Privacy Policy

Last updated: 22 October 2026

This Privacy Policy explains how NEXTCENTURYIT Sp. z o.o. processes personal data in connection with this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”).

1. Data controller

The controller of your personal data is NEXTCENTURYIT Sp. z o.o., Aleja Wojska Polskiego 22, 80-277 Gdańsk, Poland, registered at the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register, KRS 0001246129, NIP 5842885929, REGON 544958928, share capital 75,000 PLN. You can contact us at nextcenturyitsp@gmail.com in any data-protection matter.

2. What data we process and why

ContextDataPurposeLegal basis (GDPR)
Contact form and emailName, email address, company (optional), message content and anything else you choose to provideTo respond to your enquiry and take steps before entering into a contractArt. 6(1)(b), and Art. 6(1)(f) — our legitimate interest in answering enquiries
Providing our servicesContact and contractual dataPerformance of a contract for IT servicesArt. 6(1)(b)
Website operation and securityServer logs (IP address, browser, time and address of the request); the IP address is also used briefly to limit repeated form submissionsTo deliver the site securely and prevent abuse and spamArt. 6(1)(f) — legitimate interest
Optional analytics cookiesUsage statistics collected by Google Analytics, only if you accept analytics cookiesTo understand and improve how the site is usedArt. 6(1)(a) — your consent

Providing data in the contact form is voluntary, but without your name, email address and message we cannot answer your enquiry.

3. Live Demo

The NextCenturyIT Finance Live Demo runs in your browser. Invoices, clients and expenses you enter are stored only in your browser’s local storage on your device and are not sent to us. Please use fictional data only. You can delete the data at any time with “Reset demo data” or by clearing your browser’s site data.

4. Recipients

We may share data with trusted processors acting on our behalf, such as our hosting and IT infrastructure provider, our email service provider and, where you consent, Google Ireland Limited as the provider of Google Analytics. They process data only on our instructions under data-processing agreements.

5. International transfers

We aim to keep data within the European Economic Area. If you consent to analytics, data may be transferred by Google to the United States. Such transfers rely on appropriate safeguards — the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

6. Retention

We keep correspondence for as long as needed to handle your matter and for a reasonable follow-up period; contractual data for the duration of the contract and as required by law (for example tax and accounting obligations); server logs for a limited period needed for security; analytics data for the period set for the relevant cookies (see our Cookie Policy).

7. Your rights

Under the GDPR you have the right to access your data, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing — for cookies, use “Cookie settings” in the footer. To exercise any right, contact us at nextcenturyitsp@gmail.com.

You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw.

8. Automated decision-making

We do not make decisions producing legal or similarly significant effects based solely on automated processing, and we do not carry out profiling of that kind.

9. Changes

We may update this Policy. The current version is always available on this page with the date above.