This policy explains what data we process when you use rolv.pl, why we need it and how you can manage it. We also explain our use of cookies, analytics and advertising tools. You decide whether we may use technologies that are not strictly necessary for the website to function.
The controller of your personal data is ROLV Group Sp. z o.o., with its registered office at ul. Traktowa 6, 05-800 Pruszków, Poland, entered in the Polish National Court Register under KRS number 0000387535, tax identification number (NIP) 5342472319 and statistical identification number (REGON) 142955045. In this policy, we refer to the company as “ROLV”, “we”, “us” or “the controller”.
For matters relating to data protection or to exercise your rights, email rodo@rolv.pl or write to our registered office.
This policy covers rolv.pl, communications sent through the forms and contact details provided on the website, and job applications submitted to ROLV Group. The website presents our business and enables you to contact us. It does not offer customer accounts, a shopping cart or online sales.
Online stores, retail locations and other websites we link to may have their own controllers and separate privacy notices. Simply displaying information about a company in our group does not mean that we automatically share form submissions with that company.
We process the information you provide, such as your name, email address, telephone number, company name, job title, message content and attachments. We use it to respond, prepare a proposal and handle correspondence.
The legal basis is our legitimate interest in handling enquiries and business communications under Article 6(1)(f) of the General Data Protection Regulation (GDPR). Where we take steps at your request before entering into a contract to which you will be a party, the legal basis is Article 6(1)(b) GDPR. For individuals acting on behalf of a company, the legal basis for handling communications remains Article 6(1)(f) GDPR.
Providing your data is voluntary. However, without contact details or the information needed to handle your enquiry, we may be unable to respond. Sending an enquiry does not constitute consent to receive a newsletter or unrelated marketing communications.
If you apply to work with ROLV Group, we process the information needed to assess your application. We process data required by employment law under Article 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code. Steps necessary to enter into a contract at your request, including recruitment for engagements under civil-law contracts, are based on Article 6(1)(b) GDPR.
We process additional ordinary personal data that you voluntarily provide on your own initiative on the basis of consent, under Article 6(1)(a) GDPR and the applicable provisions of employment law. Consideration for future recruitment requires separate, voluntary consent. Please do not submit special categories of personal data, such as health information, unless needed. Processing such data requires a separate condition under Article 9 GDPR and, where that condition is consent, the consent must be explicit.
Failure to provide information required for recruitment may prevent us from assessing your application. Refusing or withdrawing consent for additional data or future recruitment does not adversely affect consideration of your application in the current recruitment process.
When you visit the website, its infrastructure processes technical data, including your IP address, the date and time of a request, the requested page address, browser and operating system information, and error messages. We use this information to serve the website, diagnose problems and protect against misuse. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in the website’s availability and security.
After obtaining the relevant consent, we process online identifiers and information about website usage to compile statistics, measure advertising performance and tailor advertisements. The legal basis for processing personal data is Article 6(1)(a) GDPR. Sections 5 and 6 provide further details.
We process data needed to handle data protection requests and demonstrate that consent was properly obtained under Article 6(1)(c) GDPR, in connection with our obligations under, among others, Articles 5(2), 7(1) and 12–22 GDPR. We process data necessary to establish, exercise or defend legal claims under Article 6(1)(f) GDPR, reflecting our legitimate interest in protecting our rights.
Our website is hosted on Webflow, a platform provided by Webflow, Inc., based in the United States. Webflow and its subprocessors provide hosting infrastructure, content delivery and form processing. In doing so, they may process technical data associated with your visit and information submitted through forms.
Form submissions are received by our enquiry and correspondence management systems. Access is available to people authorised to handle your enquiry and service providers acting on our behalf within the relevant scope.
Using Webflow hosting does not in itself constitute consent to analytics or advertising. Whether a technology requires consent depends on its actual purpose. Section 9 explains transfers outside the European Economic Area. Further information is available in Webflow’s privacy policy and Webflow’s list of subprocessors.
Cookies are small files stored in your browser. Browser local storage, pixels and other identifiers may perform similar functions. The rules below also apply to these technologies.
Storing information on your device or accessing information already stored on it is governed by Article 399 of the Polish Electronic Communications Law of 12 July 2024. We activate technologies that are not strictly necessary only after obtaining your prior consent. The exception applies to technologies necessary to transmit a communication or provide a service you have requested.
