We inform that this Privacy Policy specifies the rules for collecting, processing, and using personal data obtained by the Controller from using the website. This privacy policy applies to websites operated by the Controller, namely opennexus.pl, opennexus.com, zakupowa.pl, ofertowa.pl, przetargowa.pl, openbuy.com, opensales.com and pocociszef.pl, hereinafter jointly: “Controller's websites”.
1. General information
By using the Controller's websites, you agree to the following terms of the Controller's Privacy Policy. The administrator of the site and personal data is Open Nexus Sp. z o.o. Bolesława Krzywoustego 3, 61-144 Poznań. Poznań District Court, New Town and Wilda in Poznań, 8th Commercial Division of the National Court Register KRS 0000335959, NIP 7792363577, REGON 301196705, share capital PLN 67,000. The Data Controller has appointed a Data Protection Officer, who can be contacted by e-mail at: iod@opennexus.com.
All personal and address data provided by you will not be sold in any way to third persons or entities.
We inform you that we are constantly improving our Privacy Policy, so its content may change. This is due to the development of internet technology, changes in binding law, or the development of the site. The publication date of the current Privacy Policy is at the bottom.
2. Type of data processed, purposes, and legal basis
Open Nexus Sp. z o.o. collects information about natural persons. Data is collected:
a) for the purpose of fulfilling a contract or taking actions requested by the data subject for the purpose of concluding a contract (legal basis: Art. 6(1)(b) GDPR),
b) for fulfilling legal and accounting obligations of the Controller, e.g., issuing an invoice, storing accounting documentation, which constitutes the realization of the Controller's legitimate interest (legal basis: Art. 6(1)(f) and (c) GDPR),
c) for the internal administrative purposes of the Controller, including for the purpose of best adapting the website to the needs of Clients, maximizing service efficiency, building knowledge about Clients and their needs, financial analysis, and direct marketing, which are the realization of the Controller's legitimate interest (legal basis: Art. 6(1)(f) GDPR),
d) for the purpose of best adapting the website to the needs of Clients, maximizing service efficiency, building knowledge about Clients and their needs, informing about products, and analyzing User needs, based on the given consent (legal basis: Art. 6(1)(a) GDPR),
e) potential investigation or defence against claims and for archival purposes in the event that the Controller needs to prove certain facts, which is the realization of the Controller's legitimate interest (legal basis: Art. 6(1)(f) GDPR),
f) registration and organisation of webinars, including sending confirmation, email reminders, and optional SMS reminders, and sharing recordings (legal basis: Art. 6(1)(b) GDPR). Detailed information can be found in Information Clause for Webinar Participants,
g) sending a newsletter and commercial and marketing information to the e-mail address, only after giving voluntary consent, which can be withdrawn at any time (legal basis: Art. 6(1)(a) GDPR).
3. Withdrawal of consent and objection
You can withdraw your consent at any time, and its withdrawal shall not affect the lawfulness of processing based on consent given before its withdrawal. You also have the right to object to the processing of your data based on the legitimate interest of the Data Controller.
The Controller shall cease processing your data for these purposes unless it can demonstrate that there are important legitimate grounds for the Data Controller with respect to these data, which are overriding the interests of the data subjects, or that the data are necessary for the Controller for the potential establishment, exercise, or defence of claims.
4. Cookie Mechanism, IP Address
Open Nexus Sp. z o.o. uses small files called cookies. These are saved by Open Nexus via the website on the computer of the person visiting the Controller's websites if the web browser allows it. A cookie file usually contains the name of the domain from which it originates, its 'expiration time', and a unique, randomly generated number identifying this file. The information collected using such files helps to adapt the services offered by Open Nexus to the individual preferences and actual needs of the person visiting the website. It also allows for the development of general statistics on the information presented on the portal.
Open Nexus uses two types of cookies:
a) Session Cookies: upon closing the browser session or turning off the computer, the saved information is deleted from the device memory. The session cookies mechanism does not allow downloading any personal data or any confidential information from the User's computer.
b) Persistent Cookies: they are stored on the User's computer hard drive and remain there until they are deleted. The persistent cookies mechanism, sent by the Controller's websites, allows data storage if the browser settings allow it. The user can manage cookie files independently using browser settings.
