Skip to main content

Privacy policy

This Policy is addressed to users of the Nautil.pl website (the “Website”). It sets out the rules for collecting and using the data of Website users, which is collected directly from them or through cookies and similar technologies.

Data controller and contact details

The controller of the data collected in connection with the use of the Website is NAUTIL spółka z ograniczoną odpowiedzialnością, with its registered office in Kosakowo (KRS 0001010773), email: biuro@nautil.pl. For matters relating to the processing of your data by the Controller, you can get in touch using the contact details above.

Scope of data collected

  1. The Website allows you to contact the Controller and provide them with your identification and contact details, as well as data related to the content of your message.
  2. The Controller collects data related to your activity, such as time spent on the website, search phrases, number of pages viewed, and the date and source of the visit.
  3. In connection with the User's use of the Website, the Controller collects data to the extent necessary to provide the individual services offered. The detailed rules and purposes for processing Personal Data collected during the User's use of the Website are described below.
  4. We collect information about how you use our applications. This mainly includes:
    • your IP address, browser type and internet service provider
    • information about referring (exit) pages, operating system, and date and time stamp
    • clickstream data
    • texts you submit
    • data from Google Analytics used for traffic analysis (see the Google Privacy Policy)

    We store submitted texts on our servers, as this is necessary for the operation of the applications: latwytekst.pl, the accessibility statement generator, standardwcag.pl, nautil.pl and nautilplan.pl.

Source of data

  1. If you contacted the Controller, the data was provided to us directly by you.
  2. If your data was provided in connection with a matter being handled by the person who referred that matter to the Controller, that person is the source of the data. In such a case, the Controller receives identification and address data and data related to the matter, such as a description of the matter.

Purpose and legal basis for processing personal data

Your data may be processed for the purpose of:

  • analysing network traffic, ensuring security on the Website and tailoring content to users' needs, on the basis of the Controller's legitimate interest (Article 6(1)(f) GDPR);
  • answering your questions, sending a requested offer and conducting correspondence in order to deal with your matter, on the basis of your consent and the Controller's legitimate interest in fulfilling users' requests (Article 6(1)(a) and (f) GDPR)
  • providing services electronically by making the content collected on the Website available to Users, in which case the legal basis for processing is that it is necessary for the performance of a contract (Article 6(1)(b) GDPR)

Right to withdraw consent

Where data is processed on the basis of consent, you may withdraw it at any time by writing to biuro@nautil.pl. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal (Article 7(3) GDPR).

Obligatory or voluntary provision of data

  1. You can use incognito mode to browse the website without sharing information about your visit to the Website with the Controller. Using incognito mode, and therefore not providing data, does not affect your ability to use the Website.
  2. The Controller makes it possible to contact them using an electronic contact form. Using the form requires you to provide the personal data necessary to contact the User and respond to the enquiry. The User may also provide other data to make contact or the handling of the enquiry easier. Providing the data marked as mandatory is required in order to receive and handle the enquiry, and failure to provide it means the enquiry cannot be handled. Providing other data is voluntary.

Your rights under the GDPR in relation to the data processed

You have the right to:

  • request access to your data from the Controller and obtain a copy of it (Article 15 GDPR);
  • request that the Controller rectify or correct your data (Article 16 GDPR) – with regard to a request for rectification, if you notice that the data is incorrect or incomplete;
  • request that the Controller erase your data (Article 17 GDPR);
  • request that the Controller restrict processing (Article 18 GDPR) – e.g. if you notice that the data is incorrect, you can request that the processing of your data be restricted for a period that allows us to verify its accuracy;
  • lodge a complaint regarding the processing of your personal data by the Controller with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Recipients of your personal data

  1. Your personal data may only be disclosed to entities authorised to receive it under the law. In addition, your data may be shared with couriers, postal operators, and hosting and mail server providers.
  2. In connection with the provision of services, personal data will be disclosed to external entities, in particular IT service providers that enable the proper use of the Website.
  3. If the User gives consent, their data may also be shared with other entities for their own purposes, including marketing purposes.
  4. The Controller reserves the right to disclose selected information concerning the User to the competent authorities or to third parties who request such information on an appropriate legal basis and in accordance with applicable law.

Data retention period

Your personal data will be stored until you withdraw your consent or until your matter has been dealt with, and thereafter until the expiry of the limitation period for any claims by the parties relating to it.

Data relating to network traffic analysis collected through cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, so the data retention period will be equivalent to the time the controller needs to fulfil the purposes for which the data is collected, such as ensuring security and analysing historical website traffic data.

Transfer of data to a third country or international organisation

Your data will not be transferred to third countries or international organisations

Use of cookies and similar technologies

The Website makes it possible to collect information about the user through cookies and similar technologies, the use of which most often involves installing such a tool on the user's device (computer, smartphone, etc.). This information is used to remember the user's choices (font selection, contrast, acceptance of the policy), maintain the user's session (e.g. after logging in), remember passwords (with consent), and collect information about the user's device and visit for security purposes, as well as to analyse visits and tailor content.

Information obtained through cookies and similar technologies is not combined with other data of Website users, nor is it used by the Controller to identify them.

Users can set their browser to block certain types of cookies and other technologies, for example by specifying that only those necessary for the website to display correctly are allowed. By default, most browsers allow all cookies, but the user can change these settings at any time and can also delete cookies that have already been installed. Every browser allows this through one of the options available in its settings or preferences.

Users can also browse the website in incognito mode, which prevents data about their visit from being collected.

Using the website without changing your browser settings, i.e. with cookies and similar technologies accepted by default, means that you consent to their use for the purposes set out above. The Controller does not use the information obtained for marketing purposes. To find out more about how to use and delete cookies, you can consult the instructions provided by browser developers – see the links below:

You can change your web browser settings at any time. If you do not change these settings, you accept the use of cookies.

Changes to the Privacy policy

This Policy is regularly reviewed and updated where necessary. The current version of the Policy was adopted and has been in force since 01.01.2023.

International project

AIMused – accessibility and artificial intelligence in museums

Nautil is the technology partner in a project in which, together with institutions from Poland, Germany, Denmark, Sweden and Lithuania, we are building AI-based solutions that make museums and tourist attractions accessible to everyone.

More about the AIMused project
Interreg South Baltic. Co-funded by the European Union

Project co-funded by the European Regional Development Fund under the Interreg South Baltic 2021–2027 programme.