Privacy Policy

This Privacy Policy explains how Nodus, a Poland-based cybersecurity company, collects, uses, stores, and protects your personal information when you interact with our website, services, and solutions.
We are committed to handling your data responsibly, transparently, and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

The data controller is:
Nemesis and Co - A company registered in Poland.
Nodus is a product developed and operated by Nemesis and Co.
Email: info@nodus.com
For any privacy-related inquiries, please contact us at the email above.

2. How do we collect your data?We collect personal data directly from you in the following ways:

• Contact forms on our website (e.g., demo requests, newsletter sign-up)
• Email communication
• Event or webinar registrations
• Job applications or career-related forms
• Use of our cybersecurity platform
• Interactions via our social media channels

If you provide personal data about someone else, you must ensure you have their consent to do so.

3. What types of personal data do we collect?
We may collect the following categories of personal information:

• Contact details (name, email address, phone number, mailing address)
• Company name and job title
• Technical data (e.g., IP address, browser type, device information)
• Employment data (e.g., resume, cover letter, qualifications)
• Website usage information and preferences (via cookies)

4. Why do we collect and process your data?
We process your personal data for the following purposes:

• To provide and manage access to our services and solutions
• To respond to your inquiries, demo requests, and support messages
• To manage contractual relationships
• To send service updates and marketing communications (with your consent)
• To process job applications and recruitment-related matters
• To operate, maintain, and improve our cybersecurity platform
• To monitor website performance and ensure security

The legal bases for data processing include your consent, performance of a contract, compliance with legal obligations, and our legitimate business interests.

5. Do we share your data?
We do not sell your personal data.
We may share data with:

1. Trusted third-party service providers (e.g., web hosting, analytics, CRM systems)
2. Public authorities when required by law or court order

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

6. How long do we retain your data?
We retain your personal data only for as long as necessary for the purposes for which it was collected, or to comply with legal obligations.
Typical retention periods:

• Job applications: up to 6 months
• Support and inquiries: until resolution is complete
• Marketing communications: until you unsubscribe or withdraw consent
• Platform usage data: for the duration of your active account

7. Your rights under GDPRYou have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or outdated data
• Request erasure of your data ("right to be forgotten")
• Object to or restrict certain processing
• Withdraw consent at any time
• Request data portability (in a structured, commonly used format)

To exercise your rights, please contact us at info@nodus.com
You may also lodge a complaint with your local Data Protection Authority.