Privacy Policy
Last updated: 10 October 2026
This policy explains how NEXLY LAB sp. z o.o., ul. Juliana Smulikowskiego 4A/21, 00-389 Warszawa, Poland, KRS 0001190628, NIP 5253058699, REGON 542557020 ("Nexly Lab", "we") processes personal data on nexlylab.com and in our media products, including the news channels Nexly Lab Pixel News and Nexly Lab Media on YouTube, X and TikTok, and the internal newsroom tool that publishes to them.
1. Controller and contact
The controller is NEXLY LAB sp. z o.o., ul. Juliana Smulikowskiego 4A/21, 00-389 Warszawa, Poland, KRS 0001190628, NIP 5253058699, REGON 542557020. Contact for privacy matters: [email protected].
2. What we process and why
- Website visits. Technical data (IP address, browser, device, pages visited) through our hosting provider and Google Analytics, to keep the site secure and understand how it is used. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) and, where required, your consent to analytics cookies.
- Messages you send us. Your name, e-mail and the content of your message, to answer you. Legal basis: steps at your request and our legitimate interest.
- Our social media integrations. Our newsroom tool connects only to accounts owned by Nexly Lab (for example our TikTok, X and YouTube accounts) using the official APIs. It stores the access tokens and the basic profile of those accounts (name, handle, ID) to publish our own videos and to show which account is connected. It does not collect data about other users, their posts, comments, followers or messages.
- News content. Our videos summarize public news reports and cite their sources. They may mention public figures in connection with public events, based on our legitimate interest and freedom of expression.
3. Recipients
Hosting and infrastructure providers (including Cloudflare), Google (Analytics, YouTube), X Corp., TikTok, and AI service providers that help us produce content (text and voice generation). They act as processors or as independent controllers under their own terms. Some of them process data outside the EEA on the basis of the EU-US Data Privacy Framework or standard contractual clauses.
4. Retention
Analytics data is kept for up to 14 months. Messages are kept as long as needed to handle your matter and then up to 3 years for our legitimate interests. Integration tokens are kept until the account is disconnected.
5. Your rights
You have the right to access, rectify, erase or restrict your data, to object to processing based on legitimate interest, to data portability, and to withdraw consent at any time. You can also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa. To exercise your rights, write to [email protected].
6. Cookies
We use cookies and similar technologies for analytics (Google Analytics). Analytics cookies are set only after you accept them in the cookie banner. Details and how to change your choice: Cookie Policy.
7. Changes
We may update this policy. The date at the top shows the latest version.