This document (the "Policy") contains information on the processing of personal data of the users of the website available at https://rockandbold.vc/ (the "Website"), as required by the General Data Protection Regulation (the "GDPR").

Personal data are any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

The controller of personal data provided by users of the Website (the "Users" or "you") is owned by Romain Rebour Glokal indywidualna działalność gospodarcza, having its legal seat in Krakow, address: ul. Józefa Wybickiego 44A/51, 31-302 Kraków, Poland, entered into the commercial register REGON number: 383758125, having tax identity number (NIP) 6772445030 ("Rock&Bold"). You can contact us via e-mail: romain.rebour@rockandbold.vc, or by writing to the address indicated above.

Rock&Bold cares about your privacy and protects your personal data. We have implemented both technical and organisational measures to ensure a high level of security of the processing of data, as required by the GDPR.

Purpose and Legal Basis of Personal Data Processing

Your personal data are collected by Rock&Bold if you fill out the contact form available on the Website in order to contact us (tab "Contact Us"), if you send us an e-mail, or if you subscribe to our newsletter through the Website.

We process the data in order to reply to your message or to send you our newsletter if you subscribed to it. The legal basis for processing personal data submitted via the contact form or email inquiries is Article 6.1(f) of the GDPR (legitimate interest), as our legitimate interest consists in being able to respond to Users' messages and provide business-related information.

For newsletter subscriptions, we process personal data based on Article 6.1(a) GDPR (consent). When subscribing to our newsletter, you will be required to provide explicit consent, which you can withdraw at any time.

Your personal data will not be subject to automated decision-making, including profiling.

Of course, you are not legally required to provide us with your personal data; however, without it, you will not be able to submit your message through the contact form or subscribe to our newsletter. Also, if you send us an e-mail, you will typically provide us with your basic personal data, such as your name and e-mail address, which will be needed for us to respond.

Recipients of Personal Data

We do not share your data with any third parties except a host service and cloud storage provider and also, in the case of Users who signed up for our newsletter, a mass mailing service provider. Those entities process the data for us and are bound to ensure the highest levels of security of the data.

We have Data Processing Agreements (DPAs) in place with these service providers, ensuring compliance with GDPR requirements and protecting your personal data.

We will not send your personal data to any third countries (i.e., countries outside the European Economic Area) nor to international organisations.

Period for Which Personal Data Will Be Stored

We plan to store your personal data sent via the contact form for a period of up to 12 months from the last communication or, in the case of processing for the purposes of providing you with our newsletter, until you unsubscribe or withdraw your consent.

However, a longer period of time may sometimes stem from the statute of limitations on possible claims.

Cookies & Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance user experience and analyze traffic. Cookies may be necessary for website functionality, while others may be used for analytics or marketing purposes.

We may use third-party services, such as Google Analytics, to collect anonymous data about user interactions. You can manage your cookie preferences through your browser settings or opt-out of tracking where applicable.

Your Rights Connected with Processing of Personal Data

As a result of the processing of your personal data, you have a number of rights granted to you by the GDPR:

• Right of access – You can request information regarding the processing of your personal data and obtain a copy of it.
• Right to rectification – If your data are inaccurate or incomplete, you can require that they be corrected.
• Right to erasure – You can request deletion of your data when they are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing – You can request to limit the processing of your data in specific circumstances.
• Right to object – You can object to the processing of your personal data based on our legitimate interests.
• Right to withdraw consent – If we process your data based on consent (e.g., for newsletters), you can withdraw your consent at any time.

In order to exercise your rights related to personal data, contact us via the e-mail indicated above.

This Privacy Policy was last updated on 21.02.2025. We reserve the right to update this policy as necessary to comply with legal requirements or business changes. We encourage you to review this page periodically for any updates.