Legal information

Privacy policy

Rules governing the processing of personal data of users of the Next77 website. Last updated: 21 August 2026.

1. Data controller

The controller of your personal data is Next77 Sp. z o.o., with its registered office at ul. Bonarka 11, 30-415 Krakow, Poland. For matters concerning personal data, you can contact the controller at info@next77.pl.

Using the website without submitting a form generally does not require you to provide personal data. You provide data voluntarily when you contact us or submit the B2B cooperation form.

2. Categories of data processed

Depending on how you use the website, we may process:

  • contact form data: subject, full name, company name, email address, telephone number and message content;
  • B2B cooperation form data: company name, tax identification number, contact person's full name, email address, telephone number and business profile;
  • technical data associated with website use, such as IP address, request date and time, browser and device information, session identifier and server logs, to the extent necessary for website operation, security and diagnostics.

3. Purposes and legal bases

  • handling enquiries and correspondence — on the basis of the controller's legitimate interest in communicating with users and handling enquiries (Article 6(1)(f) GDPR);
  • taking steps before entering into a contract and carrying out B2B cooperation — where necessary at the data subject's request or for performance of a contract (Article 6(1)(b) GDPR);
  • compliance with legal obligations, in particular tax and accounting obligations, where applicable to the relationship (Article 6(1)(c) GDPR);
  • ensuring website security, preventing abuse and establishing, pursuing or defending claims — on the basis of the controller's legitimate interest (Article 6(1)(f) GDPR);
  • use of optional technologies requiring consent — on the basis of consent (Article 6(1)(a) GDPR), if such technologies are enabled.

4. Voluntary provision of data

Providing data is voluntary, but fields marked as required are necessary to handle your submission. Without them, we will not be able to reply to your message or consider your B2B cooperation request.

5. Recipients of data

Data may be disclosed to providers supporting the controller with hosting, website maintenance and security, email, IT support, accounting and legal services, only to the extent necessary to provide those services. Data may also be disclosed to authorised public bodies where required by law. The controller does not sell personal data.

6. External services and transfers outside the EEA

The website uses Google Fonts resources. YouTube videos are embedded using privacy-enhanced mode, and a connection to YouTube is made only after the user selects a video. Providers of these services may receive technical data, in particular the IP address and browser and device information.

Use of Google services may involve processing outside the European Economic Area. In such cases, the provider should apply mechanisms required by law, in particular an adequacy decision or standard contractual clauses. Details are available in the provider's documentation.

7. Retention periods

  • enquiry data — for the time needed to respond and conduct correspondence, and afterwards until any related claims become time-barred;
  • data related to a contract or cooperation — for the duration of the relationship, and afterwards for the period required by tax and accounting law and until any claims become time-barred;
  • technical data and logs — for the period necessary to ensure website security, maintenance and diagnostics;
  • data processed on the basis of consent — until consent is withdrawn, unless continued retention is required by law or necessary to defend claims.

8. Your rights

To the extent provided by the GDPR, you have the right to:

  • access your data and receive a copy;
  • rectify your data;
  • erase your data or restrict its processing;
  • object to processing based on a legitimate interest;
  • data portability where processing is based on consent or a contract and is carried out by automated means;
  • withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.

9. Automated decision-making

Next77 does not make decisions concerning website users based solely on automated processing that would produce legal effects or similarly significantly affect them, and does not carry out profiling for this purpose.

10. Security and policy updates

The controller applies appropriate technical and organisational measures to protect data. This policy may be updated following changes in law, website functionality or processing practices. The current version is always published at this address.

11. Language versions

This English-language policy is provided solely as a translation of the Polish version for users' convenience. In the event of any linguistic or interpretative discrepancy, the Polish-language version shall prevail and be binding. The relevant document version can be selected using the PL/EN language switch.