Privacy Policy

The controller of your personal data is Grupa Rapid Sp. z o.o., with its registered office in Syców, address: Mickiewicza 4-5 Parter, 56-500 Syców, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001252402, NIP 9112064116, REGON 545201446.

For any question about your personal data, contact us by e-mail at contact@gruparapid.com, by phone at +48 535 095 533 or by post at the address above.

a) Replying to your enquiry. If you write to us by e-mail or call us, we process the data you give us — usually your name, e-mail address or phone number, the content of your message and any other information you choose to include. We use it to reply and to continue the conversation. Legal basis: our legitimate interest in responding to people who contact us (Art. 6(1)(f) GDPR). Where your enquiry concerns a possible contract with us (for example a partnership or cooperation), we process the data to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR). If a contract is concluded, we process the data needed to perform it (Art. 6(1)(b) GDPR) and to meet our legal obligations, such as tax and accounting rules (Art. 6(1)(c) GDPR).

b) Delivering and securing the website. When you visit the website, our hosting provider automatically processes technical data that every browser sends: IP address, date and time of the request, the address of the requested page, browser and operating system information and the referring page. These data are needed to deliver the website to you and to protect it against abuse and attacks. Legal basis: our legitimate interest in providing a working and secure website (Art. 6(1)(f) GDPR).

c) Establishing, pursuing or defending legal claims. Where necessary, we may process the data described above to establish, pursue or defend legal claims. Legal basis: our legitimate interest in protecting our rights (Art. 6(1)(f) GDPR).

We do not sell personal data. We make data available only to service providers that process them on our behalf and on our instructions (processors), under data processing agreements:

• Vercel Inc. (USA) — hosting and delivery of the website, including technical logs;
• Microsoft — provider of the Microsoft 365 (Exchange Online) e-mail service we use for our gruparapid.com mailboxes.

Where necessary, data may also be made available to our accounting and legal advisers, who are bound by confidentiality. If the law requires it, we may disclose data to authorities entitled to receive them (for example courts or law enforcement).

Vercel Inc. is established in the United States, and Microsoft may process data in the United States. Vercel and Microsoft Corporation participate in the EU-U.S. Data Privacy Framework, so transfers to them are based on the European Commission’s adequacy decision of 10 July 2023. In addition, the data processing terms of both providers include the Standard Contractual Clauses approved by the European Commission. You can ask us for information about these safeguards using the contact details in section 1.

• Enquiries (e-mail and phone): up to 12 months after our last contact, unless a contract follows. If a contract is concluded, we keep the data for the duration of the contract and afterwards for as long as the law requires (for example tax and accounting rules) and until any claims become time-barred. If you object successfully, we delete the data earlier.
• Technical server logs: kept by Vercel only for a short period, in line with the standard log retention of our hosting plan, and used only to operate and protect the website.

You have the right to:

• access your personal data (Art. 15 GDPR);
• have your data rectified (Art. 16 GDPR);
• have your data erased (Art. 17 GDPR);
• restrict processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR), where processing is based on a contract or consent and carried out by automated means;
• object, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21 GDPR).

We do not currently process personal data on the basis of consent. If we ever ask for your consent, you can withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out before it.

You also have the right to lodge a complaint with the supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

To exercise your rights, write to contact@gruparapid.com or to our postal address.

Providing personal data is voluntary. However, without your contact details we cannot reply to your enquiry. Technical data sent automatically by your browser are needed to display the website.

We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

This website does not set cookies and does not use analytics or tracking tools. Details are in our Cookie Policy.

We may update this policy when our practices or the law change. The current version is always published on this page together with the date of the last update.