Privacy policy
Version of 22 October 2026.
This policy explains how personal data is processed when you use flotuno.com and send a request about the Flotuno product.
Please do not include special-category data, passwords or other people’s personal data (for example drivers’) in the form.
1. Who is the data controller?
The controller of your personal data is FUNDACJA ROZWOJU PRZEDSIĘBIORCZOŚCI “TWÓJ STARTUP”, with its registered office in Warsaw, ul. Żurawia 6/12, lok. 766, 00-503 Warsaw, Poland, KRS 0000442857, NIP 5213641211, REGON 146433467.
This policy applies to https://flotuno.com and to the Flotuno product, developed and offered under the Nexinlab brand. Services under the Nexinlab brand are provided by the Foundation Beneficiary: Andrei Liahovich.
- general email: contact@nexinlab.com
- privacy / GDPR: privacy@nexinlab.com
2. Nature of the website
flotuno.com is an informational website. Through the form you can apply for the pilot, request a demo or details, or ask to be kept informed about the product.
The website does not allow purchases or online payments. Scope, price and terms of cooperation are agreed individually.
3. Why do we process data and on what legal basis?
- Handling your request: replying, contacting you, discussing your needs and suggesting a next step. Basis: Article 6(1)(f) GDPR (legitimate interest in handling enquiries and communicating with potential clients).
- Steps before entering into a contract: preparing an offer or pilot terms. Basis: Article 6(1)(b) GDPR.
- Keeping you informed about Flotuno if you choose “Keep me informed”: occasional messages about the product and its next stages. Basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.
- Protecting the form from abuse: spam checks and request limits. Basis: Article 6(1)(f) GDPR.
- Legal obligations, in particular accounting and tax obligations if cooperation starts. Basis: Article 6(1)(c) GDPR.
- Establishing, pursuing or defending claims. Basis: Article 6(1)(f) GDPR.
4. What data do we process?
- form data: full name, company, email address, phone, number of drivers, city, message and request type;
- the enquiry number, the date and time of submission and the accepted privacy policy version;
- the page the form was sent from and campaign parameters (UTM), if present in the page address;
- technical data: a one-way hash of your IP address (the IP address itself is not stored) and browser information (user agent).
Providing data is voluntary, but without your name, email address and number of drivers we cannot handle the request.
5. Who receives the data?
- the Foundation and the Beneficiary providing services under the Nexinlab brand;
- the hosting, database and security provider: Cloudflare (including Cloudflare Turnstile);
- the email provider: Zoho;
- the Telegram messaging provider, used only for internal team notifications about new requests;
- accounting, legal or advisory service providers, where necessary;
- public authorities, where required by law.
We do not sell data or pass it to others for their marketing.
6. Is data transferred outside the European Economic Area?
Some providers (Cloudflare, Zoho, Telegram) may process data outside the EEA. In such cases we use the mechanisms required by the GDPR, in particular standard contractual clauses or adequacy decisions. Messenger notifications contain only the data needed to handle the request.
7. How long do we keep data?
- request data: for as long as needed to handle the request and related communication;
- data related to preparing an offer: for the duration of the discussions and then until claims become time-barred;
- data processed on the basis of consent: until consent is withdrawn;
- data required by law (e.g. accounting): for the period required by law.
8. Profiling
We do not make decisions about you based solely on automated processing, including profiling.
9. Your rights
- access your data and receive a copy;
- rectify your data;
- erase your data;
- restrict processing;
- data portability;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of earlier processing;
- lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
To exercise your rights, email privacy@nexinlab.com. Please include your enquiry number if you have one.
10. Cookies and similar technologies
flotuno.com uses no analytics or marketing cookies and loads no tracking tools. Fonts are served from our own server.
We protect the form with Cloudflare Turnstile, and Cloudflare’s infrastructure may use technical security mechanisms (including technical cookies). These are necessary for the website to work securely and therefore do not require consent.
11. Changes to this policy
We may update this policy, for example when new website features are added. The current version is always available on this page, with its version date shown above.