PRIVACY POLICY FOR ALL OPENNEXUS SERVICES

Download privacy policy


This privacy policy has been translated into other languages for the convenience of users. In case of any discrepancies between translations, the Polish version is the binding and prevailing version.

Privacy Policy

FOR ALL OPENNEXUS SERVICES

  1. This Privacy Policy sets out the rules for the collection, processing and use of personal data obtained in connection with the use of Open Nexus services, including platformazakupowa.pl (zakupowa.pl), platformaofertowa.pl (ofertowa.pl) and the openNexus account, which constitutes a central authentication mechanism (Single Sign-On) in Open Nexus services (hereinafter jointly referred to as the “Platform” or the “Platforms”).

  2. This policy also fulfils the obligations of Open Nexus Sp. z o.o., as the Data Controller, set out in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR), to the extent that Open Nexus acts as the data controller.

  3. The owner of platformazakupowa.pl and platformaofertowa.pl, and the provider of the openNexus account constituting the central authentication mechanism, is Open Nexus Sp. z o.o., Bolesława Krzywoustego 3, 61-144 Poznań. District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, KRS 0000335959, NIP 7792363577, REGON 301196705, share capital PLN 67,000, bank account number 77116022020000000148511753, e-mail cwk@opennexus.com, hereinafter referred to as “OpenNexus”.

  4. As the Personal Data Controller, we have appointed a Data Protection Officer, who can be contacted by email at iod@opennexus.com or in writing at the registered office of the Controller, on any matter concerning the processing of personal data.

  5. OpenNexus exercises particular care to respect the privacy of Users visiting platformazakupowa.pl and platformaofertowa.pl.

§ 1 How do we collect data? – General Information

  1. OpenNexus collects information relating to natural persons carrying on business or professional activities in their own name (hereinafter referred to as Entrepreneurs), as well as data of natural persons entering into a legal transaction not directly related to their business activity. OpenNexus also processes the personal data of persons representing clients and their employees, provided directly by those entities. In the case of opening Sub-accounts, such data may be collected by the Operator.

  2. Personal data may also be collected by means of cookies (as described further in this policy) containing IP addresses.

  3. With the exception of the Company Name, VAT Identification Number (NIP) and email address, which may be changed upon contacting the Customer Support Centre (CSC), all other data may be amended by the User independently after logging into their openNexus account or User Profile, or by contacting the CSC.

  4. When using the services, including platformazakupowa.pl, platformaofertowa.pl and the openNexus account, additional information is automatically collected, in particular the IP address assigned to the device or the external IP address of the Internet service provider, the domain name, browser type, access time and operating system type, which may constitute personal data.

  5. Users’ navigational data may also be collected, including information about links and references they choose to click on or other activities performed in connection with the use of Open Nexus services.

§2 How do we collect data? – platformazakupowa.pl

  1. In the case of using platformazakupowa.pl, the process begins with the creation of an openNexus account, which constitutes the central authentication mechanism in Open Nexus services.

  2. Detailed information regarding the rules for creating and operating the openNexus account is set out in § 3a of this Privacy Policy.

  3. To create an openNexus account, it is required to provide an email address, which constitutes the primary identifier of the User.

  4. After creating the account, the User may create a User Profile on platformazakupowa.pl and provide additional data, in particular:

    1. First name and surname,

    2. Telephone number.

  5. In the course of using the platform, the User may also enter data relating to their business activity or the entity they represent, in particular:

    1. Company name,

    2. VAT Identification Number (NIP),

    3. Address

    4. and other identification and contact data.

  6. Such data may be saved in the form of data templates used to streamline the offer submission process.

  7. In the case of the User submitting an offer without creating an account, they provide, for the purpose of submitting an offer, the following data:

3.1 Proceedings (mandatory):

  1. E-mail address;

  2. VAT Identification Number (NIP);

  3. Company name;

  4. Telephone number;

  5. City;

  6. Voivodeship;

  7. Country;

  8. Type of contractor.

and optionally:

  1. First name;

  2. Surname;

  3. Street and premises number;

  4. Postal code;

platformazakupowa.pl may also process other categories of personal data provided by the bidder during the submission of the offer or during the proceedings, to the extent necessary for the implementation of the platform’s functionalities and the handling of the bidding process.

