Privacy Policy - NOBU Residences

PRIVACY POLICY — NOBU CULTURAL DISTRICT KRAKÓW Effective date: 2025-11-07 Covers: https://nobucracow.com/ (+ /pl, /ar, /ua, /zh, /he)

WHO WE ARE The operator of the website (“Website”) and the controller of your personal data (“Controller”) is the team running Nobu Cultural District Kraków. Contact: Królowej Jadwigi 110, 30-209 Kraków, Poland | Phone: +48 12 889 97 60 | Email: office@sao.com.pl
SCOPE This policy explains what data we collect, the purposes and legal bases (GDPR), how long we keep it, with whom we share it, and your rights.
DATA WE PROCESS • Data you provide: name, e-mail, phone number, message content (contact form/newsletter). • Usage data: IP address, device/browser identifiers, server logs, session data, cookies. • Optional submissions (if any): e.g., CV/resume you choose to send.
PURPOSES & LEGAL BASES (Art. 6 GDPR) • Handling enquiries / contact — legitimate interest (Art. 6(1)(f)). • Newsletter subscription — consent (Art. 6(1)(a)). • Website operation, security, statistics — legitimate interest (Art. 6(1)(f)). • Pre-contract/contract performance — necessity to perform a contract (Art. 6(1)(b)). • Direct marketing (if enabled) — consent (Art. 6(1)(a)).
COOKIES & SIMILAR TECHNOLOGIES We use necessary cookies and—if enabled—analytics and marketing cookies. You can manage preferences in the consent banner (where available) or via your browser settings.
RECIPIENTS / PROCESSORS We use hosting/IT providers and—if enabled—analytics/marketing tools. They receive only the data necessary to provide their services. (Add specific tools here if applicable, e.g., Google Analytics 4, Meta Pixel, Hotjar.)
TRANSFERS OUTSIDE THE EEA Where providers are located outside the EEA, transfers rely on lawful safeguards (e.g., Standard Contractual Clauses). Details available on request.
RETENTION • Correspondence: up to 12 months after the case is closed. • Newsletter: until consent is withdrawn. • Logs & analytics: up to 24 months (or per tool configuration). • Contractual/accounting records: as required by law.
YOUR RIGHTS You may request access, rectification, erasure, restriction, data portability, object to processing, and withdraw consent (without affecting prior lawful processing). You can lodge a complaint with your local supervisory authority (in PL: UODO).
WHETHER DATA MUST BE PROVIDED Providing data is voluntary but may be necessary to respond to your enquiry, deliver the newsletter, or conclude a contract.
SECURITY We apply appropriate technical and organisational measures, including HTTPS encryption and access controls.
CHANGES We may update this policy; the latest version will be published on the Website with its effective date.