When visiting the Controller's website for the first time, a message regarding the use of cookies will appear at the bottom of the page, where you have the option to refuse Open Nexus from using the aforementioned cookies. In this case, a single cookie file will be used in the browser to remember this setting.
On the Controller's websites, a banner is displayed on the first visit, where you can accept or reject analytical and marketing cookies (both buttons are equal) or choose their types in the settings. You can change your decision at any time in the footer of the page ("Cookie settings"). Only cookies necessary for the operation of the site operate without your consent: analytical tools (Google Analytics 4 via Google Tag Manager) and advertising tools (Google, Meta) do not save cookie files before consent is given (Google consent mode, default setting: refusal). Your choice is remembered by the Cookiebot consent management mechanism for 365 days. By accepting cookies, you also accept files used in cooperation with Google, Facebook , HotJar , Cloudfare, Linkedin, Salesforce , who may transfer data, including potentially personal data, outside the European Union and the European Economic Area that does not have an adequate level of personal data protection, including in particular to the United States of America (hereinafter: USA). Due to the above, there is a possibility that unauthorized entities, including in particular state authorities of the USA, may gain access to this data.
Calculators and tools on ofertowa.pl. Calculators (tender validity period, bid security, performance guarantee, abnormally low price, points in the tender) and a CPV code search engine work in your browser. Entered amounts, dates, offer and supplier names are not sent to our servers or to analytical tools, and we do not save them. To prevent the result from disappearing after refreshing the page, the browser saves the entered values in the page address, in the part after the # sign, which is not sent to the server. The "Copy link" function creates an address with these values. If you enter supplier names, and the supplier is a natural person (e.g., sole proprietorship), the link contains their data. By sending such a link, you decide who you are providing it to. The "Clear" button removes data from the form and from the address. Files for the calendar (.ics), print, and copy of the result are created on your device. If you consent to analytical cookie files, we measure the use of calculators in Google Analytics 4: which calculator was used, the type of result, the value range of the order, the number of offers or criteria, and the use of the copy, print, and calendar functions, without exact amounts, dates, and names. In the CPV search engine, we measure the selected code and the searched code number (digits only).
Open Nexus uses its own cookies to improve the use of the Controller's website and for the reasons listed in this document.
The cookie mechanism is safe for the computers of the Website User of the Controller. In particular, it is not possible through this method to infect the User's computers with viruses, or other unwanted or malicious software. Nevertheless, Users have the option in their browsers to limit or disable access to cookie files on their computers. If this option is used, using the Controller's Website will be possible, except for functions that by their nature require cookie files.
Below we present instructions on changing cookie settings (enabling and disabling) in the most popular web browsers:
Firefox (see browser settings),
Chrome (see browser settings),
EDGE (see browser settings),
Opera (see browser settings),
Safari (see browser settings).
Open Nexus may collect your IP addresses. An IP address is a number assigned to the computer of the person visiting the Controller's Website by the Internet service provider. The IP number enables access to the Internet. In most cases, it is assigned to the computer dynamically, i.e., it changes with every connection to the Internet. The IP address is used by Open Nexus when diagnosing technical problems with the server, creating statistical analyses (e.g., determining from which regions we record the most visits), as useful information for administering and improving the Controller's Website, as well as for security and potential identification of load-causing, unwanted automatic programs for browsing the Controller's Website content.
The Controller's Website contains links and references to other websites. Open Nexus is not responsible for the privacy rules applicable on them. Therefore, we recommend that after navigating from the Controller's Website to a site managed by another administrator, you familiarize yourself with the privacy policy adopted there.
Due to its own interest, or more precisely due to the interest in best adapting the Controller's Website to the needs of Clients, maximizing service efficiency, and building knowledge about Clients and their needs within the meaning of Art. 6(1)(f) of the GDPR, when visiting the Controller's websites, we use Google tools, which use cookie files and whose operation may be considered automated processing, including profiling. If you want to block the use of your data in the form of cookies, you can at any time prevent the installation of cookie files from our website by appropriately setting your web browser and thus permanently preventing the installation of cookie files.
