PRIVACY POLICY FOR ALL OPENNEXUS SERVICES

This privacy policy has been translated into other languages for the convenience of users. In case of any discrepancies between translations, the Polish version is the binding and prevailing version.

Effective as of November 10, 2025

PRIVACY POLICY FOR ALL OPENNEXUS SERVICES

1. This Privacy Policy sets out the rules for the collection, processing and use of personal data obtained by platformazakupowa.pl (zakupowa.pl) and platformaofertowa.pl (ofertowa.pl) (hereinafter jointly referred to as the “Platform” or the “Platforms”).

2. This policy also fulfils the obligations of Open Nexus Sp. z o.o., as the Data Controller, set out in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).

3. The owner of platformazakupowa.pl and platformaofertowa.pl, and simultaneously the Personal Data Controller, is the operator of the Platforms, Open Nexus Sp. z o.o., Bolesława Krzywoustego 3, 61-144 Poznań. District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register, KRS 0000335959, NIP 7792363577, REGON 301196705, share capital PLN 67,000, bank account number 77116022020000000148511753, e-mail cwk@opennexus.com, hereinafter referred to as “openNexus”.

4. As the Personal Data Controller, we were not, under the law, obliged to appoint a Data Protection Officer (hereinafter: DPO); however, out of care for the data on platformazakupowa.pl, we have appointed a DPO, who can be contacted by email at iod@opennexus.com on any matter concerning the processing of your personal data.

5. openNexus exercises particular care to respect the privacy of Users visiting platformazakupowa.pl and platformaofertowa.pl.

§ 1 How do we collect data? – General Information

1. openNexus collects information relating to natural persons carrying on business or professional activities in their own name (hereinafter referred to as Entrepreneurs), as well as data of natural persons entering into a legal transaction not directly related to their business activity. openNexus also processes the personal data of persons representing clients and their employees, provided directly by those entities. In the case of opening Sub-accounts, such data may be collected by the Operator.

2. Personal data may also be collected by means of cookies (as described further in this policy) containing IP addresses.

3. With the exception of the Company Name, VAT Identification Number (NIP) and email address, which may be changed upon contacting the Customer Support Centre (CSC), all other data may be amended by the User independently after logging into their User Account or by contacting the CSC.

4. When using the websites platformazakupowa.pl and platformaofertowa.pl, additional information is automatically collected via cookies (the IP address assigned to your computer or the external IP address of your Internet service provider, the domain name, browser type, access time and operating system type), which in certain circumstances may constitute personal data.

5. Users’ navigational data may also be collected, including information about links and references they choose to click on or other activities performed on platformazakupowa.pl and platformaofertowa.pl.

§2 How do we collect data? – platformazakupowa.pl

1. Personal data of Users are collected when a User registers on platformazakupowa.pl by creating a User Account or submits an offer in a Procedure without creating a User Account.

2. In the case of registering an Account on platformazakupowa.pl, the User independently sets the access password for the Account on platformazakupowa.pl and provides the following data:

1. First name and surname;

2. E-mail address;

3. VAT identification number (NIP);

4. Company name;

5. Country;

and optionally:

6. Telephone number;

7. Street and premises number;

8. Postal code;

9. City;

10. Voivodeship;

11. Telephone number.

3. In the case of the User submitting an offer without creating an account, they provide, for the purpose of submitting an offer, the following data:

3.1 Tender Proceedings:

1. E-mail address;

2. VAT identification number (NIP);

3. Company name;

4. Telephone number;

5. City;

6. Voivodeship;

7. Country;

8. Type of contractor;

and optionally:

9. First name;

10. Surname;

11. Street and premises number;

12. Postal code;

3.2 Regulatory Proceedings:

1. E-mail address;

2. VAT identification number (NIP);

3. Company name;

4. Telephone number;

5. Type of contractor;

and optionally:

6. First name;

7. Surname;

8. Street and premises number;

9. Postal code;

10. City;

11. Voivodeship.

4. platformazakupowa.pl may also process other categories of personal data provided by the bidder during the submission of the offer and during the proceedings.

