Rockitworks Sp. z o.o. is committed to transparent processing and appropriate protection of personal data.
This policy explains what data may be processed when you use the RockitOPS website, why it is processed and what rights you have.
1. Controller and contact
The controller is Rockitworks Sp. z o.o., with its registered office at ul. Obrzeżna 5, 02-691 Warsaw, Poland.
For matters concerning personal data, contact iod@rockitworks.pl or write to the controller’s registered office, marking the correspondence “Personal data”.
2. Categories and sources of data
We collect data directly from you when you contact us or use the form and automatically to the extent necessary to operate the website securely.
- identity and contact details provided in the form or correspondence, such as name, email address, company and role;
- message content and other data voluntarily provided in correspondence;
- basic technical and security log data such as IP address, request date, browser type and error information;
3. Purposes and legal bases
- handling enquiries, communicating and taking steps before entering into a contract - Article 6(1)(b) GDPR;
- maintaining security, preventing abuse, establishing or defending legal claims and conducting business communication - the controller’s legitimate interests, Article 6(1)(f) GDPR;
- compliance with legal obligations - Article 6(1)(c) GDPR.
4. Recipients and international transfers
Data may be shared with providers of hosting, system maintenance, email, security, IT support, legal and audit services, only to the extent necessary for those services.
When you open the Contact page, the embedded Google Maps view is loaded directly from Google servers. Google may receive technical data necessary to display the map, including your IP address, browser information and request data.
The contact form uses hCaptcha, provided by Intuition Machines, Inc., to protect against spam and automated abuse. Verification may involve analysing technical data and how the website is used, including the IP address, device and browser information, time spent on the website and user interactions. For this purpose, hCaptcha acts as a processor on behalf of the controller.
If a provider processes data outside the European Economic Area, the data is transferred only under a mechanism and safeguards required by applicable law.
5. Retention
The retention period for enquiry data depends on the course and outcome of the contact. Data is retained until the correspondence is completed and afterwards only where and for as long as necessary to document the contact or establish, exercise or defend claims, in accordance with the applicable limitation periods. Data related to a contract or legal obligation is retained for the period required by law.
The retention period for technical data and logs is determined by the website protection purpose, the time needed to detect and investigate an event, and the infrastructure log rotation configuration. Once these needs cease, the data is deleted or anonymised unless continued retention is required by law.
6. Your rights
Subject to the conditions set out in the GDPR, you may request:
- access to your data and a copy of it;
- rectification or completion of your data;
- erasure or restriction of processing;
- an objection to processing based on legitimate interests;
- data portability where the statutory conditions are met;
- the right to lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority.
7. Voluntary provision and automated decisions
Providing data is voluntary, but omitting required fields may make it impossible to handle an enquiry. The website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
8. Cookies and similar technologies
The current version of the website does not use analytics or marketing cookies and does not remember your language preference between sessions. When you switch language, the website briefly stores the target page address, scroll position and menu state in browser session storage (sessionStorage) to preserve the navigation context. This data is removed after navigation and no later than when the browser tab session ends, and it is not used to track you.
The embedded Google Maps view is third-party content, loads together with the Contact page and may use cookies or similar technologies in accordance with Google policies.
hCaptcha may use cookies and similar technologies that are technically necessary to perform anti-spam verification and secure the form. We do not use hCaptcha for our own analytics or marketing purposes.
If the website is extended with technologies that are not required for its operation, this policy will be updated and any consent required by law will be obtained before those technologies are enabled.
9. Data security
We apply organisational and technical measures selected according to the risk and scope of the data processed. Access to data is restricted to persons and entities that require it for the purposes described in this policy.
10. Policy updates and contact
This policy may be updated to reflect changes in law, technology or services. The current version and effective date are published on the website. Questions may be sent to iod@rockitworks.pl.