CK NEXUS spółka z ograniczoną odpowiedzialnością takes particular care to protect personal data. We comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”). Therefore, we provide you with information on the processing of personal data that we collect in connection with your use of our website available at: www.ck-nexus.pl and when you contact us, in particular regarding establishing cooperation with us or obtaining information about our services (prospective clients).

The controller of your personal data is CK NEXUS spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków (30-134) at ul. Kołowa 8, entered in the Register of Entrepreneurs maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS No. 0001262069, NIP 6772546423, REGON 545546725, share capital: PLN 50.000,00 (the “Controller”).

You can contact us by e-mail at kontakt@ck-nexus.pl or in writing at ul. Kołowa 8, 30-134 Kraków.

The personal data of persons who contact us will be processed for purposes depending on the subject matter and purpose of contacting us, in particular in order to respond to your message, notification or enquiry, as well as to present an offer of cooperation if we are requested to do so.

Providing personal data is voluntary; however, without providing such data, we will not be able to respond to your message.

With respect to personal data collected through cookies, detailed information on data processing is provided in the Cookie Policy below.

The legal basis for the processing of personal data is:

• Article 6(1)(f) GDPR, i.e. the legitimate interest of the Controller consisting in responding to questions, establishing a relationship with a person who contacts us, and presenting an offer of cooperation if we are requested to do so;
• Article 6(1)(f) GDPR, i.e. the legitimate interest of the Controller consisting in establishing, pursuing or defending against potential claims that may arise from the correspondence.

Information on the absence of profiling and automated decision-making

With respect to personal data processed in connection with contacting us, we do not use profiling or other forms of automated decision-making.

We may disclose personal data to our employees and associates who are authorised to process personal data.

We may transfer your personal data to entities that provide us with services related to the operation of the website, including IT services and hosting services. In each case, entrusting your personal data to other entities will take place pursuant to a data processing agreement compliant with the GDPR.

As a rule, we do not transfer personal data to third countries (i.e. outside the European Economic Area) or to international organisations. However, in connection with our use of IT tools and e-mail services provided by external entities (e.g. Microsoft, Google), your data may be processed on servers located outside the EEA. Our providers ensure an adequate level of personal data protection by applying appropriate compliance mechanisms (e.g. standard contractual clauses approved by the European Commission and the Data Privacy Framework). Where a transfer is based on standard contractual clauses, information on the safeguards applied and how to obtain a copy of them may be obtained by contacting the Controller.

We retain your personal data for the period necessary to respond to your message and for the duration of the correspondence, for the period necessary to prepare and present you with an offer of cooperation with us, and thereafter for the period and to the extent necessary to establish, pursue or defend against potential claims.

In connection with the processing of personal data, you have the following rights:

• The right to request access to your personal data;
• The right to rectification: if you believe that your personal data is inaccurate or incomplete, you may request that appropriate changes be made to your personal data;
• The right to erasure: you may request the erasure of your personal data;
• The right to restriction of processing: you may request that the processing of your personal data be restricted;
• The right to object: as the processing is based on the legitimate interest of the Controller, you may object to the processing of your personal data on grounds relating to your particular situation.
• The right to data portability: where permitted by law, you may request that the personal data provided to us be returned to you or transferred to a third party.

The Controller makes every effort to ensure the fullest possible protection of your personal data in accordance with applicable law. If, nevertheless, you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office.

Our website contains links to our profiles on social media services (Facebook and LinkedIn). You access the relevant service solely on your own initiative, by clicking the relevant icon. From the moment you leave our website, the rules governing the processing of personal data are determined by the privacy policies of the respective services.

This Policy is reviewed on an ongoing basis and may be updated, in particular in the event of changes in applicable law, developments in the technology of our website, or changes in the purposes and methods of personal data processing by the Controller.

Users will be informed of any changes by publication of a new version of the document on this website.

A new version of the Privacy Policy enters into force on the date of its publication on the Website.

This Privacy Policy is effective from 2 September 2026.

CK NEXUS spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków, introduces this Cookie Policy.

The following capitalised terms used in this Cookie Policy shall have the following meanings:

• Controller – CK NEXUS spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków (30-134) at ul. Kołowa 8, entered in the Register of Entrepreneurs maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS No. 0001262069, NIP 6772546423, REGON 545546725, share capital: PLN 50.000,00 e-mail address: kontakt@ck-nexus.pl;
• Google – Google Ireland Limited, with its registered office in Dublin (Gordon House, Barrow Street, Dublin 4, Ireland), being a provider of digital services and tools (including, among others, Google Analytics) for Users in the European Economic Area and Switzerland;
• Policy – this Cookie Policy;
• GDPR – Regulation of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);
• Website – the website ck-nexus.pl and its subpages;
• User – any natural person visiting the Website or using one or more services or functionalities described in the Policy, to whom services may be provided electronically in accordance with applicable law.

This Website uses cookies, i.e. small text files stored on the User’s end device (e.g. smartphone, telephone, computer, tablet). The Website uses both first-party cookies (necessary for the proper operation of the Website) and third-party cookies (originating from our technology partners who support us in traffic analysis and statistics, e.g. Google).