§3 How do we collect data? – platformaofertowa.pl

1. Users’ personal data are collected, among others, in the following situations:

1. browsing the platform (including without registration),

2. registering a contractor account,

3. using personalisation features (e.g. filtering, saved preferences),

4. profiling the account in order to recommend tenders,

5. analysing user activity (UX, ease of use).

2. Collected data may include:

1. Data provided during account registration:

1. First name and surname (if provided)

2. Email address

3. Company name

4. VAT identification number (NIP)

5. Country

Optional:

1. Telephone number

2. Registered office address

3. Information on industry, contractor type, experience

4. Data concerning tender preferences

2. Data collected automatically while using the service:

1. IP address, browser type, operating system

2. Date and time of login/logout

3. Approximate location (based on IP)

4. User preferences, filters, clicks, history of viewed tenders

5. Cookies related to analytics, marketing and site functionality

3. platformaofertowa.pl may also process data obtained from public registers and announcement portals (e.g., National Court Register (KRS), Central Statistical Office (GUS), e-Zamówienia, TED) as well as data concerning submitted bids.

4. Personal data may be subject to profiling within registered accounts (e.g., recommending tenders); however, no decisions producing legal effects or significantly affecting users are made in an automated manner.

§4 How and for what purpose do we use the collected data?

1. In the case of creating an Account on platformazakupowa.pl and platformaofertowa.pl, User data is used for the purpose of setting up an individual account and managing it, including handling login data, technical contact, and providing digital services by Open Nexus.

2. Cookies may be used to provide Users with better service, for statistical analysis, to tailor the content and functionality of the Platforms to Users’ preferences, and to manage the Platforms – in accordance with the principles described in §5 (Cookies Mechanism, IP Address).

3. Data provided in the account registration form may be shared with external service providers for the purpose of assessing User satisfaction, handling requests, or performing functions necessary for the provision of the Platforms’ services.

4. Contact details, first name and surname, and the User’s company name will be displayed on platformazakupowa.pl in order to present the User’s company business card to Contracting Authorities who conduct proceedings according to their Regulations or under the Public Procurement Law.

5. Data may be entrusted for processing to entities providing services to Open Nexus, such as hosting, IT system maintenance, and sending e-mail and SMS messages (e.g., communication infrastructure providers, such as operators of mailing or SMS systems).

6. The personal data collected on platformazakupowa.pl and platformaofertowa.pl is used for the following purposes:

1. for the performance of a contract or for taking actions at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR);

2. for compliance with legal obligations incumbent on the Data Controller, in particular in the area of taxation and accounting (Art. 6(1)(c) GDPR);

3. for the purposes of the legitimate interests of the Data Controller (Art. 6(1)(f) GDPR), including in particular:

1.  the best possible adaptation of the Platforms to the needs of Clients;

2. maximizing the efficiency of service and the quality of services;

3. building knowledge about Clients and their needs;

4. conducting financial and statistical analyses;

5. evaluation of Users made by Buyers within proceedings (visible only to them);

6. marketing activities related to Open Nexus services and functionalities (e.g., recommendations for proceedings, newsletter);

7. possible pursuit or defense against claims;

8. archival and evidential purposes;

9. ensuring the security and integrity of the Platforms;

10. Client satisfaction surveys;

4. on the basis of consent (Art. 6(1)(a) GDPR) in the case of processing data for the purpose of informing about new products and services, sending newsletters, or tailoring marketing content to the User’s preferences;

7. OpenNexus may perform user account profiling to the extent necessary to recommend appropriate proceedings or the Platforms’ functionalities. Profiling does not produce legal effects or similarly significant consequences for Users.

