Privacy policy

This document describes what personal data we process in connection with your use of the rail-tech.pl website and its contact form, for what purpose, and what rights you have.

Last updated: Jul 20, 2026

1. Data controller

The controller of your personal data is Rail-Tech, with its registered office at: Lawendowe Wzgórze 46/4, 80-175 Gdańsk, Poland (the "Controller").

For matters concerning the protection of personal data, you can contact us at info@rail-tech.pl or by phone at +48 601 369 474.

2. What data we process

We process the data you provide to us voluntarily when contacting us:

• the email address entered in the contact form,
• the content of your request — the description of the problem and supporting information (the selected application type, stage, organization scale),
• data contained in email correspondence, if you write to us directly.

For security purposes and to limit abuse (e.g. spam), we also temporarily process the IP address of the device submitting the form. This data is used solely to control the frequency of submissions and is not linked to your identity.

3. Purpose and legal basis of processing

• Handling a request submitted through the form or by email and providing a reply — under Article 6(1)(b) GDPR (taking steps at your request prior to a possible contract) and Article 6(1)(f) GDPR (our legitimate interest in conducting correspondence and business contact).
• Ensuring the security of the website and limiting abuse (a honeypot mechanism, limiting the number of submissions) — under Article 6(1)(f) GDPR.

4. Data recipients

We entrust data to trusted service providers who process it solely on our behalf and in accordance with our instructions:

• Vercel Inc. — the provider of the website hosting and the environment running our server functions,
• Resend — the email delivery provider through which your request is delivered to our inbox,
• Google Ireland Limited — the provider of Google Analytics 4 (visit statistics), activated only after you consent to the analytics category.

Some of these providers may process data outside the European Economic Area. In such cases, the transfer is based on the appropriate safeguards provided for by the GDPR (e.g. standard contractual clauses).

5. Retention period

We keep correspondence and form data for as long as needed to handle the request, and then for the period resulting from our legitimate interest (including the ability to demonstrate the course of contact and to defend against claims). After that period, the data is deleted or anonymized. Technical data used to limit submissions is processed temporarily and is not permanently stored.

6. Your rights

In connection with the processing of your data, you have the following rights:

• access to the data and obtaining a copy of it,
• rectification (correction) of the data,
• erasure of the data,
• restriction of processing,
• objection to processing based on a legitimate interest,
• data portability,
• lodging a complaint with the President of the Polish Personal Data Protection Office (PUODO).

To exercise the rights above, write to us at info@rail-tech.pl.

7. Voluntary provision of data

Providing data is voluntary but necessary to accept your request and provide a reply. Without your email address, we will not be able to contact you.

8. Cookies and local storage

The website uses a cookie consent management mechanism. Your consent choices are stored only locally in your browser (localStorage), so that we do not ask about them again.

After you consent to the analytics category, we activate Google Analytics 4, which stores cookies (including _ga and _ga_*) to produce anonymous visit statistics. The data is pseudonymized and is not used for profiling or for identifying you. Without your consent, the tool is not loaded at all. Withdrawing consent stops the measurement and removes the Google Analytics cookies. We do not use marketing tools or advertising profiling.

You can change your consent at any time — use the "Cookies" button in the footer of the home page.

9. Changes to this policy

We may update this policy, e.g. in connection with changes in the law or in the scope of the services we provide. The current version is always available on this page, together with the date of the last update.

10. Contact

For matters related to the protection of personal data and this policy, contact us at info@rail-tech.pl.