Privacy notice

The controller of personal data processed in connection with operating DirectRabat is Orkun Erol, an individual. For privacy enquiries and rights requests, contact kontakt@directrabat.pl.

There are no visitor accounts, newsletter, contact form or purchasing facilities. Google Analytics, advertising pixels and affiliate tracking have not been installed. Search, language selection and filters operate in browser memory; the website code does not save them in cookies or localStorage.

When you open a page, hosting and security provider Cloudflare may process your IP address, request date and time, page address, browser information and security events. This supports page delivery, security and fault diagnosis. The basis is the controller’s legitimate interest in maintaining a secure, functioning website (GDPR Article 6(1)(f)). Where Cloudflare security features are applied, necessary technical mechanisms, including cookies, may operate.

If you email us, we process your address, message and information you voluntarily provide to respond and handle your enquiry. The basis is our legitimate interest in correspondence (Article 6(1)(f)), or Article 6(1)(b) for steps you request before entering a contract. Providing data is voluntary, but we need a contact address to reply.

We use Cloudflare for hosting, DNS and security, and OVHcloud/Zimbra for email. Authorised people managing the website and service providers may access data as necessary to provide their services. Data may be disclosed to competent authorities where legally required. Provider information: Cloudflare and OVHcloud.

Cloudflare operates globally, so technical data may also be processed outside the European Economic Area. Where required, appropriate transfer mechanisms apply, such as an adequacy decision or standard contractual clauses. Contact the controller for information about transfer mechanisms and safeguards. We do not claim all website data remains exclusively within the EU.

Correspondence is kept as needed to handle the enquiry and normally for no longer than 12 months after closure. Where needed for contracts, legal duties, or establishing and defending claims, a longer period may apply according to those purposes and applicable time limits. Technical data retention depends on the services and provider settings in use; we do not maintain our own archive of individual visits or advertising profiles.

Subject to applicable conditions, you can request access, correction, erasure and restriction, and data portability where applicable. You may object to processing based on legitimate interests on grounds relating to your particular situation. You can complain to the Polish supervisory authority, the President of UODO: uodo.gov.pl. We do not make solely automated decisions about visitors with legal or similarly significant effects.

Before adding analytics, forms, a newsletter or affiliate tracking, we will update this notice and obtain consent where required. This version covers the demonstration catalogue and email contact.