This Privacy Policy explains how personal data is collected, used and protected when you visit or use this website. It is provided in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – “GDPR”). By using this website, you acknowledge the processing of personal data as described in this Privacy Policy.
Where processing is based on consent, consent will be requested in a clear and understandable manner. Users may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Data Controller
You may exercise your rights under applicable data protection law by contacting the Data Controller at the email address provided below.
Nikos Trading Academy
operated by Tomasz Kowalski
E-mail address of the Data Controller: info@nikostradingacademy.com
The processing connected to the web services of this site takes place at the aforementioned offices and at the offices of the service provider of the site, and is handled only by the personnel of the company, or by any individuals assigned for occasional maintenance operations.
Types of Data collected
Among the Personal Data collected by this website, either directly or through third-party services, are: Cookies, First Name, Last Name and E-mail.
Complete details on every type of data collected are provided in the dedicated sections of this privacy policy or in specific information texts displayed before the collection of the actual data.
Personal data may be provided voluntarily by the user or collected automatically through the use of this website, depending on the services and technologies used.
Where personal data is requested through a form on this website, the information required to submit the form will be clearly indicated. Providing additional information that is not marked as required is voluntary. If the User refuses to provide required data, it may be impossible for this website to provide the requested service. Should this website indicate that certain Data are optional, Users are free to refrain from providing such Data without affecting the availability or operation of the requested service.
If you have any questions about which personal data is required, please contact the Data Controller.
This website may use cookies and similar technologies to ensure the proper functioning of the website, analyse website traffic and, where applicable, provide or measure certain services. Where required by applicable law, non-essential cookies and similar tracking technologies will only be used after obtaining the user’s consent. Users can manage their cookie preferences through the cookie consent mechanism available on the website.
Processing methods and location of the Data collected
Processing Methods
Personal data is processed using electronic and organisational measures appropriate to the nature of the processing and designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Access to personal data may be provided, where necessary, to persons authorised by the Data Controller and to third-party service providers supporting the operation of the website, such as hosting, IT, communication, analytics or email service providers. Where required by applicable law, such service providers will process personal data on behalf of the Data Controller under appropriate contractual arrangements.
Legal basis of the processing
Depending on the circumstances and the purpose of processing, the Data Controller may process personal data on the following legal bases:
- Consent – where the user has given consent for a specific processing activity, such as receiving marketing communications where consent is required.
- Contract or pre-contractual measures – where processing is necessary to provide a service requested by the user or to take steps at the user’s request before entering into a contract.
- Legal obligation – where processing is necessary to comply with a legal obligation applicable to the Data Controller.
- Legitimate interests – where processing is necessary for the legitimate interests pursued by the Data Controller or a third party, provided that such interests are not overridden by the user’s rights and freedoms.
The applicable legal basis depends on the specific processing activity.
International Data Transfers
Some service providers used by the Data Controller may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, the Data Controller will rely on an applicable legal transfer mechanism under the GDPR, such as an adequacy decision, the EU Standard Contractual Clauses or another legally recognised safeguard, where required. Further information regarding specific international transfers may be obtained by contacting the Data Controller.
Storage period
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The specific retention period may depend on the type of data and the purpose of processing.
Purpose of the Processing of the Data collected
Personal data may be processed for the following purposes:
- responding to enquiries submitted through the website;
- providing and managing services requested by users;
- sending newsletters or other communications where applicable and where legally permitted;
- analysing website usage and improving the website;
- maintaining the security and proper operation of the website; and
- complying with applicable legal obligations.
Details on the processing of the Personal Data
The Personal Data are collected for the following purposes and by using the following services:
Contact Form
When a user submits an enquiry through the contact form, the personal data provided may be processed in order to respond to the enquiry and, where applicable, take steps requested by the user before entering into a contract. Personal data collected through the contact form may include the user’s first name, last name and email address, as well as any other information voluntarily included in the message.
Mailing list or newsletter
Where a user subscribes to the newsletter, the email address and any other information provided during the subscription process may be processed for the purpose of sending newsletters and other communications related to the website or its services. Where consent is required, marketing communications will be sent only after the user has provided the appropriate consent. Users may unsubscribe at any time by using the unsubscribe mechanism included in the relevant communication.
Statistics
This section describes the analytics services used by the website to understand website traffic and improve its performance and content.
Google Analytics
This website may use Google Analytics, a web analytics service provided by Google, to help analyse how visitors use the website and to improve its performance and content. Google Analytics may collect information such as usage data, device information and online identifiers, depending on the configuration of the service. Where required by applicable law, analytics cookies will only be activated after the user’s consent. For more information about how Google processes personal data, users may consult Google’s Privacy Policy.
Management of contacts and sending of messages
This type of service makes it possible to manage a database of e-mail contacts, telephone contacts or contacts of any other kind, used to communicate with the User.
These services could also permit the collection of data relative to the date and time the messages were viewed by the User, as well as the User’s interaction with them, such as the information regarding the clicks on links included in the messages.
GetResponse
We may use GetResponse as an email marketing and contact management service. Personal data provided for newsletter subscriptions or other email communications may be processed by GetResponse on behalf of the Data Controller. The information processed may include the user’s name and email address, depending on the information provided. Further information about GetResponse’s processing of personal data is available in its current privacy documentation.
Rights of the User
Subject to applicable law and the conditions set out in the GDPR, users may have the right to:
- obtain access to their personal data;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- object to certain processing activities;
- withdraw consent where processing is based on consent;
- receive personal data in a portable format where the right to data portability applies; and
- lodge a complaint with the competent data protection supervisory authority.
Requests concerning these rights may be submitted using the contact details provided in this Privacy Policy. The Data Controller will respond to valid requests within the period required by applicable law.
Details on the right to object
When the Personal Data are processed in the public interest, in the exercise of public authority with which the Data Controller is vested or to pursue a legitimate interest of the Data Controller, the Users have the right to object to the processing for reasons connected to their particular situation.
It is pointed out to the Users that, should their Data be processed for purposes of direct marketing, they can object to the processing without providing any reason. To discover whether the Data Controller is processing data for direct marketing purposes, the Users can refer to the respective sections of this document.
How to exercise the rights
To exercise the rights of the User, the Users can send a request to the contact information of the Data Controller provided in this document. The requests are filed free of charge and dealt with by the Data Controller as quickly as possible, in any case within one month.
Additional information on the processing
Defence in court
The Data Controller may process personal data where necessary to establish, exercise or defend legal claims or to protect its rights and legitimate interests.
System Log and Maintenance
For security, technical and maintenance purposes, this website and its hosting or third-party service providers may automatically collect technical information and system logs, which may include information such as the user’s IP address, browser type, operating system and date and time of access.
Changes to this privacy policy
We may update this Privacy Policy from time to time to reflect changes to our services, the website, applicable law or our data processing practices. The updated version will be published on this page together with the date of the latest revision. Users are encouraged to review this Privacy Policy periodically.
Last update: 09 September 2026
Legal References
This Privacy Policy is primarily based on Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable data protection laws.