1. Data Controller
The controller of personal data processed through this website is:
RN GROUP Rafał Niekowal
Poland
VAT ID: PL9570416937
REGON: 147209393
NCAGE: 9A3UH
Email: info@rngroup.pl
Phone: +48 22 486 32 48
For any questions concerning the processing of personal data or the exercise of your rights, please contact us using the email address indicated above.
2. Personal Data We Process
We may process personal data provided voluntarily through the contact form or by email, including:
your name;
your email address;
the content of your message;
your company name, telephone number or other information included voluntarily in your correspondence.
When you use the website, certain technical information may also be processed automatically, including:
IP address and approximate location derived from it;
browser and device type;
operating system;
date and time of the visit;
pages and resources requested;
referring website;
technical server and security logs;
cookie identifiers and analytics data, where consent has been granted.
Please do not send confidential, classified, export-controlled or sensitive personal information through the public contact form.
3. Purposes and Legal Bases
We process personal data for the following purposes:
Responding to enquiries and business communications
Data submitted through the contact form or by email is processed in order to respond to your enquiry, conduct correspondence and take steps requested before entering into a contract.
The legal basis is Article 6(1)(b) GDPR, where the enquiry concerns a potential contractual relationship, and Article 6(1)(f) GDPR, where processing is necessary for our legitimate interest in conducting business communications.
Website operation and security
Technical data and server logs may be processed to maintain the website, ensure its security, diagnose technical problems, prevent abuse and protect against unauthorised access.
The legal basis is Article 6(1)(f) GDPR, namely our legitimate interest in maintaining a secure and properly functioning website.
Establishment, exercise or defence of legal claims
Correspondence and related records may be retained where necessary to establish, exercise or defend legal claims.
The legal basis is Article 6(1)(f) GDPR.
Analytics and non-essential cookies
Google Analytics and other non-essential technologies are used only after you have given the relevant consent through the cookie banner.
The legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time by changing your cookie preferences.
4. Recipients of Personal Data
Personal data may be disclosed to entities providing services necessary for the operation of the website and our business, including:
hosting and server service providers;
website administration and IT support providers;
email and communications service providers;
analytics and cookie-management providers;
professional advisers, including legal or accounting advisers, where necessary;
public authorities or courts where disclosure is required by law.
Such entities process personal data only to the extent necessary for the performance of their services or legal obligations.
We do not sell personal data to third parties.
5. Transfers Outside the European Economic Area
Some service providers used by the website may process data outside the European Economic Area.
Where personal data is transferred to a country outside the EEA, the transfer takes place only where an appropriate legal mechanism is available, such as:
an adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
another safeguard permitted under Chapter V GDPR.
Google Analytics may process analytics data using infrastructure operated by companies belonging to the Google group.
6. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected.
In particular:
contact-form enquiries and business correspondence are retained for the time required to respond and, where justified, for the period necessary to establish or defend legal claims;
data relating to contractual discussions may be retained for the duration of the business relationship and the applicable limitation periods;
technical and security logs are retained for the period necessary to ensure website security and investigate incidents;
analytics data is retained in accordance with the retention settings applied in the relevant analytics service;
consent records are retained for the period necessary to demonstrate that valid consent was obtained;
cookies are stored for the periods described in the Cookie Policy.
After the relevant retention period expires, the data is deleted or anonymised unless further retention is required by law.
7. Your Rights
Subject to the conditions set out in GDPR, you have the right to:
obtain confirmation as to whether your personal data is being processed;
access your personal data and receive a copy of it;
request rectification of inaccurate or incomplete data;
request erasure of personal data;
request restriction of processing;
object to processing based on our legitimate interests;
receive data in a structured, commonly used and machine-readable format where the right to data portability applies;
withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
lodge a complaint with a competent supervisory authority.
In Poland, the supervisory authority is the President of the Personal Data Protection Office.
Requests concerning personal data may be submitted to info@rngroup.pl. We may need to verify the identity of the person submitting the request before responding.
8. Voluntary Provision of Data
Providing personal data through the contact form is voluntary.
However, failure to provide your name, email address or sufficient information about your enquiry may prevent us from responding.
The website can generally be browsed without providing personal data through the contact form. Non-essential cookies and analytics are activated only in accordance with the choices made through the cookie banner.
9. Automated Decision-Making
Personal data collected through this website is not used for automated decision-making that produces legal effects or similarly significantly affects individuals.
We do not conduct profiling for such purposes.
10. Cookies
The website uses cookies and similar technologies necessary for its operation.
With your consent, it may also use analytics or marketing-related technologies. You can accept, reject or manage non-essential cookies through the cookie banner and the Manage Preferences option.
Detailed information about the cookies used, their purposes and retention periods is available in the Cookie Policy.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
11. Changes to This Privacy Policy
This Privacy Policy may be updated where necessary to reflect changes in the website, the services used, legal requirements or data-processing practices.
The current version will always be published on this page.
Last updated: 16 July 2026.