Open Nexus does not plan to transfer personal data to countries outside the European Economic Area, but given that at the moment there is no possibility to limit the processing of personal data by Google only to the territory of the European Economic Area, there is a possibility that some data will be stored on Google servers outside this area. To ensure the greatest possible security for visitors to the Controller's Website, we use the IP Anonymization function, which minimizes the possibility of Google using the IP address contained in the cookie files. Thanks to this, your IP address is generally anonymized within the European Economic Area, and only in exceptional circumstances also in the USA. Google also applies standard contractual clauses pursuant to Art. 46 of the GDPR (more here). At the same time, you can ensure that Google does not obtain information about your IP address through the installation of the following plugin (link) or using browser settings. Regarding user preference information collected by Google's advertising network, the user can view and edit information resulting from cookie files using the appropriate tool (link). Google Analytics Terms of Service (link), Google Analytics Privacy Policy (link), Google Privacy Policy (link). The main Google Analytics file (“ga”) used to distinguish individual users is valid for a period of 2 years (link).
Open Nexus uses Cloudfare company cookies to protect the site from unwanted actions. These files automatically anonymize IP addresses, making them unreadable. Cloudfare cookie policy (link) Given that it is currently not possible to limit the processing of personal data by Cloudfare only to the European Economic Area, there is a possibility that some data will be stored on Cloudfare servers outside this area. Cloudfare uses standard contractual clauses in accordance with Art. 46 GDPR (link). Cloudfare Privacy Policy (link)
Open Nexus uses the LinkedIn social plugin. The plugin causes the LinkedIn service to know that a person registered on it is using the Service. Remember that from your LinkedIn account, you can also manage your privacy settings (link). Due to the fact that currently there is no possibility to limit the processing of personal data by LinkedIn only to the European Economic Area, there is a possibility that some data will be stored on LinkedIn servers outside this area. LinkedIn applies standard contractual clauses pursuant to Art 46 GDPR (link)
Open Nexus uses Facebook services. This technology causes the Facebook service to know that a person registered on it is using the Service. You can disable the display of internet advertisements based on data collected by Facebook through Digital Adverbium Allianza in the USA (link) , Digital Adverbium Alliance of Canada in Canada (link) or the European Interactive Digital Advertising Alliance in Europe (link) or using the settings on the end device. More information about the Facebook pixel and data collection by Facebook (link). Remember that from your Facebook account, you can also manage your privacy settings (link). Given that it is currently not possible to limit the processing of personal data by Facebook only to the European Economic Area, there is a possibility that some data will be stored on Facebook servers outside this area, particularly in the United States. Facebook uses standard contractual clauses in accordance with Art. 46 GDPR approved by the European Commission (quoting Facebook: “We use standard contractual clauses approved by the European Commission and rely on the European Commission's decisions establishing an adequate level of data protection with regard to specific countries, where appropriate, for the transfer of data from the EEA to the United States and other countries.”)link)
Open Nexus uses the HotJar service, which stores all personal data within the European Union (click). This is a tool that allows us to observe how the user uses the website. Hotjar uses cookies and other technologies to collect data on user and device behaviour: device IP address (processed during the session and stored in an anonymised form), screen size, device type (unique device identifiers), browser information, geographical location (country only) and preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymised user profile. The agreement concluded with Hotjar prohibits the sale of any data collected on our behalf. Within the cookie settings, you can decide whether or not to consent to the use of such cookies in your case. More information about Hotjar cookies (click).
In addition to the above, due to Open Nexus servicing the client, Salesforce software is used; however, as there is currently no possibility to limit the processing of personal data by Salesforce to the European Economic Area, there is a possibility that some data will be stored on servers outside this area. Salesforce uses standard contractual clauses pursuant to Art 46 GDPR (mentioned in the signed personal data processing agreements - copy of the agreement here). Salesforce has also implemented binding corporate rules pursuant to Art 47 GDPR (more information here)
5. Access to data and retention period
Open Nexus Sp. z o.o.'s personal data are directly accessible only to authorised Open Nexus employees. Furthermore, the collected personal data is transferred to our suppliers, to whom we entrust services related to the processing of personal data, e.g., accounting firms, forwarding companies, courier companies, companies conducting opinion research regarding the use of our services or websites, or our service providers, such as a hosting company where your data is stored, and e.g. companies sending emails from the Controller's website.
