1. Data Controller
The data controller for personal data processed through the website rihaka.info is Rihaka, with its registered address at Generała Stanisława Maczka 6, Rzeszów, Poland. For all matters relating to the processing of your personal data, you may contact us at [email protected] or by telephone at +48 17 853 9291.
This Privacy Policy applies to all personal data collected through this website and through correspondence initiated via this website. It has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych, Dz.U. 2018 poz. 1000, as amended).
2. Categories of Personal Data We Collect
We collect personal data in the following circumstances and categories:
Contact form submissions: When you use the contact form on this website, we collect your name, email address, the subject you select, and the content of your message. Providing this data is voluntary. Without it, we cannot respond to your enquiry.
Direct email correspondence: When you contact us directly by email, we process the data contained in your message, including your email address and any personal information you choose to include.
Technical data: When you visit this website, our server and any analytics tools we operate may automatically collect technical data including your IP address, browser type, operating system, the pages you visit, and the time and date of your visit. This data is collected for the purpose of maintaining the security and functionality of the website.
Cookie data: We use cookies as described in our Cookie Policy. Cookie preferences you set are stored in your browser. Please refer to our Cookie Policy for full details.
3. Purposes and Legal Bases for Processing
We process your personal data for the following purposes and on the following legal bases as defined in Article 6 of the GDPR:
Responding to enquiries (Article 6(1)(b) and (f) GDPR): When you contact us through the contact form or by email, we process your data to respond to your enquiry. The legal basis is the performance of a contract or pre-contractual steps at your request, and our legitimate interest in maintaining communication with people interested in our program.
Website security and functionality (Article 6(1)(f) GDPR): Technical data is processed on the basis of our legitimate interest in ensuring the security and proper functioning of the website.
Cookie-based processing (Article 6(1)(a) GDPR): Where we use non-essential cookies, we do so only with your explicit consent, which you can withdraw at any time through the cookie settings on this website.
Compliance with legal obligations (Article 6(1)(c) GDPR): We may process personal data where necessary to comply with a legal obligation under Polish or EU law.
4. Sharing of Personal Data
We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients where necessary:
Service providers: We may share data with trusted service providers who assist us in operating the website and delivering the program, including hosting providers and email service providers. These providers process data on our behalf and are bound by data processing agreements that require them to protect your data in accordance with GDPR.
Legal authorities: We may disclose personal data to competent authorities, courts, or regulatory bodies where required to do so by applicable Polish or EU law, or where necessary to establish, exercise, or defend legal claims.
Any transfers of personal data outside the European Economic Area are conducted only in accordance with Chapter V of the GDPR, including where appropriate the use of Standard Contractual Clauses approved by the European Commission.
5. Retention Periods
We retain personal data only for as long as necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law.
Data collected through contact form submissions and email correspondence is retained for a period of up to two years from the date of last contact, unless a longer period is required by law or by the nature of an ongoing relationship.
Technical server logs are retained for a period of up to 12 months.
Cookie preference data is retained in your browser for the period specified in our Cookie Policy, after which you will be asked to confirm your preferences again.
After the applicable retention period, personal data is securely deleted or anonymised.
6. Your Rights Under GDPR
Under the GDPR and Polish data protection law, you have the following rights with respect to your personal data:
Right of access (Article 15 GDPR): You have the right to obtain confirmation of whether we process personal data about you, and if so, to receive a copy of that data and information about how it is processed.
Right to rectification (Article 16 GDPR): You have the right to request correction of inaccurate personal data and completion of incomplete data.
Right to erasure (Article 17 GDPR): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected.
Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict the processing of your data in certain circumstances.
Right to data portability (Article 20 GDPR): Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
Right to object (Article 21 GDPR): You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent (Article 7(3) GDPR): Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 of the GDPR. If your request is complex or numerous, we may extend this period by a further two months, in which case we will inform you of the extension and the reasons for it.
You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warsaw, Poland, website: uodo.gov.pl.
7. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include the use of encrypted communications (HTTPS), access controls, and regular review of our data processing practices.
No method of transmission over the internet or method of electronic storage is completely secure. While we take reasonable steps to protect your data, we cannot guarantee its absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or for other operational reasons. The date of the most recent revision is indicated at the top of this page. We encourage you to review this policy periodically.
Where changes are material, we will take reasonable steps to bring them to your attention, which may include a notice on the website.