Privacy Policy – Nundio

Privacy Policy – Nundio

Last updated: January 6, 2026

This Privacy Policy describes how personal data is processed by the Nundio SaaS application available at https://nundio.mkd-media.com.

1. Data Controller

The controller of personal data is:

Mateusz Penszkal
Private individual
Place of business: Warsaw, Poland
Contact email: nundio@mkd-media.pl

2. Scope

This policy applies to all users of the Nundio SaaS application (B2B and B2C). The application is accessible only after account registration and login.

3. Types of processed data

Account data

  • name and surname,
  • email address,
  • phone number,
  • company name and address,
  • VAT / tax number,
  • password (stored as a secure hash).

Technical data

  • IP address,
  • system logs,
  • browser and device data.

Business content

  • content entered into the system,
  • function schemas and configurations,
  • user files (not stored permanently).

4. Purposes and legal bases

  • performance of a SaaS contract (Art. 6(1)(b) GDPR),
  • account management,
  • payments and billing,
  • legal and accounting obligations,
  • own marketing activities,
  • analytics and system security.

5. Payments

Payments are processed via Stripe. The controller does not process payment card details.

6. Data recipients

  • Stripe,
  • Railway (EU hosting),
  • Google Cloud services,
  • Google Analytics, Tag Manager, Search Console,
  • OpenAI (AI features),
  • n8n automation services.

7. Data transfers outside the EU

Data may be transferred outside the EU solely for analytical purposes and in compliance with GDPR safeguards (SCCs).

8. Cookies

The service uses technical, analytical and marketing cookies. Consent is managed via a cookie banner.

9. Data retention

Data is retained for the duration of the contract and afterwards in accordance with legal and accounting requirements.

10. User rights

Users have the right to access, rectify, erase, restrict processing, data portability, object to processing and lodge a complaint with a supervisory authority.

11. Changes

The controller reserves the right to amend this Privacy Policy. The current version is always available on the website.

Cookies
We use cookies to make the site work properly and (with your consent) for analytics and marketing. You can change your preferences at any time.