§ 4a Targeted advertising

1. OpenNexus conducts advertising and marketing activities related to services available on platformazakupowa.pl and platformaofertowa.pl (“Platforms”) using tools such as Google Ads / Google Tag Manager / Google Analytics, Meta Pixel (Facebook, Instagram), Microsoft Advertising / Clarity. These activities may result in displaying ads about one Platform or OpenNexus services to users who have previously used the other Platform on external websites. These activities are carried out based on the user’s consent (Art. 6(1)(a) GDPR) regarding marketing cookies or, to a limited extent, on the basis of the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR), in accordance with Art. 398 of the Electronic Communication Law.

2. The scope of users covered by these activities may include data of logged-in users as well as data related to the activity of anonymous cookie or device identifiers, without linking them to a specific user account, who use the Platforms in any way, including among others: browsing content, searching or filtering proceedings, logging in or registering, downloading documents, adding proceedings to watched/favorite lists, starting an offer form, saving preferences, or otherwise interacting with the Platforms’ features.

3. Consent for marketing/remarketing cookies is voluntary and may be withdrawn at any time in the cookie settings. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

4. The User may object (Art. 21 GDPR) to the processing of data carried out on the basis of legitimate interest (Art. 6(1)(f)). Objections and requests should be sent to iod@opennexus.com

5. Data recipients: Google Ireland Ltd., Meta Platforms Ireland Ltd., Microsoft Ireland Operations Ltd. — solely to the extent necessary for the execution of campaigns and in accordance with the rules described in § 5 (Cookies) and § 6 (Access/Retention).

6. Data transfers outside the EEA may occur when using the above-mentioned tools. Such transfers are carried out in accordance with the European Commission’s decision on the EU–US Data Privacy Framework or based on the EU Standard Contractual Clauses (SCC) (Art. 46 GDPR).

7. The retention of advertising identifiers and remarketing events is limited to the periods applicable to each specific tool or to shorter periods defined by OpenNexus (generally between 90 and 540 days, depending on the purpose and the provider).

8. Consent Mode and data scope limitation: in the absence of consent, we apply solutions that limit the scope of transmitted data (e.g., Google Consent Mode v2), which may affect the accuracy of measurement and personalization.

§ 5 Cookies Mechanism, IP Address

1. platformazakupowa.pl and platformaofertowa.pl use small files called cookies. They are stored by openNexus via platformazakupowa.pl and platformaofertowa.pl on the computer of a person visiting platformazakupowa.pl and platformaofertowa.pl, if the web browser allows it. A cookie file usually contains the domain name it comes from, its “expiration time,” and an individual randomly generated number identifying that file. Information collected through such cookies helps tailor the services offered by openNexus to the individual preferences and actual needs of visitors of platformazakupowa.pl and platformaofertowa.pl. They also enable the preparation of general statistics on visits to the information presented on platformazakupowa.pl and platformaofertowa.pl.

2. openNexus employs two types of cookies:

1. Session cookies: Once the browsing session ends or the computer is switched off, the stored information is removed from the device’s memory. The session cookie mechanism does not allow the retrieval of any personal or confidential data from Users’ computers.

2. Persistent cookies: These are stored on the User’s hard drive and remain there until deleted. The persistent cookie mechanism used by platformazakupowa.pl and platformaofertowa.pl allows data to be retained provided the browser settings permit it. Users can manage cookies themselves through their browser settings.

3. Categories of cookies used on platformaofertowa.pl:

1. Necessary: enable basic functions (e.g., login, security, remembering privacy settings). The website cannot function properly without these cookies and they do not require user consent.

2. Analytical: allow us to understand how users use our services, count visits, analyze traffic sources, and measure website performance. Their use requires user consent.

3. Marketing: enable displaying ads tailored to users’ interests and measuring the effectiveness of marketing activities. Their use requires user consent.

