Privacy policy

This Privacy Policy describes the principles of processing and protecting personal data of Clients and visitors of the website of Ośrodek Badawczo-Rozwojowy RCC Sp. z o.o., with its registered office in Głuchołazy, ul. Grunwaldzka 2A, NIP: 7532445427, REGON: 368135806, KRS: 0000692886.

 

1. Data controller

The controller of personal data is Ośrodek Badawczo-Rozwojowy RCC Sp. z o.o., with its registered office in Głuchołazy.

For matters related to personal data processing, you can contact us at:

email: rcc@rcc.com.pl
phone: +48 533 755 675
address: ul. Grunwaldzka 2A, 48-340 Głuchołazy, Poland

 

2. Purposes of personal data processing

Personal data may be processed for the following purposes:

  • providing services offered by the Center
  • contacting clients and responding to inquiries
  • providing information about services, training, and activities of the Center
  • analyzing website traffic
  • conducting statistics and marketing activities related to the Controller’s services
 
3. Legal basis for processing

Personal data are processed on the basis of:

  • Article 6(1)(b) GDPR – processing necessary for the performance of a contract or to take steps prior to entering into a contract
  • Article 6(1)(f) GDPR – legitimate interest of the Controller consisting of marketing of its own services and website analytics
  • Article 6(1)(a) GDPR – consent of the data subject
 
4. Data retention period

Personal data are stored for the following periods:

  • for the duration of the contract and for the period required by tax and accounting regulations (usually up to 6 years)
  • until consent is withdrawn, if processing is based on consent
  • until a valid objection is raised against processing for marketing purposes
  • until the limitation period for potential claims expires
 
5. Recipients of personal data

Personal data may be shared with entities cooperating with the Controller, in particular:

  • IT service providers
  • hosting providers
  • analytics and marketing service providers
  • companies providing statistical and analytical tools

These entities process data only on the basis of data processing agreements and according to the Controller’s instructions.

 
6. Transfer of data outside the European Economic Area

Due to the use of analytical tools provided by companies such as Google or Microsoft, personal data may be transferred outside the European Economic Area, particularly to the United States.

Such transfers are carried out in accordance with applicable law, including decisions of the European Commission on an adequate level of protection or the use of standard contractual clauses.

 
7. Analytical tools and tracking technologies

The website uses analytical and statistical tools that help analyze how users interact with the website and improve its performance.

In particular, the following tools may be used:

Google Analytics

An analytical tool provided by Google LLC used to analyze website traffic, generate statistics, and optimize website performance.

Microsoft Clarity

An analytical tool provided by Microsoft Corporation used to analyze how users interact with the website, including click maps and session recordings.

These tools may use cookies and similar technologies.

8. Cookies

The website uses cookies in order to:

  • ensure proper functioning of the website
  • analyzing website traffic
  • create statistics
  • improve service quality

Users can change their cookie settings at any time in their web browser.

Limiting the use of cookies may affect some functionalities of the website.

9. Rights of data subjects

Persons whose data are processed have the following rights:

  • the right to access their data
  • the right to rectify data
  • the right to erase data
  • the right to restrict processing
  • the right to object to processing
  • the right to data portability
  • the right to withdraw consent at any time

To exercise these rights, please contact the Controller.

 
10. Right to lodge a complaint

A person whose data are processed has the right to lodge a complaint with the supervisory authority responsible for personal data protection.

In Poland, the supervisory authority is the President of the Personal Data Protection Office (PUODO).

 

11. Voluntary provision of data

Providing personal data is voluntary, but in some cases it may be necessary to use the Controller’s services or to receive a response to an inquiry.

 
12. Automated decision-making

Personal data are not used for automated decision-making or profiling that would produce legal effects concerning users.

 
13. Changes to the privacy policy

The Controller reserves the right to make changes to this Privacy Policy. The current version of the document is always available on the Controller’s website.

Last updated: 12.03.2026