Privacy Policy

This Privacy Notice explains how we collect, use and protect your personal information when you use our website (https://www.nubessom.com — 'Our Site'), contact us through any of our forms, or send us your details for recruitment purposes.

Nubessom Consulting s.r.o. is a company registered at Vinohradská 1786/122, Vinohrady, 130 00 Praha 3, Czech Republic.

Nubessom has overall responsibility for the processing of your personal information. This means that we act as a 'data controller' under the General Data Protection Regulation (GDPR). If you have any queries about this Privacy Notice or how we process your personal information, please contact us at info@nubessom.com.

The personal information we may collect about you includes:

• your name and, where you choose to provide it, your job title and company (when you submit our contact form);
• contact details, including email address and telephone number (when you submit our contact form, or contact us directly);
• the content of the enquiry or message you send us, including any project details you share;
• the details you provide when you book a meeting with us through our online scheduling link, including your name, email address and chosen time slot;
• recruitment information, such as your CV and career history, if you send us a speculative application.

If you accept statistics cookies, we use Google Analytics to understand how visitors use Our Site: for example which pages are viewed, the approximate region, device and browser, and whether a contact form was submitted or a meeting booking link was clicked. If you accept marketing cookies, we also use the LinkedIn Insight Tag to measure the reach of our LinkedIn activity. These tools do not run until you give consent in our cookie banner, and you can withdraw consent at any time. To protect our contact form from spam, we use Google reCAPTCHA, which processes technical data such as your IP address and browser information. Our hosting provider processes limited technical data, including your IP address, in server logs for security and delivery purposes. Please see our Cookie Policy for details.

Special categories of personal data

Nubessom does not intentionally collect any special categories of personal data (sensitive personal information) via Our Site, unless we are legally required to do so in a specific country, for example for recruitment purposes. Sensitive personal information includes information revealing racial or ethnic origin; political opinions; religious or philosophical beliefs; trade union membership; genetic or biometric data processed to uniquely identify a person; information concerning health; and information concerning a person's sex life or sexual orientation.

Security

Nubessom works to protect the confidentiality and security of the information it obtains in the course of its business. Access to that information is limited, and policies and procedures are in place to safeguard it from loss, misuse and improper disclosure.

Most of the personal information we hold about you is collected directly from you. For example, when you:

• complete the contact or consultation request form on Our Site;
• book a meeting with one of our consultants using our online scheduling link;
• contact us directly by email, telephone or LinkedIn;
• send us a speculative job application;
• correspond with us during a project or proposal process.

We may also receive information about you from third parties — for example, if we are introduced to you by a Salesforce account team or a delivery partner, or if a recruitment agency shares your details with us.

We process your personal information in order to:

• respond to your enquiry, prepare a proposal and arrange a consultation — on the basis of steps taken at your request prior to entering into a contract, or our legitimate interest in responding to business enquiries;
• deliver and administer our consulting, implementation and managed services — on the basis of performance of a contract;
• consider speculative job applications — on the basis of steps taken at your request prior to entering into a contract, and our legitimate interest in assessing candidates;
• operate, secure and maintain Our Site — on the basis of our legitimate interest in a functioning, secure website;
• send you occasional updates about services similar to those you have enquired about — on the basis of the consent you give on our contact form;
• measure and improve Our Site using analytics, and measure the reach of our LinkedIn activity — on the basis of your consent, which you can withdraw at any time;
• protect our forms against spam and abuse (Google reCAPTCHA) — on the basis of our legitimate interest in a secure website;
• comply with legal, accounting and regulatory obligations — on the basis of a legal obligation.

Using your personal data for marketing

We do not operate a newsletter or run paid advertising campaigns at present. If we send you occasional updates about services similar to those you enquired about, we will do so only where you have given consent on our contact form, or where it is necessary for our legitimate interests and permitted by law.

You can object to receiving such messages at any time. Simply reply to any message asking us to stop, or email us at info@nubessom.com, and we will remove you from our lists.

We do not sell your personal information. We share it only where necessary, and always under appropriate contractual safeguards, with:

• service providers who host and protect Our Site (Kinsta, running on Google Cloud, and Cloudflare), store and manage enquiries (Salesforce, our CRM), deliver our email, provide the calendar and scheduling tools we use to arrange meetings (Google), provide website analytics (Google Analytics, only with your consent), measure the reach of our LinkedIn activity (LinkedIn, only with your consent), and protect our forms from spam (Google reCAPTCHA);
• professional advisers such as accountants, auditors and lawyers;
• public authorities or regulators, where we are required to do so by law.

Some of these providers (for example Google, LinkedIn and Salesforce) may process data outside the European Economic Area. Where they do, we rely on an adequacy decision (including the EU–US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses.

Nubessom only retains personal information for as long as is necessary, and we operate review and retention policies to meet these obligations. Unless stated otherwise, we keep your personal data (name, contact details and correspondence) for a maximum of 6 years after our last meaningful contact with you, after which it is deleted.

Where you have consented to us using your details to send you service updates, we will keep that data until you tell us otherwise or withdraw your consent.

• Enquiries that do not proceed: your contact details and correspondence may be retained so we can pick up the conversation if you come back to us, and are deleted at the end of the retention period above or sooner on request.
• Speculative job applications: CVs are kept for up to 12 months so we can consider you for future openings, unless you ask us to delete them earlier.
• Website analytics data: kept in Google Analytics for 14 months, after which it is automatically deleted.
• Client project records: contract, delivery and billing records are kept for the periods required by Czech accounting and tax law.

Our Site uses a small number of strictly necessary cookies. It only uses statistics cookies (Google Analytics) and marketing cookies (LinkedIn Insight Tag) if you accept them in our cookie banner. You can change or withdraw your choice at any time using the “Manage consent” link on our site. Full details, including each cookie's name and how long it is kept, are in our Cookie Policy.

What is stored on your device

Your browser may store small data files or local storage entries that are strictly necessary to deliver Our Site — for example to remember your display preferences within a visit, or to protect the site against automated abuse at our hosting and content delivery layer. These are not used to identify you or to profile your interests.

• Session storage exists only for your visit and is cleared when you close your browser.
• Persistent entries, where used, remain until they expire or you clear your browser data.

You can delete or block this storage at any time through your browser settings, although parts of Our Site may then not work as intended.

Links to third parties

Our Site links out to third-party services — for example our LinkedIn page and the Google scheduling page used to book a meeting. Those services set their own cookies once you visit them and operate under their own privacy notices.

Under data protection legislation you have the right to:

• obtain access to, and copies of, the personal information we hold about you;
• require us to correct personal information we hold about you if it is inaccurate;
• ask us to erase your personal information;
• ask us to restrict our processing activities;
• object to processing where it is based on our legitimate interests, including profiling;
• withdraw your consent at any time, where processing is based on consent;
• ask us not to send you marketing communications;
• receive the personal information you have provided to us in a structured, commonly used and machine-readable format, and have it transmitted to another controller.

To exercise any of these rights, email info@nubessom.com. Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where an exception applies. We will respond within one month.

If you are concerned about an alleged breach of privacy law by Nubessom, please contact us at info@nubessom.com in the first instance.

If you are not satisfied with the way we have resolved your complaint, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or with the data protection authority in your country of residence.

We may update this notice from time to time by publishing a new version on Our Site. You should check this page occasionally to make sure you are happy with any changes. If the changes are substantial, we may notify you by email.

If you have any questions or concerns about this Privacy Notice, please contact us at info@nubessom.com.