01Data Controller
The data controller is WDRAŻAJ.AI spółka z ograniczoną odpowiedzialnością (a Polish limited liability company), Al. gen. Władysława Sikorskiego 9C lok. 27, 02-757 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 13th Commercial Division, under KRS number 0001270660, tax ID (NIP) 5214182900, REGON 545914927, share capital PLN 5,000, e-mail: info@rmfsolutions.ai.
02Cold Outreach (Direct Marketing Contact)
If we contact you first - sending a message to your business email with a cooperation proposal - we process your data under art. 14 GDPR (data not obtained directly from you). We then process: name, business email address, position and the name of the company you represent. The data comes from publicly available sources - company websites, the CEIDG and KRS public registers, and public professional profiles. The legal basis is art. 6(1)(f) GDPR, i.e. our legitimate interest in direct marketing and establishing business contact. You may object at any time by replying to the message - we will then promptly delete your data from our contact database. We process the data until you object.
03Scope of Data Processed
Contact form data (name, company, phone, email, message content). Automatically collected data (IP, browser type, access time). Direct correspondence (email, phone).
04Purposes and Legal Basis
Contact and inquiry handling (art. 6(1)(a) GDPR, consent). Marketing (consent, currently inactive). Remarketing and analytics (cookie consent). Legitimate interest (site improvement). Direct marketing and business contact in outbound campaigns (art. 6(1)(f) GDPR - see the „Cold Outreach” section).
05Retention Period
Form data: for the duration of inquiry handling, up to 12 months from last contact if no cooperation follows.
06Recipients
We do not share data with third parties for their own marketing. Trusted processors: Vercel (hosting and Vercel Analytics), Supabase (database and inquiry storage), Resend (e-mail delivery), n8n (automation and chatbot), Google (Google Workspace and Google Analytics), and Meta (marketing). Newsletter service provider (e.g. Resend) - sending newsletter messages.
07Transfer Outside EEA
Any transfer outside the EEA complies with GDPR Chapter V (Standard Contractual Clauses).
08Data Subject Rights
Right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to the supervisory authority.
Receive confirmation and a copy of your data.
Request correction of inaccurate data.
“Right to be forgotten”: deletion of your data.
Temporary restriction of processing.
Receive your data in a structured format.
Object to processing in specific situations.
Withdraw consent at any time.
Lodge a complaint with the supervisory authority (PUODO in Poland).
09Data Security
We use SSL/HTTPS encryption and appropriate organizational and technical measures to protect your data.
10Cookie Policy
Cookie information is in the separate Cookie Policy, which complements this Privacy Policy.
11Policy Changes
This Policy may be updated. The new version will be published on this page.
12Contact
Questions about this Policy: info@rmfsolutions.ai.
13Newsletter
As part of the newsletter service, we process your e-mail address and, optionally, your first name. We process this data to provide the newsletter service (Art. 6(1)(b) GDPR) and for our own marketing purposes, which constitutes our legitimate interest (Art. 6(1)(f) GDPR), or on the basis of consent given (Art. 6(1)(a) GDPR). We confirm sign-up using a double opt-in model, by clicking the activation link in the message. We process the data until you unsubscribe from the newsletter or object to processing. For sending, we use a newsletter service provider (e.g. Resend), which processes the data as a processor.
Policy effective from 11 June 2026 (version 1.1)