​GDPR – Privacy Policy

​1. Personal Data Controller The controller of personal data is:
RED PHOENIX INTERACTIVE Sp. z o.o., with its registered office in Sandomierz, 27-600,
email address: office@red-phoenix.eu
(hereinafter referred to as the “Controller”). 
2. Scope of Data Processing The website of RED PHOENIX INTERACTIVE Sp. z o.o. does not actively collect personal data of users through contact forms, account registration, or newsletters.
While using the website, only technical data may be processed, such as: IP address, browser type, operating system, date and time of access, and information stored in cookies. This data is processed solely for the purposes of:
proper functioning of the website, ensuring security, and conducting statistics. 
3. Legal Basis for Data Processing Data is processed on the basis of:
Article 6(1)(f) of the GDPR – the legitimate interest of the Controller consisting in ensuring the proper operation and security of the website,
Article 6(1)(a) of the GDPR – the user’s consent (with regard to cookies, if used). 
4. Data Recipients Data may be transferred only to entities providing technical services to the Controller, such as:
website hosting providers, IT service providers, and analytical tool providers (if used). Data is not transferred outside the European Union, unless technical service providers ensure compliance with the GDPR. 
5. Data Retention Period Technical data is stored for the period necessary for the proper functioning of the website, statistical purposes, and security, in accordance with applicable laws. 
6. Users’ Rights Every individual has the right to:
access their data, rectify it, request its deletion (the right to be forgotten),
restrict processing, object to processing, and lodge a complaint with the President of the Personal Data Protection Office. 
7. Cookies The website may use cookies for the purposes of:
proper operation, improving service quality, and statistical analysis. Users may manage cookies independently through their browser settings. 
8. Data Security The Controller applies appropriate technical and organizational measures to protect data against loss, unauthorized access, modification, or destruction. 
9. Changes to the Privacy Policy The Controller reserves the right to introduce changes to this Privacy Policy. The current version will always be available on the website.