§3 How do we collect data? – platformaofertowa.pl

  1. Users’ personal data are collected, among others, in the following situations:

    1. browsing the platform (including without registration),

    2. registering a User Profile, following the prior creation of an openNexus account,

    3. using personalisation features (e.g. filtering, saved preferences),

    4. profiling the account in order to recommend tenders,

    5. analysing user activity (UX, ease of use).

  2. Collected data may include:

    1. Data provided during openNexus account registration – email address.

    2. Data provided when creating and completing the User Profile:

      1. First name and surname (if provided),

      2. Company name,

      3. VAT Identification Number (NIP),

      4. Country

Optional:

  1. Telephone number,

  2. Registered office address,

  3. Information on industry, contractor type, experience,

  4. Data concerning tender preferences.

  1. Data collected automatically while using the service:

    1. IP address, browser type, operating system,

    2. Date and time of login/logout,

    3. Approximate location (based on IP),

    4. User preferences, filters, clicks, history of viewed tenders,

    5. Cookies related to analytics, marketing and site functionality.

  1. platformaofertowa.pl may also process data obtained from public registers and announcement portals (e.g., National Court Register (KRS), Central Statistical Office (GUS), e-Zamówienia, TED), as well as data concerning submitted bids, to the extent necessary for the provision of the platform’s services.

  2. Personal data may be subject to profiling within registered accounts, in particular for the purpose of recommending tenders or adapting the service’s functionalities to the User’s preferences. Profiling does not lead to any decisions producing legal effects or similarly significantly affecting the User.

§3a How do we collect data? – openNexus account

Personal data of Users are also collected in connection with the creation and use of the openNexus account, which constitutes the central authentication mechanism (Single Sign-On) in Open Nexus services.

Within the openNexus account, the following data may be processed in particular:

  • email address constituting the User’s login,

  • authentication data, including data related to passwords or OTP codes,

  • data relating to login, sessions and access security,

  • technical and operational data related to the use of authentication mechanisms.

The openNexus account serves a technical function and is used solely for user authentication and management of access to Open Nexus services. Detailed rules for data processing within individual services are set out in the sections relating to those services and in separate terms and conditions and information clauses.

§ 4 How and for what purpose do we use the collected data?

  1. In the case of creating a User Profile on platformazakupowa.pl and platformaofertowa.pl, using the openNexus account, User data is used for the purpose of creating and managing the User Profile and ensuring access to services provided by electronic means, including handling login data, technical contact, and providing digital services by Open Nexus.

  2. Cookies may be used to provide Users with better service, for statistical analysis, to tailor the content and functionality of the Platforms to Users’ preferences, and to manage the services – in accordance with the principles described in § 5 (Cookies Mechanism, IP Address).

  3. Data provided in the account creation form may be shared with entities supporting Open Nexus in the provision of services, in particular for the purpose of handling requests, assessing User satisfaction, or performing functions necessary for the operation of the Platforms.

  4. Contact details, first name and surname, and the User’s company name will be displayed on platformazakupowa.pl in order to present the User’s company business card to Contracting Authorities who conduct proceedings according to their Regulations or under the Public Procurement Law.

  5. Data may be entrusted for processing to entities providing services to Open Nexus, such as hosting, IT system maintenance, and sending e-mail and SMS messages (e.g., communication infrastructure providers).

