Nesse policies
RODO
Quality policy
Cookie policy
Polityka informacyjna dla Kontrahentów,
potencjalnych Kontrahentów oraz osób ich reprezentujących
Information Policy for Contractors, potential Contractors and their representatives Information Policy of Nesse Anna Wodyńska, with its registered office in Katowice, ul. Panewnicka 270/1 for Contractors, potential Contractors and their representatives.
Version of 18 October 2026. Previous versions are available on request: iod@nesse.pl.
1. The controller of the personal data of persons acting as:
a. Contractors being parties to agreements concluded with Nesse Anna Wodyńska (including sole traders, natural persons conducting business activity in the form of companies incorporated under civil law),
b. potential Contractors to whom the offer of Nesse will be presented, c. representatives of institutional Contractors, d. contact persons appointed by the Contractors as well as persons appointed to perform the agreements (e.g. agreements for training projects) implemented together with Nesse Anna Wodyńska with its registered office in Katowice, ul. Panewnicka 270/1 (hereinafter referred to as "Nesse").
1a. NESSE is also the controller of personal data of people who use nesse.pl, including those who:
a. send an enquiry via the contact form or by e-mail,
b. subscribe to a newsletter (nessletter, GROW by NESSE, FORESIGHT by NESSE),
c. send NESSE the result of an online assessment (e.g. Training Needs Assessment, Competency Model Assessment, online tests),
d. send a CV or apply for a job or collaboration with NESSE.
We process these data in order to:
– respond to the enquiry and prepare an offer – based on our legitimate interest (Art. 6(1)(f) GDPR) or steps taken prior to entering into a contract (Art. 6(1)(b) GDPR),
– send the newsletter – based on consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time via the link in every message or by writing to iod@nesse.pl,
– discuss the assessment results and present recommendations – as steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR),
– recruitment – based on labour law (Art. 6(1)(c) GDPR) and consent for data provided voluntarily beyond the statutory scope (Art. 6(1)(a) GDPR).
Online assessments run in the user’s browser. Answers are not stored on our servers unless the user sends us the result via the form.
Retention: enquiries and assessment results – up to 3 years from the last contact; newsletter – until consent is withdrawn; recruitment data – until the end of the recruitment process or, with consent for future recruitment, up to 12 months.
2. Nesse has appointed a Data Protection Officer (DPO) who may be contacted in matters concerning personal data protection and execution of the rights related thereto. To that end, it is possible to contact the company via email at iod@nesse.pl, as well as by traditional mail at the office address of Nesse.
3. Personal data of persons indicated in point 1, depending on their role, can be processed for the following purposes and pursuant to the following legal grounds:
a. conclusion and performance of the subject matter of agreement (legal basis for the processing of data: Art. 6 sec. 1 (b) of the GDPR
b. for correspondence, including ongoing communication related to the presentation of the Nesse offer, conclusion and performance of the agreement (legal basis for the processing of data: Art. 6 sec. 1(f) of the GDPR),
c. processing complaints related to the concluded agreements (Art. 6 sec. 1 (b) of the GDPR
d. handling and pursuing claims, defence against claims also for the purposes of extrajudicial methods of handling complaints, which constitutes Nesse's legitimate interest (legal grounds for the processing of data: Art. 6 sec. 1(f) of the GDPR),
e. conducting statistical analyses, which constitutes Nesses legitimate interest (legal grounds for the processing of personal data: Art. 6 sec. 1(f) of the GDPR),
f. fulfilling legal requirements in the field of tax and accounting regulations, in particular those specified in the provisions of the Act of 11 March 2004 on the tax on goods and services (VAT), of the Act of 15 February 1992 on corporate income tax, and of the Act of 29 September 1994 on accounting (legal basis for the processing of personal data: 6 sec. 1(c) of the GDPR),
g. storage of data for archiving purposes as well as for the purposes of demonstrating compliance with Nesse's legal obligations, which constitutes its legitimate interest (legal basis for the processing of data: Art. 6 sec. 1 (f) of the GDPR;
h. conducting direct marketing activities, which constitutes its legitimate interest (Art. 6 sec. 1(c) of the GDPR),
i. sending information and other activities related to the commercial process, including sending materials by electronic means,
j. for the purposes of marketing communication with the use of telecommunications terminal equipment (e.g. telephone) and automatic calling systems.
