PRIVACY POLICY
Last updated: September 2026
This Privacy Policy explains how personal data are processed when you visit rabaparat.com, contact us through the website or communicate with RABAPARAT.
1. DATA CONTROLLER
The controller of personal data processed through this website is:
Karolina Blicharska
RABAPARAT
ul. Franklina Roosevelta 44/2
59-220 Legnica
Poland
E-mail: info@rabaparat.com
VAT EU: PL6912476221
RABAPARAT is currently operated as a non-registered activity under Polish law.
2. WHAT DATA WE PROCESS
Depending on how you use the website, we may process:
- your name,
- e-mail address,
- telephone number, if provided,
- information included in your message or enquiry,
- technical information connected with the use of the website, such as IP address, browser and device information,
- information about your consent preferences,
- website usage information collected through analytics tools where consent has been provided.
Please do not include sensitive personal data in contact forms unless it is necessary for your enquiry.
3. CONTACT FORMS AND ENQUIRIES
When you contact us through the website, we process the information you provide in order to:
- respond to your enquiry,
- understand your project or business needs,
- prepare information or an offer,
- take steps before entering into a possible contract,
- maintain correspondence connected with your enquiry.
The legal basis for processing is primarily Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract.
For general correspondence that is not directly related to a potential contract, processing may also be based on our legitimate interest in responding to communications and managing business correspondence under Article 6(1)(f) GDPR.
Providing the information marked as required in the contact form is necessary for us to respond to your enquiry. Other information is optional.
4. E-MAIL COMMUNICATION
If you contact us by e-mail, we process your e-mail address and the information contained in your message for the purpose of handling your communication.
Messages sent through the website may be transmitted through our e-mail infrastructure and SMTP service.
5. WEBSITE HOSTING AND SERVER DATA
The website and e-mail services are hosted using infrastructure provided by United Domains.
When the website is accessed, technical server data may be processed automatically. This may include information such as:
- IP address,
- date and time of access,
- requested page,
- browser type,
- operating system,
- referrer information.
Such processing is necessary to provide the website, maintain its security and diagnose technical problems.
The legal basis is our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.
6. GOOGLE ANALYTICS
We use Google Analytics 4 to understand how visitors use our website.
Google Analytics is provided by Google. For users in the European Economic Area, the relevant Google entity is generally Google Ireland Limited.
Analytics is activated in accordance with the consent preferences selected through our cookie banner.
Where consent is required, the legal basis for the use of analytics cookies and related processing is Article 6(1)(a) GDPR.
Depending on the configuration, Google Analytics may process information such as:
- pages visited,
- approximate location,
- device and browser information,
- interactions with the website,
- session information.
Google acts as a processor for Google Analytics under its data processing terms.
Google may process information outside the European Economic Area. Where applicable, international transfers may rely on recognised transfer mechanisms such as the EU-US Data Privacy Framework and/or Standard Contractual Clauses.
You can withdraw or change your consent at any time through the cookie settings available on the website.
7. COOKIES AND CONSENT MANAGEMENT
We use cookies and similar technologies.
Cookies necessary for the technical operation of the website may be used without consent where they are strictly required to provide a service requested by the visitor.
Optional technologies, including analytics, are activated according to the consent choices made through the cookie banner.
Consent preferences are managed using Complianz.
More detailed information about cookies used on this website can be found in our Cookie Policy.
8. GOOGLE SEARCH CONSOLE
We use Google Search Console to monitor the technical visibility and performance of the website in Google Search.
Search Console provides aggregated information about search queries, indexing and website performance. It is used for website administration and search engine optimisation.
9. RECIPIENTS OF PERSONAL DATA
Personal data may be processed by service providers that support the operation of the website and communication infrastructure, including in particular:
- hosting and e-mail providers,
- website infrastructure providers,
- analytics providers where you have given consent,
- IT and technical service providers where necessary.
We only provide access to data where it is necessary for the relevant service.
10. DATA RETENTION
Personal data are retained only for as long as necessary for the purpose for which they were collected.
In particular:
- contact enquiries are generally retained for the duration of the correspondence and, where relevant, for the period necessary to establish, exercise or defend legal claims,
- data connected with a contract may be retained for periods required by applicable tax, accounting or legal obligations,
- analytics data are retained according to the settings configured in Google Analytics,
- consent records may be retained for the period necessary to demonstrate that consent was obtained.
Google Analytics allows standard GA4 properties to use retention settings of 2 or 14 months for user-level data. The actual period applied to this website should correspond to the setting selected in the Analytics account.
11. YOUR RIGHTS
Under the GDPR, you may have the right to:
- access your personal data,
- correct inaccurate personal data,
- request deletion of your personal data,
- request restriction of processing,
- object to processing based on legitimate interests,
- receive your data in a portable format where applicable,
- withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
info@rabaparat.com
You also have the right to lodge a complaint with the competent data protection supervisory authority.
12. AUTOMATED PROCESSING AND AI-ASSISTED TOOLS
RABAPARAT may in the future use automated workflows or AI-assisted tools to support internal business processes, for example to organise enquiries, prepare summaries or assist in drafting responses.
Such tools will not be used to make legally significant decisions about website visitors solely by automated means unless an appropriate legal basis and required safeguards are in place.
If additional external AI or automation service providers begin processing personal data, this Privacy Policy will be updated accordingly.
13. SECURITY
We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or disclosure.
No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when the website, services or legal requirements change.
The current version will always be available on this website.