Privacy Policy

We receive data directly from you (form, e-mail, phone) and automatically when you use the website.

• Enquiries and quotes (contact form, e-mail, phone). Data: name, e-mail address, phone number and company name (if provided), type of service, message and any attached file (photo or PDF). Purpose: answering your enquiry and preparing a quote. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and (f) (our legitimate interest in handling correspondence). Retention: until the correspondence ends, then up to 12 months from the last contact.
• Entering into and performing a service contract. Data: identification and contact details, service location, scope of work. Legal basis: Art. 6(1)(b) GDPR. Retention: for the term of the contract, then until limitation periods for claims expire.
• Accounting and tax (invoices and accounting documents). Legal basis: Art. 6(1)(c) GDPR (accounting and tax law). Retention: 5 years from the end of the tax year in which the tax obligation arose.
• Establishing, pursuing or defending legal claims. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest). Retention: until limitation periods expire.
• Website security and protection of the form against abuse. Data: IP address in server logs and a temporary counter of requests per IP address (kept for up to 1 hour). Legal basis: Art. 6(1)(f) GDPR (security and operation of the website).
• Visitor statistics with Google Analytics (cookies) — only with your consent. Legal basis: Art. 173 of the Polish Telecommunications Law and Art. 6(1)(a) GDPR. Retention: until you withdraw consent, at most until the cookies expire (section 8).
• Aggregated page-view statistics with Vercel Web Analytics — no cookies and no cross-site tracking. Legal basis: Art. 6(1)(f) GDPR (traffic analysis and improving the website).

Providing data is voluntary, but your name, e-mail address and message are necessary for us to answer your enquiry. Invoice details are a statutory requirement. Consent to analytics cookies is voluntary and declining does not limit your use of the website.

Your data may be entrusted or disclosed to the following categories of recipients:

• Vercel Inc. (USA) — website hosting and Vercel Web Analytics.
• Resend (USA) — delivery of form messages to the controller's mailbox.
• Upstash — rate limiting of form submissions (IP address, up to 1 hour).
• the e-mail service provider operating the mailbox kontakt@rclaser.pl.
• Google Ireland Limited — Google Analytics, only after you consent.
• the controller's accounting firm — data contained in accounting documents.
• public authorities and other entities to which we must disclose data under the law.

We do not sell personal data.

Some providers (Vercel, Resend, Upstash, Google) may process data outside the EEA, in particular in the USA. In that case we rely on the safeguards required by the GDPR: a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses, depending on the provider. You can obtain a copy of the safeguards by writing to kontakt@rclaser.pl.

You have the right to:

• access your personal data,
• rectify inaccurate data,
• erasure of your data,
• restriction of processing,
• data portability,
• object to processing based on our legitimate interest (Art. 6(1)(f) GDPR),
• withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal,
• lodge a complaint with the supervisory authority (the President of the Polish Personal Data Protection Office, UODO, ul. Stawki 2, 00-193 Warsaw).

To exercise these rights, write to kontakt@rclaser.pl.

We do not make solely automated decisions with legal effects and we do not use marketing profiling. We do not run remarketing.

We may update this policy when our data processing or the law changes. The current version is always available on this page and the date of the last change is shown above.