  6. The personal data collected within platformazakupowa.pl, platformaofertowa.pl and the openNexus account is used for the following purposes:

    1. for the performance of a contract or for taking actions at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR);

    2. for compliance with legal obligations incumbent on the Data Controller, in particular in the area of taxation and accounting (Art. 6(1)(c) GDPR);

    3. for the purposes of the legitimate interests of the Data Controller (Art. 6(1)(f) GDPR), including in particular:

      1. the best possible adaptation of the Platforms to the needs of Users,

      2. ensuring the quality and efficiency of the services provided,

      3. conducting statistical and business analyses,

      4. enabling the functioning of proceedings and communication between Users and Contracting Authorities,

      5. marketing activities related to Open Nexus services and functionalities (e.g., recommendations for proceedings, newsletter),

      6. possible pursuit or defence against claims,

      7. archival and evidential purposes,

      8. ensuring the security and integrity of the Platforms,

      9. Client satisfaction surveys.

    4. on the basis of consent (Art. 6(1)(a) GDPR), data may be processed for the purpose of informing about new products and services, sending newsletters, or tailoring marketing content to the User’s preferences.

  7. OpenNexus may perform user account profiling to the extent necessary to recommend appropriate proceedings or the Platforms’ functionalities. Profiling does not produce legal effects or similarly significant consequences for Users.

§ 4a Targeted advertising

  1. OpenNexus conducts advertising and marketing activities related to services available on platformazakupowa.pl and platformaofertowa.pl (“Platforms”) using tools such as Google Ads / Google Tag Manager / Google Analytics, Meta Pixel (Facebook, Instagram), Microsoft Advertising / Clarity. These activities may result in displaying ads about one Platform or OpenNexus services to users who have previously used the other Platform on external websites. These activities are carried out based on the user’s consent (Art. 6(1)(a) GDPR) regarding marketing cookies or, to a limited extent, on the basis of the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR), in accordance with Art. 398 of the Electronic Communication Law.

  2. The scope of data used in connection with these activities may include data of logged-in users as well as data related to the activity associated with cookie or device identifiers, as a rule without linking them directly to a specific user account. Such data may relate in particular to user activity, such as browsing content, searching or filtering proceedings, logging in or registering, downloading documents, adding proceedings to watched or favourite lists, starting an offer form, saving preferences, or otherwise interacting with the Platforms’ features.

  3. Consent for marketing/remarketing cookies is voluntary and may be withdrawn at any time in the cookie settings. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

  4. The User may object (Art. 21 GDPR) to the processing of data carried out on the basis of legitimate interest (subparagraph (f)); objections and requests should be sent to iod@opennexus.com.

  5. Data recipients may include providers of the tools used for conducting marketing activities, in particular: Google Ireland Ltd., Meta Platforms Ireland Ltd., Microsoft Ireland Operations Ltd. — solely to the extent necessary for the execution of such activities and in accordance with the rules described in § 5 (Cookies) and § 6 (Access/Retention).

  6. Data transfers outside the European Economic Area may occur when using these tools. Such transfers are carried out with appropriate safeguards, in particular based on the European Commission’s adequacy decision (e.g. Data Privacy Framework) or on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR).

  7. The retention of advertising identifiers and data related to remarketing activities is limited to the periods applicable to each specific tool or to shorter periods defined by Open Nexus (generally between 90 and 540 days, depending on the purpose and the provider).

  8. In the absence of consent, solutions limiting the scope of transmitted data are applied (e.g., Google Consent Mode v2), which may affect the accuracy of measurement and the level of content personalization.

§ 5 Cookies Mechanism, IP Address

  1. platformazakupowa.pl and platformaofertowa.pl use small files called cookies. They are stored by OpenNexus via platformazakupowa.pl and platformaofertowa.pl on the computer of a person visiting platformazakupowa.pl and platformaofertowa.pl, if the web browser allows it. A cookie file usually contains the domain name it comes from, its “expiration time,” and an individual randomly generated number identifying that file. Information collected through such cookies helps tailor the services offered by OpenNexus to the individual preferences and actual needs of visitors of platformazakupowa.pl and platformaofertowa.pl. They also enable the preparation of general statistics on visits to the information presented on platformazakupowa.pl and platformaofertowa.pl.

  2. OpenNexus employs two types of cookies:

    1. Session cookies: Once the browsing session ends or the computer is switched off, the stored information is removed from the device’s memory. The session cookie mechanism does not allow the retrieval of any personal or confidential data from Users’ computers.

