Legal

NailTheDeal Privacy Policy

Effective date: 17 June 2026Version: 1.0

This English version is provided for convenience. In case of any discrepancy, the Polish version is binding.

1. Data controller

The controller of personal data processed in connection with the use of the NailTheDeal Service (nailthedeal.com) is:

Marcin Łętowski, conducting business under the name Warsaw Residential Group Marcin Łętowski
NIP (Tax ID): 6653065982, REGON: 528314936
Address: ul. Grafitowa 5, 62-504 Posoka, Stare Miasto commune, Konin county, Greater Poland Voivodeship, Poland
Electronic delivery address (ADE): AE:PL-74340-47002-TIHVB-19
Email: kontakt@nailthedeal.com

For all matters concerning personal data protection, you can contact us at kontakt@nailthedeal.com.

2. Scope

2.1. This Privacy Policy concerns personal data processed in connection with: the use of the Service and Account by Users, contact with the Provider (form, email), and the data of Users’ Clients entered into the Service to generate and send offers.

2.2. With respect to Users’ Clients’ data (e.g. contact details of the offer recipient), the Provider acts as a processor within the meaning of art. 28 GDPR, and the User (contracting company) as the controller of that data. The detailed rules of this processing are governed by a data processing agreement accepted at Account registration.

3. What data we process

Depending on how the Service is used, we process:

  • Registration and account data: first name, surname, email address, phone number, company name, Tax ID, login credentials.
  • Billing data: invoice details, transaction history (payment card data is processed solely by the payment operator, not the Provider).
  • Data entered into the Service: price lists, offer content, project data, employee/collaborator data, equipment data, voice recordings used to generate quotes via AI.
  • Users’ Clients’ data: first name, surname, address, email, phone — to the extent necessary to send and accept an offer.
  • Technical data: IP address, device identifiers, system logs, activity data in the Service, cookie data.
  • Correspondence data: the content of tickets, enquiries and complaints sent to the Provider.

4. Purposes and legal bases of processing

Purpose of processingLegal basis (GDPR)
Creating and operating an Account, providing the Serviceart. 6(1)(b) — performance of a contract
Settlements, issuing invoicesart. 6(1)(c) — legal obligation (tax/accounting regulations)
Handling tickets and complaintsart. 6(1)(b) and (f) — performance of a contract / legitimate interest
Marketing of our own services (e.g. newsletter)art. 6(1)(a) — consent, or (f) — legitimate interest (existing clients)
Improving the Service, analytics, developing AI features and regional benchmarks (anonymised/aggregated data)art. 6(1)(f) — legitimate interest of the controller
Preventing abuse, Service securityart. 6(1)(f) — legitimate interest of the controller
Establishing, defending and pursuing claimsart. 6(1)(f) — legitimate interest of the controller

5. Data retention period

5.1. Account data is kept for the duration of the contract and, after it ends — up to 30 days to allow data export, and is then deleted or anonymised, except for data that must be kept longer under the law (e.g. accounting documents — typically 5 years from the end of the tax year).

5.2. Data processed on the basis of consent is kept until consent is withdrawn.

5.3. Data necessary to establish, pursue or defend claims is kept until the limitation periods set out in law expire.

6. Who we share data with

6.1. Data may be shared with entities supporting the provision of the Service under data processing agreements, including: hosting and server infrastructure providers, email/communication providers, the online payment operator, analytics tool providers, and AI model/service providers.

6.2. Data may be shared with public authorities where required by applicable law.

6.3. Where data is transferred to entities based outside the European Economic Area, this is done while ensuring an adequate level of protection, in particular on the basis of standard contractual clauses approved by the European Commission.

7. Rights of data subjects

The persons whose data we process have the following rights:

  • the right of access to the data and to obtain a copy,
  • the right to rectification (correction) of data,
  • the right to erasure of data,
  • the right to restriction of processing,
  • the right to data portability,
  • the right to object to processing based on the controller’s legitimate interest,
  • the right to withdraw consent at any time,
  • the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

To exercise the above rights, please contact kontakt@nailthedeal.com.

8. Data security

8.1. The Provider applies technical and organisational security measures appropriate to the nature and risk of the data processed, including connection encryption (HTTPS), access control and regular backups.

8.2. Only authorised persons bound by confidentiality have access to the data. A User’s employees have access only to the scope of data resulting from the permissions set by the Account owner — in particular, restricted-access roles do not see prices, margins or financial data.

9. Cookies and similar technologies

9.1. The Service uses cookies to: ensure the proper operation of the Service (essential cookies), remember the User’s preferences and analyse traffic.

9.2. Cookies essential for the Service operate on the basis of the controller’s legitimate interest. Analytics cookies are used on the basis of consent given on the first visit.

9.3. The User can manage cookie settings at any time via the browser settings.

10. Changes to the Privacy Policy

The Provider reserves the right to change this Privacy Policy in the event of changes in law, the scope of Service functionality, or the list of processors. Users will be informed of material changes by email or via a notification in the Service.

11. Contact

Email: kontakt@nailthedeal.com
Address: Warsaw Residential Group Marcin Łętowski, ul. Grafitowa 5, 62-504 Posoka, Stare Miasto commune, Konin county, Greater Poland Voivodeship, Poland