This policy explains what personal data we process when you use redmoon.com.pl, why we process it, who receives it and what rights you have.
1. Data controller
The data controller is Redmoon Security sp. z o.o., ul. Kilińskiego 92, 42-218 Częstochowa, Poland, NIP 5732971645, REGON 544355710, KRS 0001231844.
For matters concerning personal data, write to security@redmoon.com.pl or call +48 604 785 773.
2. Purposes, data and legal bases
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Handling an inquiry from the NIS2/KSC opinion form | Full name, company, email, phone, description of operations, description of your concern. If you provide them: number of employees, revenue or balance sheet total, corporate group membership, preferred call date. Also the page language and UTM parameters from the address, which show the source of the visit. | Consent to being contacted (Art. 6(1)(a) GDPR) and our legitimate interest in answering a company's inquiry (Art. 6(1)(f) GDPR). If the inquiry concerns a contract to which you are a party: Art. 6(1)(b) GDPR. | Until the inquiry is handled, then for the limitation period of possible claims. Data processed on the basis of consent: until consent is withdrawn. |
| Email and phone contact | Data from your message or call, including your email address or phone number. | Legitimate interest in answering your message (Art. 6(1)(f) GDPR). | Until the matter is handled, then for the limitation period of possible claims. |
| Traffic statistics in Google Analytics 4, only after consent in the banner | Cookie identifiers, pages visited, events on the site (such as clicking a phone number or email address, or submitting a form), approximate location, device and browser data. | Consent (Art. 6(1)(a) GDPR). | User and event data in Google Analytics: 14 months. You can withdraw consent at any time. |
| Operating and securing the site | IP address and browser and request data, processed by the hosting provider and when Google Tag Manager loads. | Legitimate interest in operating and protecting the site (Art. 6(1)(f) GDPR). | For as long as needed to operate and protect the site, according to the service providers' settings. |
3. Cookies and browser storage
| Name | Purpose | Type | Retention |
|---|---|---|---|
| NEXT_LOCALE | Remembers the site language. | Essential | Until the browser session ends |
| cookie_consent, cookie_consent_date (browser storage) | Remembers your choice in the cookie banner. | Essential | Until browser data is cleared |
| _ga, _ga_* | Google Analytics 4: distinguishes users and sessions. | Analytics, only after consent | Up to 2 years |
You can change your choice at any time using the “Cookie settings” link in the site footer. When you withdraw consent, we remove Google Analytics cookies and stop measurement.
The site uses Google Tag Manager, a tool for managing tags. It loads on every visit, so Google then receives your IP address and browser data. Google Analytics starts only after you consent. Google signals and ad personalization are turned off.
Cloudflare, our hosting provider, may set technical cookies needed to protect the site.
4. Recipients of data
- Cloudflare: hosting and site protection.
- Resend: delivery of form messages to our mailbox.
- OVH (company email on Exchange, hosted in the EEA): storing correspondence.
- Google: Google Tag Manager and Google Analytics.
- Legal and accounting advisers when needed, and public authorities when the law requires it.
5. Transfers outside the European Economic Area
Cloudflare, Resend and Google may also process data outside the European Economic Area, including in the United States. Transfers rely on a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses. To get information about these safeguards, write to security@redmoon.com.pl.
6. Your rights
- Access to your data and a copy of it.
- Rectification, erasure or restriction of processing.
- Data portability, where we process data on the basis of consent or a contract.
- Objection to processing based on our legitimate interest.
- Withdrawal of consent at any time. This does not affect the lawfulness of processing before withdrawal.
- A complaint to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
To exercise your rights, write to security@redmoon.com.pl.
7. Do you have to provide data
Providing data is voluntary. Fields marked with an asterisk in the form are needed for us to answer your inquiry. Without them the form cannot be sent, but you can still write to us or call.
8. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that would have legal effects.
9. Changes to this policy
If our data processing rules change, we will update this page and the date at the top.