4. Personal data may be disclosed to entities processing them on behalf of NESSE under data processing agreements, in particular:
a. Squarespace Ireland Ltd. / Squarespace Inc. – hosting of nesse.pl, forms, newsletters and contact database,
b. Google Ireland Ltd. / Google LLC – website statistics (Google Analytics, only after consent in the cookie banner), spam protection of forms (reCAPTCHA), video playback (YouTube),
c. the provider of the inFirma CRM system – client relationship management,
d. providers of online training and meeting tools (e.g. Zoom Video Communications Inc.) – when a training or meeting takes place remotely,
e. WhatsApp messenger (Meta Platforms Ireland Ltd.) – when sharing training participant lists,
f. accounting office, law firms, debt collection agencies, consulting and audit firms (including the ISO 9001 certification body) – within the scope of services provided to NESSE,
g. trainers and coaches cooperating with NESSE – to the extent necessary to deliver the training or coaching.
Data may be disclosed to public authorities where required by law.
4a. Some providers (Squarespace, Google, Zoom, Meta) are based or have infrastructure in the United States. Data may be transferred there on the basis of the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified entities, or on the basis of standard contractual clauses approved by the European Commission. A copy of the safeguards is available on request at iod@nesse.pl.
5. Personal data shall be stored by Nesse throughout the period of the performance of concluded agreements and until proper settlement thereof, and furthermore:
a. until the expiry of the limitation period of potential claims under the contracts specified hereinabove,
b. for the time necessary to pursue specific claims in relation to the contracts specified hereinabove,
c. for the time necessary to perform the obligations arising from legislation, including, in particular, obligations related to tax and accounting regulations, e.g. obligations related to the storing of documentation as required in Art. 74 of the Accounting Act of 29 September 1994,
d. for the period required by Nesse to demonstrate proper fulfilment of legal obligations imposed thereon before public administration bodies, including personal data protection supervision bodies,
e. for archiving purposes when it concerns the history of correspondence and responses to submitted inquiries - for a period not exceeding 5 years from the obtaining of data;
f. for the purposes of direct marketing - until objection to the processing of data is submitted, until data are found to be outdated, or 3 years after the submission of the notification concerning data processing,
g. in order to send commercial information by electronic means - until the consent for the implementation of the purpose is withdrawn, the data become outdated, or 3 years after the submission of the notification concerning data processing,
h. for the purposes of marketing communication with the use of terminal equipment of telecommunication (e.g. telephone) and automatic calling systems - until the consent for the implementation of that purpose is withdrawn, the data become outdated, or 3 years after the submission of the notification concerning data processing,
6. Nesse guarantees the right to exercise the rights provided for in the GDPR, i.e. the right to request access to the personal data, the right to rectify, delete or demand restriction of the processing of data, the right to data transfer, and the right to object to the processing of data, on the terms and in the cases provided for in the provisions of the GDPR.
7. In the case of personal data processing by Nesse for the purposes of implementing legitimate interests (as referred hereinabove), we shall provide information on the right to object to the processing of data processing on the grounds of a particular situation and, moreover, on the right to object at any time in the case of data processing for the purposes of direct marketing.
8. In order to exercise the right referred to in point 6, please contact, preferable by email, the Data Protection Officer or the Nesse employee from whom you received the information on the processing of your personal data by Nesse.
9. Withdrawal of the consent to the processing of personal data by Nesse, however, shall not affect the conformity of the data protection process conducted before the withdrawal.
10. You have the right to lodge a complaint concerning the processing of personal data with a supervisory body, i.e. the President of the Office for Personal Data Protection.
11. NESSE does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning data subjects or similarly significantly affect them. Online assessment results are for information only and are discussed with a NESSE consultant.
Quality
policy
The aim of Nesse's quality policy is to meet the requirements and expectations of our Customers in a competent manner, in accordance with the applicable legal requirements and internal acts, and to continuously improve the level of training, consulting and Customer service.