We use Cookie Script, provided by Objectis, UAB, based in Lithuania, to manage your choices. The tool displays the consent panel, records your decisions and lets you change them. For this purpose, it may process a consent identifier, the date and scope of consent, and technical data needed to document your choice. See Cookie Script’s privacy policy for further information.
In the panel, you can accept all optional categories, reject them or select individual purposes. Optional consent choices are not preselected. Simply browsing or scrolling the website, or closing the notice, does not constitute consent.
You can change or withdraw consent at any time using the “Change cookie settings” button on this page or the cookie settings link in the footer. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. Refusing consent does not prevent access to the website’s basic content or stop you from contacting us.
A detailed inventory of technologies, including their names, providers or domains, purposes and storage periods, is available in the details section of the Cookie Script panel. The inventory reflects the website’s current configuration. Session cookies expire at the end of a session, while persistent cookies expire after a specified period or when deleted.
You can also delete or block cookies in your browser settings. Deleting files alone does not replace changing your consent in the panel and may cause the consent prompt to appear again. Your settings apply to the particular browser and device.
We use Google services provided in our region by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC in the United States and other Google entities may also be involved in providing these services.
GA4 helps us measure visits and improve our website. After you give analytics consent, it may process a browser identifier, pages visited, events and engagement time, traffic sources, device information and approximate location. This information may constitute personal data even if it does not contain your name.
We do not send message content or contact details entered in forms to GA4. Analytics consent does not in itself constitute consent to personalised advertising.
We use Google Ads to assess campaign performance, for example to determine whether a visitor submitted an enquiry after clicking an advertisement. Depending on the consent given, we may also create audiences and display advertisements tailored to previous interest in our website (remarketing).
For these purposes, cookie and ad-click identifiers and information about pages visited and actions taken may be processed. Sending data for advertising purposes and personalising advertisements require the relevant scope of consent. We do not send message content or contact details from forms to Google Ads.
Our configuration keeps analytics and advertising tags blocked until the relevant consent is obtained. Without that consent, we do not use those tags to send measurements, including measurements without cookies. Changes made in the panel are reflected in the subsequent operation of these tools.
Google may also process some data for its own purposes, in accordance with the terms of the relevant service and the consent given. Further information is available in how Google uses data from websites and apps and Google’s privacy policy. You can also manage your Google advertising preferences in My Ad Center.
Where processing is based on consent, withdrawing it ends further processing for that purpose, unless a separate legal basis allows us to retain a limited set of data. We handle objections as explained below.
To the extent necessary for the relevant purposes, recipients may include:
Providers acting on our behalf process data under appropriate agreements. Where a recipient independently determines its own purposes of processing, it acts as a separate controller. We do not sell personal data.
Using Webflow, Google and their infrastructure may involve transferring data outside the European Economic Area (EEA), particularly to the United States. This also applies to technical data and information submitted through forms, not only to cookies.
We rely on an appropriate transfer mechanism under Chapter V GDPR: a European Commission adequacy decision or standard contractual clauses and, where needed, supplementary safeguards.
For transfers to the United States, the adequacy decision concerning the EU–US Data Privacy Framework can be relied upon only for a recipient with a valid certification and for transfers within the scope of that framework. Webflow’s data processing terms provide for this mechanism where applicable, and for standard contractual clauses for other relevant transfers. Google also describes its transfer mechanisms in its documentation.
You can request information about the safeguards used and a copy of them by emailing rodo@rolv.pl. Provider documentation is available in Webflow’s data processing terms and Google’s data transfer frameworks.
Subject to the conditions set out in the GDPR, you may:
You can submit a request to rodo@rolv.pl. We respond without undue delay, normally within one month. Where permitted by the GDPR, this period may be extended by a further two months; we will inform you of the extension and its reasons within the first month. If we have reasonable doubts about the identity of the person making a request, we may ask for information necessary to confirm their identity.
After you give the relevant advertising consent, information about your activity may be used to assign your browser to an audience, such as people interested in a particular service, and to tailor advertisements. This is a form of marketing profiling. You can opt out by changing your cookie settings, withdrawing consent or objecting to direct marketing.
For the processing described in this policy, we do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.
We select data protection measures appropriate to the nature of the processing and the risks involved, including restricting access to people who need it for their duties. Please submit only information necessary to handle your enquiry through our forms.
We update this policy when our processing activities, tools or applicable laws change. The date of the latest update is shown at the beginning of this document. If a change requires fresh consent, we will ask for it before starting the new processing.
Questions about this policy or about your data? Write to rodo@rolv.pl or use our contact form.
