Privacy notice

Data controller

New European Strategies, publisher of neweuropeanstrategies.com (the "Service"), is the controller of your personal data within the meaning of Article 4(7) GDPR and decides on the purposes and means of the processing described below.

Data protection contact: office@neweuropeanstrategies.com.

What data we collect and why

We never collect or store card details - full payment data is processed by Paddle as Merchant of Record.

• Account data: name, email address, hashed password, language and preferences - to create and operate your account.
• Profile and community data: photo, bio, organisation, connections and messages - to provide the professional networking features.
• Subscription and order data: selected plan, subscription status, transaction identifier, access history - to perform the contract and grant entitlements.
• Newsletter data: email address, first name, consents and delivery status - to send the content you requested.
• Contact and support data: form content and correspondence - to answer and handle your request.
• Technical and analytics data: IP address, device and browser identifiers, security logs, usage events - for security, abuse prevention and product improvement.

Legal bases

• Article 6(1)(b) GDPR - performance of a contract: account, subscriptions, access to content and events.
• Article 6(1)(c) GDPR - legal obligation: tax and accounting duties, lawful requests from authorities.
• Article 6(1)(f) GDPR - legitimate interests: security of the Service, abuse prevention, product analytics, legal claims.
• Article 6(1)(a) GDPR - consent: marketing newsletter, non-essential cookies, selected notifications. Consent can be withdrawn at any time.

Who we share data with

We do not sell personal data and do not share it for third-party marketing.

• Paddle.com Market Ltd - our Merchant of Record and reseller of our digital products: payments, subscription management, invoicing and tax compliance.
• Infrastructure providers hosting the database, files and application.
• Transactional email and newsletter providers - system messages and delivery reporting.
• Analytics and error-monitoring providers - within the scope of your cookie consent.
• Legal, accounting and audit advisers - as needed to run our business.
• Public authorities - where required by law.

International transfers

Some providers process data outside the European Economic Area. In those cases the transfer relies on an adequacy decision or on the European Commission's standard contractual clauses together with supplementary safeguards.

Retention

After these periods data is deleted or irreversibly anonymised.

• Account and profile data - for as long as the account exists, plus up to 30 days in technical backups.
• Billing data and accounting documents - 5 years from the end of the tax year, as required by law.
• Newsletter data - until consent is withdrawn, then kept on a suppression list solely to honour the opt-out.
• Security logs and technical events - up to 12 months.
• Correspondence and support tickets - up to 24 months after the case is closed.

Your rights

We answer without undue delay and within one month at the latest. Write to office@neweuropeanstrategies.com.

• Access to your data and a copy of it.
• Rectification of inaccurate or incomplete data.
• Erasure (right to be forgotten).
• Restriction of processing and objection to processing based on legitimate interests.
• Data portability to another controller.
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
• Complaint to the Polish Data Protection Authority (UODO) or another competent supervisory authority.

Security

• Encryption in transit (TLS) and encryption at rest on the database provider side.
• Role-based access control and row-level security policies in the database.
• Login rate limiting and abuse monitoring.
• Audit logging of administrative actions and regular access reviews.

Cookies

Non-essential cookies are only set after your consent. Categories, examples and the preference centre are described in our cookie policy at /cookies - you can change your decision at any time.

Contact

For privacy matters write to office@neweuropeanstrategies.com. Payments, invoices and refunds are handled by Paddle, our Merchant of Record, at paddle.net.