Nesse quality policy
We provide services in the field of coaching and management training and development services for companies, mentoring, coaching, project management, strategic and business consulting, which determines the personal and professional effectiveness of our Customers. In our activities we focus on the practical dimension. Our mission is to support our Customers in the development of their staff.
We are constantly improving the level of our training and consulting services. The most important for us are our Customers - their satisfaction and loyalty. It is for them that we create development programmes - with passion and commitment, taking care of the perfection of each training.
On the issue of quality, we do not accept any compromises:
we employ staff with the necessary theoretical knowledge, specialist qualifications and high practical skills;
we constantly improve the skills of our Coaches, Traders and Coordinators;
we constantly improve procedures and introduce the latest management systems;
we verify that all Nesse employees follow established procedures and instructions, rules and regulations;
we define the responsibility for the quality of the services provided to the employees of each department and give them the authority to do so; we cooperate with a carefully selected group of suppliers, which is an additional guarantee of quality for us; the implementation of our trainings is subject to constant control and verification at every stage of creation;
we improve our processes, introduce new tools, implement the latest solutions and build a professional team;
we provide training services in an efficient and competent manner, taking into account the expectations of our Customers;
we improve the quality of training services;
we provide our Customers with comprehensive information on the training and consulting services offered by Nesse.
Cookie
policy
When you use nesse.pl, technical data (e.g. IP address, browser type, time of visit) are automatically recorded in server logs by the hosting provider (Squarespace) to keep the website secure and working. Other information is collected through the cookies described below.
Cookies files IT data, in particular text files, which are stored on the User's end device and are intended for the use of websites. Cookies usually contain the name of the website they come from, the storage time on the end device and a unique number.
The entity that places cookies on the User's end device and obtains access to them is the owner of the website: NESSE Anna Wodyńska, ul. Panewnicka 270/1, 40-774 Katowice, Poland, VAT ID PL9690813233
Cookies used on the website may be used for the following purposes:
adjusting the content of websites to the user's preferences and optimization;
using websites; in particular, these files allow to recognize the website User's device and properly display the website, tailored to his individual needs;
creating statistics (e.g. Google Analytics) that help to understand how website Users use the website to its their structure and content;
The website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). Persistent cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User.
The website uses the following types of cookies:
"essential" cookies, enabling the use of services available on the website, e.g. authentication cookies used for services which require authentication within the website;
cookies used to ensure security e.g. used to detect abuse of authentication within the website;
"performance" cookies used to collect information on how the websites are used;
"functional" cookies, enabling "remembering" the settings selected by the User and personalisation of the User's interface, e.g. in terms of the selected language or region from which the User comes from, font size, the appearance of the website, etc;
In many cases, the software for browsing websites (the web browser) enables storing cookies on the end device of the User by default. Website Users can change their cookie settings at any time. The settings may be changed in particular in such a way as to block the automatic use of cookies in the settings of your Internet browser or to inform about their placement in your device each time. Detailed information on the options and ways of handling cookies is available in the software (browser) settings.
The website operator informs that limitations on the use of cookies may affect some functionalities available on the website.
Cookie consent. On your first visit we display a banner where you can accept all cookies, reject optional ones or choose them in “Settings”. Strictly necessary cookies are always active because the website does not work properly without them. Analytics and marketing cookies are set only after you consent. You can change your consent at any time by clicking “Cookie settings” at the bottom of the page.
Main cookies used on the website:
– crumb – Squarespace; form security (necessary); session.
– ss_performanceCookiesAllowed, ss_marketingCookiesAllowed – Squarespace; remembering your banner choices (necessary); 30 days.
– ss_cvr, ss_cvt – Squarespace; visit statistics (analytics, after consent); up to 2 years / 30 min.
– _ga, _ga_76RX3DFYZE – Google Analytics; visit statistics (analytics, after consent); up to 2 years.
– _GRECAPTCHA – Google reCAPTCHA (google.com domain); spam protection of forms (necessary); up to 6 months.
YouTube videos embedded on the website may set their own Google cookies only once played.