    2. Persistent cookies: These are stored on the User’s hard drive and remain there until deleted. The persistent cookie mechanism used by platformazakupowa.pl and platformaofertowa.pl allows data to be retained provided the browser settings permit it. Users can manage cookies themselves through their browser settings.

  3. Categories of cookies used on platformaofertowa.pl:

    1. Necessary: enable basic functions (e.g., login, security, remembering privacy settings). The website cannot function properly without these cookies and they do not require user consent.

    2. Analytical: allow us to understand how users use our services, count visits, analyze traffic sources, and measure website performance. Their use requires user consent.

    3. Marketing: enable displaying ads tailored to users’ interests and measuring the effectiveness of marketing activities. Their use requires user consent.

  4. When entering platformaofertowa.pl for the first time, a message about the use of cookies will appear at the bottom of the page. The user can accept all cookies, reject all except necessary ones, or make a detailed choice in the settings panel. If non-essential cookies are rejected, they will be blocked, and a single cookie remembering this setting will be stored in the browser (this cookie is retained for one year).

  5. When entering platformazakupowa.pl for the first time, a message about the use of cookies will appear at the bottom of the page. The user can accept all cookies, reject all except necessary ones, or make a detailed choice in the settings panel. If non-essential cookies are rejected, they will be blocked, and a single cookie remembering this setting will be stored in the browser (this cookie is retained for one year).

  6. By accepting cookies, the user also accepts cookies used in cooperation with our partners: Google, Microsoft and Meta. Data collected through them may be processed in accordance with the privacy policies of these entities and – in some cases – transferred outside the European Economic Area, including to the United States of America (USA). Data transfers to the USA are based on the EU–US Data Privacy Framework, which provides specific data protection mechanisms and has been recognized by the European Commission as ensuring an adequate level of protection. However, it should be noted that in certain situations U.S. public authorities may gain access to the data for national security or law enforcement purposes, although such access is subject to specific limitations and oversight mechanisms provided under the DPF.

  7. OpenNexus uses its own cookies for authenticating the User on platformazakupowa.pl and platformaofertowa.pl and ensuring the User’s session on platformazakupowa.pl (after logging in) and platformaofertowa.pl, thanks to which the User does not have to re-enter login and password on each subpage of platformazakupowa.pl.

  8. The cookies mechanism is safe for the computers of Users of platformazakupowa.pl and platformaofertowa.pl. In particular, it is not possible for viruses or other unwanted or malicious software to infiltrate Users’ computers through this mechanism. Nevertheless, Users can limit or disable cookie access to their computers in their browsers. If this option is used, it will still be possible to use platformazakupowa.pl and platformaofertowa.pl, except for functions that by their nature require cookies.

  9. Below, we present instructions for changing cookie settings (enabling and disabling) in the most popular web browsers:

    1. Firefox (see browser settings),

    2. Chrome (see browser settings),

    3. EDGE (see browser settings),

    4. Opera (see browser settings),

    5. Safari (see browser settings).

  10. OpenNexus may collect your IP addresses. An IP address is a number assigned to the computer of a person visiting platformazakupowa.pl and platformaofertowa.pl by their Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned dynamically, i.e., it changes with each Internet connection. An IP address may constitute personal data if it can be linked to a specific individual. OpenNexus uses IP addresses for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as useful information for administering and improving platformazakupowa.pl and platformaofertowa.pl, as well as for security purposes and potential identification of server overloads or unwanted automated programs browsing the content of platformazakupowa.pl and platformaofertowa.pl, which constitutes the pursuit of the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR).

  11. platformazakupowa.pl and platformaofertowa.pl contain links and references to other websites. OpenNexus is not responsible for the privacy policies in force there. Therefore, we encourage you, after navigating via platformazakupowa.pl and platformaofertowa.pl to a site managed by another administrator, to familiarize yourself with the privacy policy applied there.