Your data may also be made available to entities authorised to receive it under applicable law, in particular, the competent law enforcement authorities.
Open Nexus ensures Users uninterrupted access to their data and the ability to modify it. Open Nexus may refuse to delete User data if the User has violated the rules applicable on opennexus.com or przetargowa.pl, or generally applicable law, and the retention of the data is necessary to clarify these circumstances and establish liability, in particular to claim damages from the said User.
In the case of newsletter subscription, you have the option to remove your email address from the mailing list directly in the email.
Registration for webinars, newsletters, and sending of emails and SMS messages is handled on our behalf by the Zanfia platform, operated by MailingR sp. z o.o. Webinars take place on the ClickMeeting platform. SMS reminders are sent by the SMSAPI operator (LINK Mobility Poland sp. z o.o.), connected to the Zanfia platform.
We will store the personal data processed by us for the following period:
for the purpose of concluding and implementing a contract (if applicable), establishing, pursuing, or defending against claims, the data will be stored until the end of its implementation, and after this time, it may be stored for a period required by law or to secure any potential claims (the statute of limitations period, which in the case of a service agreement will generally be 3 years plus an additional 1 year available to the Controller, which additional period results from the hypothetical possibility of submitting a claim just before the expiry of the statute of limitations),
for data processed for the purpose of fulfilling legal obligations, personal data will be stored for the time during which regulations require the Controller to store the data, e.g. tax documentation must be stored for a period of at least 5 years or in some cases for a longer period of time.
for internal administrative purposes, legitimate interests of the Controller, and for archival purposes, the data will be stored until the fulfilment of the legitimate interests of the Controller that form the basis for data processing,
for the data of webinar participants who have not given marketing consent, the data will be stored for 90 days after the end of the webinar, and then deleted or anonymised, unless there is a separate basis for further processing,
for data processed based on consent, personal data will be stored until the withdrawal of consent, or until the Controller determines that the personal data is outdated or the purpose of its processing has ceased.
6. Rights related to the processing of personal data by the Controller
Individuals whose personal data are processed have the following rights:
a) the right to access personal data,
b) the right to rectify personal data,
c) the right to erasure of personal data, unless specific provisions exclude such possibility,
d) the right to restrict the processing of personal data,
e) the right to object to the processing of data due to the special situation of the person whose data is processed,
f) the right to data portability
g) the right to withdraw consent at any time for the processing of personal data. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal,
h) the right to file a complaint with the President of the Personal Data Protection Office.
Open Nexus does not process data for the purpose of making automated decisions.
To exercise the above rights or to obtain detailed information about them, please contact us, preferably by email at: iod@opennexus.com.
The above rights may be limited by specific provisions of the GDPR or generally applicable law.
Providing personal data is necessary to provide the service, and failure to provide it prevents the conclusion and provision of the service, with the exception of personal data provided under consent (e.g., for the use of cookies), providing this data is not necessary for the conclusion and provision of the service. However, in the case of system cookies for the Controller's websites, providing them is necessary for the proper functioning of the site.
7. Security Measures
Open Nexus Sp. z o.o. implements security measures ensuring the protection of data against loss, improper use, and modification. Open Nexus undertakes to protect all your data in accordance with security standards and confidentiality. Personal data in Open Nexus is protected in accordance with applicable regulations and standards in a way that prevents access by third parties. Open Nexus never sends any correspondence, including electronic correspondence, requesting the provision of data of a user of opennexus.com or przetargowa.pl, especially any passwords. Such information is also not provided by telephone. User security is key, which is why Open Nexus Sp. z o.o. has held an Information Security Management System certificate according to the ISO/IEC 27001 standard since 2018 and appointed a Data Protection Officer.
8. Changes to the Privacy Policy
Open Nexus reserves the right to make changes to the Privacy Policy.
For any additional questions regarding the Privacy Policy, please contact: iod@opennexus.com.
Last modified date: 12 November 2026 (previous version: 3 November 2026)