Nest on a map.
Legal basis: Article 6(1)(a) GDPR — consent given by clicking “Show map”.
Scope: IP address, browser and device data, the address of the page with the map.
Recipient: Google Ireland Ltd.; the retention period is set out in Google's privacy policy.

Until you click “Show map”, the page does not connect to Google. The click covers one display of the map: on the next page the map is off again.

3. Data recipients

Vercel Inc. — hosting (GDPR processing agreement) and Vercel Analytics and Speed Insights (after consent).
Resend Inc. — e-mail delivery API.
Google Ireland Ltd. — GA4 and Google Maps (after consent).
IT and legal service providers — where necessary.

Data is not sold or passed to third parties for marketing purposes.

4. Hosting and server logs

The Website is hosted by Vercel Inc.

Logs may contain: IP address, date and time of connection, browser and system information, pages visited.

Logs are used solely to ensure security (Article 6(1)(f) GDPR).

5. Your rights

You have the right to:

access your data,
rectification,
erasure,
restriction of processing,
data portability,
object,
lodge a complaint with the President of the Polish DPA (UODO).

Contact: kontakt@thenest.pl

6. Transfers outside the EEA

Data may be transferred outside the EEA in connection with:

Vercel hosting,
the use of Resend,
the operation of GA4 and Google Maps.

Standard Contractual Clauses (SCC) are applied in all such cases.

7. Voluntary provision of data

Providing data is voluntary but necessary in order to make contact.

8. Data security

The measures we apply include:

SSL encryption,
server-side safeguards,
access control,
software updates,
internal security procedures.

9. Changes to the Privacy Policy

We may update this policy. The version published on the website always applies.