  12. Due to the legitimate interest pursued by the Data Controller (Art. 6(1)(f) GDPR), as well as based on the consents granted by Users (Art. 6(1)(a) GDPR, Art. 398 of the Electronic Communication Law), Open Nexus carries out analytical and marketing activities aimed at best adapting platformazakupowa.pl and platformaofertowa.pl to the needs of Clients, maximizing service efficiency, building knowledge about Clients and their needs, and continuously improving the quality of the services offered. For this purpose, platformazakupowa.pl and platformaofertowa.pl use the following analytical and advertising tools:

    1. Google – Ads / Google Analytics 4. Google uses cookies and, through its operation, may be considered an automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can prevent the installation of cookies from our website at any time by adjusting your browser settings accordingly, thereby permanently preventing cookies from being installed. Google Ads and Analytics operate in accordance with Google’s privacy policies, and your data may be transferred to Google LLC, which may also process it outside the European Economic Area (EEA). Google LLC conducts data transfers outside the EEA based on its privacy policy: https://policies.google.com/privacy/frameworks?hl=pl. Google LLC also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search). To ensure maximum security for visitors of platformazakupowa.pl and platformaofertowa.pl, we use the IP Anonymization function in Google Analytics, which minimizes Google’s ability to use the IP address contained in cookies. As a rule, your IP address is anonymized within the European Economic Area, and only in exceptional cases also in the United States. At the same time, you can ensure that Google does not obtain information about your IP address on other websites by installing the following browser plugin (link) or by adjusting your browser settings. Regarding user preference information collected through the Google advertising network, users can view and edit information derived from cookies using the appropriate tool (link). Google Analytics Terms of Service (link), Google Analytics Security Overview (link), Google Privacy Policy (link). The main Google Analytics cookie (“_ga”), which enables distinguishing individual users, is valid for a period of two years (link).

    2. Microsoft – Clarity. Microsoft uses cookies and, through its operation, may be considered an automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can at any time prevent the installation of cookies through our website by appropriately adjusting your browser settings, thereby permanently preventing cookies from being installed. Microsoft Clarity operates in accordance with Microsoft’s privacy policies, and your data may be transferred to Microsoft Corporation, which may also process it outside the European Economic Area (EEA). Microsoft Corporation carries out data transfers outside the EEA based on its privacy policy: https://privacy.microsoft.com/pl-pl/privacystatement. Microsoft Corporation also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search). This tool, which we use to monitor user activity in the application, ensures full anonymity (data is masked and does not allow for the identification of individual persons).

    3. Meta Pixel (Facebook Pixel) and Meta Conversions API – Tools provided by Meta Platforms Ireland Ltd. enable the analysis of the effectiveness of advertisements published on Facebook and Instagram, as well as the targeting of ads to appropriate audience groups (so-called remarketing). Meta uses cookies and similar tracking technologies that may be considered automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. The Meta Pixel tool allows us to measure ad effectiveness, optimize our content, and reach users who have visited our website within Meta’s platforms (including Facebook and Instagram). If you wish to block the use of your data in the form of cookies, you can do so in your browser settings. Data collected by Meta may be transferred to Meta Platforms, Inc. in the United States and other countries outside the EEA. Meta Platforms carries out data transfers outside the EEA in accordance with its privacy policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0. Meta Platforms also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search).

    4. LinkedIn Insight Tag – The tool provided by LinkedIn Ireland Unlimited Company enables the analysis of the effectiveness of advertising campaigns conducted on the LinkedIn platform and the creation of audience groups for remarketing purposes. LinkedIn uses cookies and similar tracking technologies that may be considered automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can do so in your browser settings. Data collected by LinkedIn may be transferred to LinkedIn Corporation in the United States and other countries outside the EEA. LinkedIn carries out data transfers outside the EEA in accordance with its privacy policy: https://www.linkedin.com/legal/privacy-policy. LinkedIn Corporation also complies with the provisions of the EU–US Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link: https://www.dataprivacyframework.gov/s/participant-search).

