RS-CONCEPT
Last updated: 12 September 2026
1. Who we are (controller)
The controller of personal data is RS Concept (business activity of RS Export Service), with office at ul. Wiejska 5A/14, 18-400 Łomża, Poland, NIP 7182140896.
Contact: info@rs-concept.pl · +48 572 800 892 https://www.rs-concept.pl/
This policy explains how we process personal data when you use our website or contact us about B2B supply of windows and doors of Polish production.
2. What data we process
Depending on how you contact us, we may process:
• identity and contact data (name, company, role, email, phone, address);
• enquiry / project data (opening sizes, drawings, product interest, message content);
• technical data from the website (IP address, browser type, device, pages viewed, approximate location derived from IP) via cookies or similar technologies, if used;
• communication records (emails, form submissions).
We do not require you to create a consumer account to browse the site. We do not sell personal data.
3. Purposes and legal bases (GDPR / RODO)
Respond to enquiries and prepare quotations — GDPR Art. 6(1)(b) (steps prior to a contract) and/or Art. 6(1)(f) (legitimate interest in B2B communication).
• Perform a contract / order if you become a client Art. 6(1)(b).
• Site security, diagnostics, basic analytics — Art. 6(1)(f) (legitimate interest in a secure, working website).
• Optional B2B newsletters / product updates (only if you opt in) — Art. 6(1)(a) consent; you may withdraw anytime.
• Legal, tax and accounting obligations — Art. 6(1)(c).
4. Who receives data
We may share data with:
• IT / hosting / email providers acting on our instructions (processors);
• logistics or production partners only as needed to prepare or fulfil a quote/order;
• professional advisers (e.g. accountant, lawyer) under confidentiality;
• public authorities when required by law.
We do not use your enquiry data to buy advertising audiences or to sell lists.
5. Transfers outside the EEA
We aim to store and process data in the EEA. If a tool transfers data outside the EEA, we use appropriate safeguards (e.g. EU Standard Contractual Clauses) where required.
6. Retention
• Enquiry / quote correspondence: for the sales cycle and then up to 24 months of inactivity, unless a longer period is needed for a dispute or legal claim.
• Contract / invoice data: for periods required by Polish tax and accounting law.
• Marketing (if consented): until you unsubscribe or withdraw consent.
Server / security logs: typically up to 12 months, unless needed longer for security incidents.
7. Your rights
You may request: access, rectification, erasure, restriction, data portability (where applicable), and objection to processing based on legitimate interest. Where we rely on consent, you may withdraw it at any time without affecting prior lawful processing.
To exercise rights: email info@rs-concept.pl (subject: RODO / GDPR”).
You may lodge a complaint with the Polish supervisory authority UODO (https://uodo.gov.pl/) or another EU supervisory authority where you live or work.
8. Cookies
We may use necessary cookies for the site to function. If we use analytics or marketing cookies, we will show a cookie notice and, where required, ask for consent. You can control cookies in your browser settings.
9. Children
Our site and services are directed to professional / B2B users, not to children.
10. Changes
We may update this policy. The “Last updated” date will change; material changes may also be noted on this page.
11. Contact
Questions about privacy: info@rs-concept.pl · +48 572 800 892 · ul. Wiejska 5A/14, 18-400 omża, Poland.