4. When entering platformaofertowa.pl for the first time, a message about the use of cookies will appear at the bottom of the page. The user can accept all cookies, reject all except necessary ones, or make a detailed choice in the settings panel. If non-essential cookies are rejected, they will be blocked, and a single cookie remembering this setting will be stored in the browser (this cookie is retained for one year).

5. When entering platformazakupowa.pl for the first time, a message about the use of cookies will appear at the bottom of the page. platformazakupowa.pl uses cookies to provide services at the highest level. Continued use of the website or clicking “accept” means you agree to their use.

6. By accepting cookies, the user also accepts cookies used in cooperation with our partners: Google, Microsoft, and Meta. Data collected through them may be processed in accordance with the privacy policies of these entities and – in some cases – transferred outside the European Economic Area, including to the United States of America (USA). Data transfers to the USA are based on the EU–US Data Privacy Framework, which provides specific data protection mechanisms and has been recognized by the European Commission as ensuring an adequate level of protection. However, it should be noted that in certain situations U.S. public authorities may gain access to the data for national security or law enforcement purposes, although such access is subject to specific limitations and oversight mechanisms provided under the DPF.

7. openNexus uses its own cookies for authenticating the User on platformazakupowa.pl and platformaofertowa.pl and ensuring the User’s session on platformazakupowa.pl (after logging in) and platformaofertowa.pl, thanks to which the User does not have to re-enter login and password on each subpage of platformazakupowa.pl. 

8. The cookies mechanism is safe for the computers of Users of platformazakupowa.pl and platformaofertowa.pl. In particular, it is not possible for viruses or other unwanted or malicious software to infiltrate Users’ computers through this mechanism. Nevertheless, Users can limit or disable cookie access to their computers in their browsers. If this option is used, it will still be possible to use platformazakupowa.pl and platformaofertowa.pl, except for functions that by their nature require cookies.

9. Below, we present instructions for changing cookie settings (enabling and disabling) in the most popular web browsers: 

1. Firefox (see browser settings), 

2. Chrome (see browser settings), 

3. EDGE (see browser settings), 

4. Opera (see browser settings), 

5. Safari (see browser settings). 

10. openNexus may collect your IP addresses. An IP address is a number assigned to the computer of a person visiting platformazakupowa.pl and platformaofertowa.pl by their Internet service provider. The IP number allows access to the Internet. In most cases, it is assigned dynamically, i.e., it changes with each Internet connection. An IP address may constitute personal data if it can be linked to a specific individual. openNexus uses IP addresses for diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as useful information for administering and improving platformazakupowa.pl and platformaofertowa.pl, as well as for security purposes and potential identification of server overloads or unwanted automated programs browsing the content of platformazakupowa.pl and platformaofertowa.pl, which constitutes the pursuit of the Data Controller’s legitimate interest (Art. 6(1)(f) GDPR).

11. platformazakupowa.pl and platformaofertowa.pl contain links and references to other websites. openNexus is not responsible for the privacy policies in force there. Therefore, we encourage you, after navigating via platformazakupowa.pl and platformaofertowa.pl to a site managed by another administrator, to familiarize yourself with the privacy policy applied there.

12. Due to the legitimate interest pursued by the Data Controller (Art. 6(1)(f) GDPR), as well as based on the consents granted by Users (Art. 6(1)(a) GDPR, Art. 398 of the Electronic Communications Law), Open Nexus carries out analytical and marketing activities aimed at best adapting platformazakupowa.pl and platformaofertowa.pl to the needs of Clients, maximizing service efficiency, building knowledge about Clients and their needs, and continuously improving the quality of the services offered. For this purpose, platformazakupowa.pl and platformaofertowa.pl use the following analytical and advertising tools:

1. Google – AdWords and Analytics 4. Google uses cookies and, through its operation, may be considered an automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can prevent the installation of cookies from our website at any time by adjusting your browser settings accordingly, thereby permanently preventing cookies from being installed. Google Ads and Analytics operate in accordance with Google’s privacy policies, and your data may be transferred to Google LLC, which may also process it outside the European Economic Area (EEA). Google LLC conducts data transfers outside the EEA based on its privacy policy: https://policies.google.com/privacy/frameworks?hl=en. Google LLC also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search). To ensure maximum security for visitors of platformazakupowa.pl and platformaofertowa.pl, we use the IP Anonymization function in Google Analytics, which minimizes Google’s ability to use the IP address contained in cookies. As a rule, your IP address is anonymized within the European Economic Area, and only in exceptional cases also in the United States. At the same time, you can ensure that Google does not obtain information about your IP address on other websites by installing the following browser plugin (link) or by adjusting your browser settings. Regarding user preference information collected through the Google advertising network, users can view and edit information derived from cookies using the appropriate tool (link). Google Analytics Terms of Service (link), Google Analytics Security Overview (link), Google Privacy Policy (link). The main Google Analytics cookie (“_ga”), which enables distinguishing individual users, is valid for a period of two years (link).

2. Microsoft – Clarity. Microsoft uses cookies and, through its operation, may be considered an automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can at any time prevent the installation of cookies through our website by appropriately adjusting your browser settings, thereby permanently preventing cookies from being installed. Microsoft Clarity operates in accordance with Microsoft’s privacy policies, and your data may be transferred to Microsoft Corporation, which may also process it outside the European Economic Area (EEA). Microsoft Corporation carries out data transfers outside the EEA based on its privacy policy: https://www.microsoft.com/enus/privacy/privacystatement. Microsoft Corporation also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search). This tool, which we use to monitor user activity in the application, ensures full anonymity (data is masked and does not allow for the identification of individual persons).

3. Meta Pixel (Facebook Pixel) oraz Meta Conversions API –  Tools provided by Meta Platforms Ireland Ltd. enable the analysis of the effectiveness of advertisements published on Facebook and Instagram, as well as the targeting of ads to appropriate audience groups (so-called remarketing). Meta uses cookies and similar tracking technologies that may be considered automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. The Meta Pixel tool allows us to measure ad effectiveness, optimize our content, and reach users who have visited our website within Meta’s platforms (including Facebook and Instagram). If you wish to block the use of your data in the form of cookies, you can do so in your browser settings. Data collected by Meta may be transferred to Meta Platforms, Inc. in the United States and other countries outside the EEA. Meta Platforms carries out data transfers outside the EEA in accordance with its privacy policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0. Meta Platforms also complies with the provisions of the Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link to the list: https://www.dataprivacyframework.gov/s/participant-search).

4. LinkedIn Insight Tag – The tool provided by LinkedIn Ireland Unlimited Company enables the analysis of the effectiveness of advertising campaigns conducted on the LinkedIn platform and the creation of audience groups for remarketing purposes. LinkedIn uses cookies and similar tracking technologies that may be considered automated activity, including profiling. Profiling is carried out solely for the purpose of analyzing the effectiveness of advertisements and does not produce legal effects or similarly significant consequences for users. If you wish to block the use of your data in the form of cookies, you can do so in your browser settings. Data collected by LinkedIn may be transferred to LinkedIn Corporation in the United States and other countries outside the EEA. LinkedIn carries out data transfers outside the EEA in accordance with its privacy policy: https://www.linkedin.com/legal/privacy-policy. LinkedIn Corporation also complies with the provisions of the EU–US Data Privacy Framework and is listed on the public list of certified entities maintained by the U.S. Department of Commerce (link: https://www.dataprivacyframework.gov/s/participant-search).