    5. Google Tag Manager (GTM) – a tool provided by Google Ireland Ltd., enables the management of analytical and marketing tags on the websites platformazakupowa.pl and platformaofertowa.pl without the need to modify the source code of the site. GTM itself does not collect, store, or access users’ personal data; it only triggers other tags (e.g., Google Analytics, Meta Pixel) depending on the consents provided by the user. Information about the operation of Google Tag Manager can be found at: https://support.google.com/tagmanager/answer/9323295. Google Ireland Ltd. carries out data transfers outside the EEA in accordance with the principles set out in Google’s privacy policy, using data protection mechanisms provided under the EU–US Data Privacy Framework or Standard Contractual Clauses (SCC), and is listed on the public list of certified entities maintained by the U.S. Department of Commerce.

  13. OpenNexus does not plan to transfer personal data to countries outside the European Economic Area (EEA). However, due to the use of services provided by suppliers such as Google, Microsoft and Meta, there is a possibility that some technical data may be processed or stored on servers located outside the EEA. At the same time, the aforementioned entities declare that data is primarily processed within the EEA, and any transfers outside this area are carried out in accordance with mechanisms ensuring an adequate level of data protection, in particular based on the European Commission’s decision on the EU–US Data Privacy Framework or on the basis of the EU Standard Contractual Clauses (SCC).

§ 6 Access to Data and Retention Period

  1. The personal data collected by platformazakupowa.pl and platformaofertowa.pl is directly accessible only to authorised OpenNexus employees. Furthermore, we transfer the collected personal data to our service providers to whom we entrust activities related to the processing of personal data, e.g. an accounting office, freight forwarding companies, courier companies, firms conducting opinion research on the use of our services, or providers of our services such as the hosting company where your data is stored, and companies responsible for e-mail dispatch from platformazakupowa.pl and platformaofertowa.pl.

  2. Your data may also be made available to entities entitled to receive it under applicable law, in particular the competent judicial authorities.

  3. OpenNexus ensures that Users who have an account have uninterrupted access to their data and the ability to modify it at any time. To make modifications, you must log in to your Account (User Profile). A User may cease to display personal data from the database in the event of termination of the contract for the provision of electronic services. However, this data will remain visible to the Contracting Authorities in proceedings in which the User submitted offers, in order to maintain an archive of documentation from negotiations for a minimum period of 5 years from the end of the collection of offers in a given Proceeding, and for a further 5 years the archive is managed by the Contracting Authority. With regard to data contained in offers and proceedings documentation, the data controller is the Contracting Authority, and Open Nexus processes such data on its behalf in accordance with applicable law. OpenNexus may refuse to delete a User’s data if the User has breached the Regulations applicable on platformazakupowa.pl or platformaofertowa.pl, and retention of the data is necessary to clarify these circumstances and determine liability, in particular for pursuing claims against that User.

  4. In the case of a newsletter subscription, you have the option to remove your e-mail address from the mailing list directly within the e-mail.

  5. The personal data we process will be stored for the following periods, with regard to:

    1. data relating to the conclusion and performance of a contract, determination, pursuit or defence of claims – such data will be retained until performance is completed, and thereafter may be retained for the period required by law or to safeguard potential claims (the limitation period, which in the case of a service contract is generally three years of limitation plus an additional one year available to the Controller, resulting from the hypothetical possibility of filing a claim just before the expiry of the limitation period);

    2. data processed for the purpose of fulfilling legal obligations – personal data will be retained for the period during which the law requires the Controller to store the data, e.g. tax documentation must be retained for at least five years or, in some cases, for a longer period;

    3. data processed for internal administrative purposes and for archival purposes – data will be retained until the legally justified interests of the Controller constituting the basis of the processing are fulfilled;

    4. data processed on the basis of consent – personal data will be retained until consent is withdrawn, the Controller determines that the data have become outdated, or the purpose of processing has ceased.

§6a Processing of Personal Data in Cloud Computing

  1. Platforms platformazakupowa.pl and platformaofertowa.pl, as well as the openNexus account, operate under a Software as a Service (SaaS) model and are hosted on cloud infrastructure provided by Google Cloud Platform (GCP), made available via Operator Chmury Krajowej sp. z o.o., with its registered office in Warsaw (ul. Grzybowska 62, 00-844 Warszawa).

