Privacy Policy

1. Controller

The controller of your personal data is RS-CODE Sp. z o.o., ul. Długa 46/13, 47-400 Racibórz, Poland; KRS 0001133891, NIP (VAT ID: PL6392034036), REGON 529967793. Contact for data protection matters: office@rs-code.com, phone +48 571 268 881.

2. Data we process

Contact form and e-mail: name, business e-mail address, company, phone number (optional), topic and the content of your message.

Website use: technical data such as IP address, browser type, date and time of access, which are processed temporarily by our hosting provider to deliver the website securely.

Business relationships: contact details of representatives of clients and suppliers, contract and invoicing data.

3. Purposes and legal bases

Answering enquiries and preparing offers — Art. 6(1)(b) GDPR (pre-contractual steps) and Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries).

Performance of contracts — Art. 6(1)(b) GDPR.

Accounting, tax and anti-money-laundering obligations — Art. 6(1)(c) GDPR.

Security of the website and defence against claims — Art. 6(1)(f) GDPR.

Optional analytics cookies — Art. 6(1)(a) GDPR (consent), which you can withdraw at any time.

4. Recipients

Your data may be shared with carefully selected processors acting on our behalf: hosting and cloud infrastructure providers, e-mail and IT service providers, accounting firms and legal advisers. All processors are bound by data processing agreements under Art. 28 GDPR. We may disclose data to public authorities where required by law.

5. Transfers outside the EEA

Where a service provider is located outside the European Economic Area, transfers take place only on the basis of an adequacy decision of the European Commission or Standard Contractual Clauses (Art. 46 GDPR).

6. Retention

Enquiries that do not lead to a contract are deleted no later than 12 months after the last contact. Contract and invoicing data are retained for the periods required by tax and accounting law (generally 5 years from the end of the calendar year). AML records are kept for 5 years. Consent-based data is kept until consent is withdrawn.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights, write to office@rs-code.com.

You have the right to lodge a complaint with a supervisory authority, in particular the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, or the authority in your country of residence.

8. Obligation to provide data

Providing data is voluntary, but without your name, e-mail address and message we cannot answer your enquiry.

9. Automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

10. Security

We use appropriate technical and organisational measures, including encrypted TLS connections, access control and regular updates, to protect your data.

11. Changes

We may update this policy when our services or legal requirements change. The current version is always available on this page.