Communications and marketing

Two consents, not one

Marketing messages require two independent conditions to be met at the same time, and neither replaces the other.

First, the GDPR: there must be a basis for processing your data. For marketing that basis is consent (Article 6(1)(a) GDPR).

Second, electronic communications law: separate consent is required for USING THE CHANNEL itself to send commercial information. In Poland this is governed by the Electronic Communications Law of 12 July 2024, which from 10 November 2024 replaced Articles 172-173 of the Telecommunications Law and Article 10 of the Act on Providing Services by Electronic Means in this respect.

That is why consent is always collected explicitly and separately. We never infer it from the fact that you created an account, made a purchase or registered for an event.

Types of messages you may receive

• Service (transactional) messages - registration confirmation, password reset, payment confirmation, invoice, event reminder, change of terms. They are necessary to perform the contract, so they are not covered by marketing consent and CANNOT be switched off without deleting the account.
• Editorial newsletter - ordered separately, with its own consent and its own unsubscribe link in every message.
• Marketing communications - invitations to commercial events, subscription offers, partner information. Always based on marketing consent.
• Activity notifications - a reply to your comment, a message, a network invitation. You control these per category in notification settings.
• Browser push notifications - only after permission granted in the browser AND marketing consent, where the content is commercial.
• Product information about platform changes - on by default as relevant to using the service, but switchable off in settings.

How newsletter sign-up works

We use double opt-in. After you submit an address we send a message with a confirmation link, and only clicking it starts delivery. An unconfirmed address never reaches the sending list.

This protects against signing somebody up against their will - and at the same time proves that the consent came from the owner of the mailbox.

• With every consent we store its text in the version you saw, a timestamp, the language and the source of the decision. Changing the text bumps the consent version and requires a fresh decision - we never stretch an old consent onto a new scope.
• Required fields are limited to the email address. A first name is optional and is used only to personalise the greeting.
• We use no pre-ticked boxes and no bundled consents - every consent has its own field and its own text.
• The confirmation link is single-use and expires. Clicking a confirmed link again shows an already confirmed state rather than an error.

How to opt out

Opting out must be as easy as opting in - that is the requirement of Article 7(3) GDPR and that is how it works here.

• The unsubscribe link sits in the footer of every marketing message and newsletter. It works without signing in and without giving a reason.
• Unsubscribing takes effect immediately. We run no grace period and send no extra messages asking you to reconsider.
• Signed-in users switch individual categories off in consent settings (/profile/privacy) - with a visible decision history.
• You can also write to office@neweuropeanstrategies.com; we action an objection to direct marketing immediately and without asking why (Article 21(2)-(3) GDPR).
• After an opt-out the address goes onto a suppression list. That is the only way an unsubscribe survives a list re-import - which is why the address itself stays even though the rest of the newsletter data is removed.
• We honour the Global Privacy Control signal sent by your browser and treat it as an objection to processing for marketing purposes.

Personalisation and segmentation

We tailor newsletter content to what you read and which topics you follow. This is low-risk profiling - we take no decisions on that basis that produce legal or similarly significant effects within the meaning of Article 22 GDPR.

You can switch personalisation off by withdrawing the personalisation consent. We then send the newsletter in a non-profiled version rather than stopping it.

• Segmentation is based on content categories, open history and preferences declared in your profile.
• We do not buy address lists and we do not enrich our lists with data from data brokers.
• We do not hand email addresses to partners for their own mailings. If a partner is to reach you, it happens through us or on the basis of a separate consent given to them.

Measuring delivery performance

• We measure deliveries, opens, clicks and unsubscribes - to improve the quality of our sending and maintain sender reputation.
• Open measurement uses a tracking pixel in the message. A mail client that blocks images switches it off effectively, and this has no effect on content delivery.
• Links in messages may pass through a redirect that counts the click. The destination is always our own address or an address stated explicitly in the message.
• We analyse statistics in aggregate. We do not build assessments of individuals from them and do not share them with advertisers in a form that identifies a recipient.

Advertising, sponsored content and political advertising

• Paid material is unambiguously labelled as advertising, sponsored or partner content - both in the service and in the newsletter.
• Advertising does not influence editorial content. Publishing decisions are taken independently of commercial relationships.
• We run political advertising in line with Regulation (EU) 2024/900 on the transparency and targeting of political advertising, applicable since 10 October 2025. Every such item carries a political advertising label, the sponsor's identity and information on targeting criteria, and we retain the documentation the Regulation requires.
• The Regulation prohibits targeting political advertising using special categories of data and targeting people we know have not reached voting age - we observe both prohibitions absolutely.
• Detailed rules for advertising cooperation are set out in our advertising guidelines.

Sender authentication and security

• Our messages are authenticated with SPF, DKIM and DMARC - so spoofing of our domain is detectable at the recipient's end.
• We never ask in a message for a password, a one-time code or full card details. A message containing such a request did not come from us.
• Payment links lead only to our own service or to the payment provider's page.
• Report a suspicious message impersonating New European Strategies to office@neweuropeanstrategies.com - ideally with the message headers.

Contact

Matters concerning mailings, consents and opt-outs: office@neweuropeanstrategies.com. If you receive messages from us despite opting out, treat it as an incident report - we will check how the address got back onto the list.