  2. As the physical infrastructure processing the data resides within the Google Cloud environment, access to this infrastructure is provided by Operator Chmury Krajowej sp. z o.o., which acts as a data processor of OpenNexus pursuant to Article 28 of the GDPR. Operator Chmury Krajowej provides data processing services on the basis of a data processing agreement concluded with OpenNexus. In the course of performing this agreement, the Operator employs Google Cloud services as a further data processor (sub-processor).

  3. Google Cloud ensures a level of data protection compliant with the GDPR by implementing, inter alia, the following technical and organisational measures:

    1. processing data exclusively in data centres located within the European Economic Area (EEA);

    2. encryption of data at rest and in transit;

    3. compliance with security certifications such as ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018;

    4. adherence to data transfer frameworks (including the Data Privacy Framework).

  4. Detailed information regarding Google Cloud’s security standards can be found at:

    1. https://business.safety.google/compliance/

    2. https://cloud.google.com/privacy?hl=pl

  5. The Controller does not, as a rule, transfer personal data to third countries unless required by the nature of the service (for example, in the case of analytical tools such as Google Analytics or Microsoft Clarity, as described above). The processing of personal data by Google Cloud in the provision of hosting services does not entail a transfer of data outside the EEA.

§ 7 Rights Related to the Processing of Personal Data by the Data Controller

  1. Persons whose personal data are processed have the right to:

    1. access their personal data;

    2. request rectification of their personal data;

    3. request erasure of their personal data, provided that specific provisions and obligations arising from the submission of an offer and participation in proceedings, including those resulting from public procurement law, do not preclude this possibility;

    4. request restriction of the processing of their personal data;

    5. object to the processing of their data on grounds relating to their particular situation;

    6. data portability;

    7. withdraw, at any time, their consent to the processing of personal data. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;

    8. lodge a complaint with the President of the Personal Data Protection Office.

  2. In order to exercise the above rights or to obtain detailed information about them, please contact us, preferably at our e-mail address: iod@opennexus.com.

  3. The aforementioned rights may be limited on the basis of specific provisions of the GDPR or generally applicable law. With regard to data processed in connection with participation in proceedings, the data controller may be the Contracting Authority, which may affect the manner in which certain rights are exercised.

  4. Providing personal data is necessary for the provision of the service, and failure to provide it renders it impossible to conclude and perform the service, except for personal data provided on the basis of consent (e.g., for the use of cookies or for receiving a newsletter) – providing such data is not necessary to conclude or perform the service. However, in the case of system cookies for platformazakupowa.pl and platformaofertowa.pl, their provision is necessary for the proper functioning of the website.

§ 8 Security Measures

  1. OpenNexus employs security measures to safeguard data against loss, unauthorised use and alteration. OpenNexus undertakes to protect all your data in accordance with recognised security and confidentiality standards.

  2. Personal data at OpenNexus is protected in accordance with applicable laws and standards in a way that prevents third-party access.

  3. If a User holding an account on platformazakupowa.pl loses their access password in any manner, platformazakupowa.pl enables resetting a new password by clicking on a special token sent to the User’s email address. The User’s password is stored in the database in encrypted form, making it unreadable.

  4. To generate a new password, the User must provide their email address in the form available via the “Forgot password” link on the login page of platformazakupowa.pl. The User will receive an email at the address provided during registration, containing a link to a dedicated form on platformazakupowa.pl where the User may set a new password.

  5. OpenNexus will never send any correspondence, including by email, asking for login credentials. Such information will not be requested by telephone either.

§ 9 Amendments to the Privacy Policy

  1. OpenNexus reserves the right to make changes to the Privacy Policy.

  2. The previous Privacy Policy, which was effective until 7.05.2026, is available via the link.

  3. Any additional questions regarding the Privacy Policy should be directed to: iod@opennexus.com.

Go to:

  • Go to the Terms and Conditions of the Open Nexus account

  • Go to the Terms and Conditions of platformazakupowa.pl

  • Go to the Terms and Conditions of platformaofertowa.pl

Go to the Terms and Conditions of platformazakupowa.pl


Go to the Terms and Conditions and Policy of platformaofertowa.pl

PDF ikonaPrivacy Policy for Chatbot Czarek