5. Google Tag Manager (GTM) – a tool provided by Google Ireland Ltd., enables the management of analytical and marketing tags on the websites platformazakupowa.pl and platformaofertowa.pl without the need to modify the source code of the site. GTM itself does not collect, store, or access users’ personal data; it only triggers other tags (e.g., Google Analytics, Meta Pixel) depending on the consents provided by the user. Information about the operation of Google Tag Manager can be found at: https://support.google.com/tagmanager/answer/9323295. Google Ireland Ltd. carries out data transfers outside the EEA in accordance with the principles set out in Google’s privacy policy, using data protection mechanisms provided under the EU–US Data Privacy Framework or Standard Contractual Clauses (SCC), and is listed on the public list of certified entities maintained by the U.S. Department of Commerce.

13. OpenNexus does not plan to transfer personal data to countries outside the European Economic Area (EEA). However, due to the use of services provided by suppliers such as Google, Microsoft, and Meta, there is a possibility that some technical data may be processed or stored on servers located outside the EEA. At the same time, the aforementioned entities declare that data is primarily processed within the EEA, and any transfers outside this area are carried out in accordance with mechanisms ensuring an adequate level of data protection, in particular based on the European Commission’s decision on the EU–US Data Privacy Framework or on the basis of the EU Standard Contractual Clauses (SCC).

§ 6 Access to Data and Retention Period

1. The personal data collected by platformazakupowa.pl and platformaofertowa.pl is directly accessible only to authorised openNexus employees. Furthermore, we transfer the collected personal data to our service providers to whom we entrust activities related to the processing of personal data, e.g. an accounting office, freight forwarding companies, courier companies, firms conducting opinion research on the use of our services, or providers of our services such as the hosting company where your data is stored, and companies responsible for e-mail dispatch from platformazakupowa.pl and platformaofertowa.pl.

2. Your data may also be made available to entities entitled to receive it under applicable law, in particular the competent judicial authorities.

3. openNexus ensures that Users who have an account have uninterrupted access to their data and the ability to modify it at any time. To make modifications, you must log in to your Account on platformazakupowa.pl. A User may cease to display personal data from the database in the event of termination of the contract for the provision of electronic services. However, this data will remain visible to the Ordering Parties in proceedings in which the User submitted offers, in order to maintain an archive of documentation from negotiations for a minimum period of 5 years from the end of the collection of offers in a given Procedure, and for a further 5 years the archive is managed by the Ordering Party. openNexus may refuse to delete a User’s data if the User has breached the Regulations applicable on platformazakupowa.pl, and retention of the data is necessary to clarify these circumstances and determine liability, in particular for pursuing claims against that User.

4. In the case of a newsletter subscription, you have the option to remove your e-mail address from the mailing list directly within the e-mail.

5. The personal data we process will be stored for the following periods, with regard to:

1. data relating to the conclusion and performance of a contract, determination, pursuit or defence of claims – such data will be retained until performance is completed, and thereafter may be retained for the period required by law or to safeguard potential claims (the limitation period, which in the case of a service contract is generally three years of limitation plus an additional one year available to the Controller, resulting from the hypothetical possibility of filing a claim just before the expiry of the limitation period);

2. data processed for the purpose of fulfilling legal obligations – personal data will be retained for the period during which the law requires the Controller to store the data, e.g. tax documentation must be retained for at least five years or, in some cases, for a longer period;

3. data processed for internal administrative purposes and for archival purposes – data will be retained until the legally justified interests of the Controller constituting the basis of the processing are fulfilled;

4. data processed on the basis of consent – personal data will be retained until consent is withdrawn, the Controller determines that the data have become outdated, or the purpose of processing has ceased.

§ 6a Processing of Personal Data in Cloud Computing

1. Platforms platformazakupowa.pl and platformaofertowa.pl operate under a Software as a Service (SaaS) model and are hosted on cloud infrastructure provided by Google Cloud Platform (GCP), made available via Operator Chmury Krajowej sp. z o.o., with its registered office in Warsaw (ul. Grzybowska 62, 00-844 Warszawa).