The use of cookies is not intended to identify Users. The Controller stores cookies on the User’s end device and then accesses the information contained in them for the following purposes:

• in the case of necessary cookies – to ensure the proper operation of the Website and enable the use of basic services and functionalities available through it. Necessary cookies may be placed on Users’ end devices through the Website exclusively by the Controller;
• in the case of analytical and performance cookies – to analyse visits, in particular to obtain information about traffic on the Website (number of visits, duration of visits, source of visits), for statistical purposes, in particular to enable the Controller to analyse how Users use the Website and to determine the popularity of individual subpages of the Website, so that the performance of the Website may be improved. Analytical cookies may be placed on Users’ end devices through the Website by the Controller or its partners;
• functional cookies – to remember choices made by the User within the Website, including the selected language version, or to enable the use of external services available through the Website. Functional cookies may be placed on Users’ end devices through the Website by the Controller or its partners;
• advertising cookies – to tailor advertising content displayed on and outside the Website to Users’ interests, based on information about the User’s activity on the Website and on other websites, collected using marketing cookies and used to create a profile of the User’s interests. Marketing cookies may be placed on Users’ end devices through the Website by the Controller or its partners,

In connection with the use of cookies, data relating to the User’s device, browser or activity on the Website may be processed and, in certain cases, may constitute personal data within the meaning of the GDPR. A detailed specification of the cookies used on the Website (including their descriptions and the retention period for necessary cookies) is available in the configuration window after selecting “View Details” on the initial banner.

Where the User’s personal data is processed using cookies placed on the User’s end device, it will be processed in accordance with the GDPR, and the legal basis for its processing is:

• in the case of necessary cookies – necessity for the performance of an agreement for the electronic provision to the User of the service of access to the Website (Article 6(1)(b) GDPR);
• in the case of analytical and performance cookies – the User’s consent (Article 6(1)(a) GDPR), expressed by accepting the relevant settings in the cookie management window (cookie banner).
• in the case of functional cookies – the User’s consent (Article 6(1)(a) GDPR), expressed by accepting the relevant settings in the cookie management window (cookie banner).

in the case of marketing cookies – the User’s consent (Article 6(1)(a) GDPR), expressed by accepting the relevant settings in the cookie management window (cookie banner).

Information on your rights in connection with the processing of personal data using cookies is available in the Privacy Policy. Where personal data is processed on the basis of consent, the User also has the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

The Controller informs Users that they may configure their web browser so as to prevent cookies from being stored on the User’s end device and may make appropriate settings using the tool provided by the Controller within the Website.

The tool provided by the Controller within the Website enables the management, at any time, of cookies placed through the Website.

Irrespective of the browser settings used, cookies may be deleted by the User after they have been stored by the Controller, using the relevant functions of the web browser, software intended for this purpose, or appropriate tools available within the operating system used by the User.

Below, the Controller provides links containing information on how to delete cookies in the most popular web browsers:

• Chrome: https://support.google.com/chrome/answer/95647?hl=pl
• Firefox: https://support.mozilla.org/pl/kb/usuwanie-ciasteczek-i-danych-stron-firefox?redirectslug=usuwanie-ciasteczek&redirectlocale=pl
• Opera: https://help.opera.com/pl/latest/web-preferences/#cookies
• Microsoft Edge: https://support.microsoft.com/pl-pl/edge/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use
• Safari: https://support.apple.com/pl-pl/105082

The Controller informs Users that using a web browser configuration that prevents or restricts the storage of cookies on the User’s end device, or restricting or disabling the Controller’s use of functional cookies, may result in limitations to the functionality of the services provided. Similar effects may occur if cookies are deleted while the service is being provided.

In connection with the use of the Website, Users’ IP addresses may be processed in server logs. Such data is used for security, technical diagnostics and Website administration purposes. The legal basis for such processing is Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest in ensuring the security and proper operation of the Website. Such data is retained for the period necessary to achieve these purposes.

The Controller informs Users that, in order to optimise the operation of the Website and compile traffic statistics, it uses Google Analytics 4, provided by Google Ireland Limited. As part of this service, information about the User’s behaviour on the Website (e.g. subpages visited, clicks, time spent on the website) is collected using cookies. The tool is activated only with the User’s voluntary consent, which may be withdrawn at any time by changing the cookie settings. The User may also install a blocking add-on available at https://tools.google.com/dlpage/gaoptout.

Google Analytics 4 uses mechanisms that limit the processing of IP addresses. Full IP addresses are not used for reporting in Google Analytics 4 and are not permanently stored on servers, thereby protecting privacy regardless of the location from which they are logged.

Event data is retained for 2 months, while user data is retained for 14 months from the User’s last activity (this period is renewed with each subsequent visit), unless the User withdraws consent earlier.

In connection with the use of Google Analytics 4 analytics tools, the User’s data may be transferred to third countries outside the European Economic Area, in particular to the United States. The legal basis for such transfer is the EU-U.S. Data Privacy Framework, pursuant to a decision of the European Commission finding an adequate level of protection of personal data by certified entities in the United States.

The Policy is reviewed on an ongoing basis and may be updated, in particular in the event of changes in applicable law, developments in the technology of the Website, or changes in the purposes and methods of personal data processing by the Controller.

Users will be informed of any changes by publication of a new version of the document on the Website.

A new version of the Cookie Policy enters into force on the date of its publication on the Website.

Any questions and comments may be submitted to the Controller by e-mail at: kontakt@ck-nexus.pl

The Policy is available at ck-nexus.pl and at the Controller’s registered office.

The Policy is effective from 2 September 2026.