How we handle your data
This policy covers rmslightstudio.com - the website you are reading. It explains what we collect when you send us an enquiry or simply visit, why we are allowed to do it, how long we keep it, and what you can demand from us.
Draft - not yet in force. The text should be reviewed by a lawyer before this page goes live.
The processing described below has been verified against what the site actually does.
1. Who is responsible for your data
The controller of your personal data is:
Michał Biliński Konsultant .NET (sole proprietorship)
Osiedle Przyjaźń 116, 01-355 Warszawa, Poland
VAT ID: PL5222831715 · REGON: 147312613
For anything concerning your personal data, write to contact@rmslightstudio.com or call +48 453 102 666.
2. What we collect, and why
2.1 When you send the enquiry form
The form asks for the venue or company, a contact person, e-mail address, phone number, city, type of venue, the content of your message, the plan you are interested in and your planned start date. Required fields: contact person, e-mail address, phone number and message - everything else you may leave blank. To send the form you also have to accept this privacy policy.
Together with what you type, we record your IP address and the date and time of the submission. That is not for marketing: it is how the rate limit that keeps the form from being flooded works, and how we can show an enquiry was genuinely sent.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact and venue details from the form | Preparing and sending you a quote; answering your enquiry | Art. 6(1)(b) - steps taken at your request before entering into a contract |
| IP address, submission timestamp | Rate limiting, abuse prevention, proof the enquiry was made | Art. 6(1)(f) - our legitimate interest in a working, non-abused contact channel |
| Your consent to be contacted | Recorded so we can show you agreed | Art. 6(1)(c) - accountability under Art. 5(2) |
| Correspondence with customers | Handling the cooperation; establishing, pursuing or defending claims | Art. 6(1)(b) - performance of the contract; after it ends, Art. 6(1)(f) - our legitimate interest in establishing, pursuing or defending claims |
| Records needed for accounting, if you become a customer | Keeping accounting and tax records | Art. 6(1)(c) - our legal obligation under tax and accounting law |
You get an automatic e-mail confirming that your enquiry has reached us. Apart from the contact name, it does not repeat what you typed in the form, but you can reply to it directly.
2.2 When you just visit
Our web server writes a standard access log for every request: IP address, date and time, the address requested, the response code, the referring page and your browser's user-agent string. We use it to keep the site running and to spot attacks. Legal basis: Art. 6(1)(f) - our legitimate interest in the security and stability of our own service. These logs rotate automatically and old ones are overwritten.
2.3 Cookies
This site sets no cookies at all - none of our own, and none from anybody else. There is no analytics, no advertising and no tracking. That is why you are not being asked to accept anything.
The site stores nothing in your browser at all - no local storage, no session storage. Your language choice is simply part of the address you are on.
3. Who else sees your data
We do not sell your data and we do not share it for anyone else's marketing. It is handled only by the suppliers who make this site work:
- Website hosting. Hostinger runs the server that holds this website and your enquiry. They act only on our instructions.
- E-mail. SEOHOST.pl hosts our mailbox, which receives a copy of your enquiry, and delivers the notification and confirmation messages we send about it. They act only on our instructions.
That is the entire list. This site loads nothing from anybody else - the typefaces are served from our own server rather than from Google Fonts, so opening the page does not reveal your IP address to any third party.
We may also have to disclose data where the law obliges us to - for instance to a court or to a public authority acting within its powers.
4. Transfers outside the European Economic Area
The server that holds this website and your enquiry is operated by Hostinger in the United Kingdom. The United Kingdom is outside the European Economic Area, but the European Commission has recognised that it ensures an adequate level of protection for personal data (Art. 45 GDPR; the current decision is valid until 27 December 2031), so the transfer needs no additional safeguards. Our mailbox is hosted by SEOHOST.pl in Poland. We do not transfer your data to any other country, and there are no third-party services embedded in this site that could do so on our behalf.
5. How long we keep it
| What | How long |
|---|---|
| Enquiry sent through the form | 24 months from the day you sent it. The copy on our server is deleted automatically - a scheduled job removes anything older. The copy that reaches our mailbox follows the rules for e-mail correspondence below. |
| Server access logs | Until rotated out automatically - in practice weeks, not years |
| E-mail correspondence about an enquiry that did not lead to cooperation | 24 months from our last exchange |
| E-mail correspondence with customers | For as long as we work together, and then until claims arising from the cooperation become time-barred - as a rule 3 years, counted to the end of the calendar year (Art. 118 of the Polish Civil Code) |
| Records needed for accounting, if you become a customer | 5 years from the end of the tax year, as Polish law requires |
When a period ends, the data is deleted or irreversibly anonymised.
6. Your rights
Under the GDPR you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything inaccurate or incomplete;
- delete your data, where we have no overriding reason to keep it;
- restrict what we do with it while a dispute is resolved;
- hand it over to you or another controller in a machine-readable form;
- stop processing based on legitimate interest - you can object at any time, and we must then stop unless we can show compelling grounds that override your interests.
Write to contact@rmslightstudio.com and we will answer within one month. Exercising any of these rights is free.
If you think we are handling your data unlawfully, you can lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
7. Is any of this required?
No. Sending the enquiry form is entirely voluntary. If you do send it, we need the contact person, the e-mail address, the phone number and the content of your message - without them we do not know who to reply to, where to send the quote or what you are asking about - and you have to accept this privacy policy.
We do not make automated decisions about you and we do not profile you.
8. Keeping your data safe
The site is served only over an encrypted connection (HTTPS). Enquiries are stored on a server with restricted access, in a file readable only by the service that receives them, and the form is protected against automated abuse. The public website runs as a separate service from our licensing systems, so a problem with one cannot reach the other.
9. Changes to this policy
If we change how we handle data, we will update this page and the date at the top. Where a change materially affects you and we have your address, we will tell you directly.