2. As the physical infrastructure processing the data resides within the Google Cloud environment, access to this infrastructure is provided by Operator Chmury Krajowej sp. z o.o., which acts as a data processor of openNexus pursuant to Article 28 of the GDPR. Operator Chmury Krajowej provides data processing services on the basis of a data processing agreement concluded with openNexus. In the course of performing this agreement, the Operator employs Google Cloud services as a further data processor (sub-processor).

3. Google Cloud ensures a level of data protection compliant with the GDPR by implementing, inter alia, the following technical and organisational measures:

1. processing data exclusively in data centres located within the European Economic Area (EEA);

2. encryption of data at rest and in transit;

3. compliance with security certifications such as ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018;

4. adherence to data transfer frameworks (including the Data Privacy Framework).

4. Detailed information regarding Google Cloud’s security standards can be found at:

1. https://business.safety.google/compliance/

2. https://cloud.google.com/privacy?hl=pl

5. The Controller does not transfer personal data to third countries unless required by the nature of the service (for example, in the case of analytical tools such as Google Analytics or Microsoft Clarity, as described above). The processing of personal data by Google Cloud in the provision of hosting services does not entail a transfer of data outside the EEA.

§ 7 Rights Related to the Processing of Personal Data by the Data Controller

1. Persons whose personal data are processed have the right to:

1. access their personal data;

2. request rectification of their personal data;

3. request erasure of their personal data, provided that specific provisions and obligations arising from the submission of an offer and participation in proceedings do not preclude this possibility;

4. request restriction of the processing of their personal data;

5. object to the processing of their data on grounds relating to their particular situation;

6. data portability;

7. withdraw, at any time, their consent to the processing of personal data. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;

8. lodge a complaint with the President of the Personal Data Protection Office.

2. In order to exercise the above rights or to obtain detailed information about them, please contact us, preferably at our e-mail address: iod@opennexus.com.

3. The aforementioned rights may be limited on the basis of specific provisions of the GDPR or generally applicable law.

4. Providing personal data is necessary for the provision of the service, and failure to provide it renders it impossible to conclude and perform the service, except for personal data provided on the basis of consent (e.g., for the use of cookies or for receiving a newsletter) – providing such data is not necessary to conclude or perform the service. However, in the case of system cookies for platformazakupowa.pl and platformaofertowa.pl, their provision is necessary for the proper functioning of the website.

§ 8 Security Measures

1. openNexus employs security measures to safeguard data against loss, unauthorised use and alteration. openNexus undertakes to protect all your data in accordance with recognised security and confidentiality standards.

2. Personal data at openNexus is protected in accordance with applicable laws and standards in a way that prevents third-party access.

3. If a User holding an account on platformazakupowa.pl loses their access password in any manner, platformazakupowa.pl enables resetting a new password by clicking on a special token sent to the User’s email address. The User’s password is stored in the database in encrypted form, making it unreadable.

4. To generate a new password, the User must provide their email address in the form available via the “Forgot password” link on the login page of platformazakupowa.pl. The User will receive an email at the address provided during registration, containing a link to a dedicated form on platformazakupowa.pl where the User may set a new password.

5. openNexus will never send any correspondence, including by email, asking for login credentials, particularly the User’s access password. Such information will never be requested by telephone either.

6. User security is very important to us, which is why openNexus offers the option to enable two-step verification on the User’s account free of charge. For added account protection, it is recommended to enable two-step verification. Once enabled, the system will send an additional security code to the User’s email account, which must be entered in a dedicated browser window on platformazakupowa.pl during login. The system allows the User’s browser to be remembered for the next 30 days until a new code is generated.

§ 9 Amendments to the Privacy Policy

1. openNexus reserves the right to make changes to the Privacy Policy.

2. The previous Privacy Policy, which was effective until 09.11.2025, is available via the link.

3. Any additional questions regarding the Privacy Policy should be directed to: iod@opennexus.com.

Go to the Terms and Conditions of platformazakupowa.pl

Go to the Terms and Conditions and Policy of platformaofertowa.pl

Privacy Policy for Chatbot Czarek