Privacy Policy

Privacy and Cookies Policy

Version dated June 30, 2026

Since you are visiting our website at www.rococopoland.eu, we process your personal data. We also process your personal data when you visit social media profiles related to our business, such as on Facebook and Instagram.

In addition, we process your personal data when you use the services we provide.

Below, we describe:

  • how we process your personal data on the Website, on social media profiles, and in connection with the provision of services,
  • how we use cookies.

I. PRINCIPLES OF PERSONAL DATA PROCESSING

We ensure that your personal data is secure. In this regard, we operate in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and other applicable regulations.

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The controller of your personal data is ROCOCO POLAND sp. z o.o., with its registered office in Łódź, at ul. Ogrodowa 8, 91-062 Łódź, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0001148999, REGON: 540629530, NIP: 7272885364.

WHY AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?

Website

When you use the Website, you provide personal data such as information about the device you are using, your country of origin, the web browser you are using, or your IP address.

We use this data to ensure that the content on the Website is displayed correctly, to ensure security and to resolve any technical issues, to monitor and analyze traffic on the Website, and to conduct marketing activities (Article 6(1)(f) of the GDPR).

The data will be processed for the duration of your visit to the Website and for as long as the cookies used on the Website remain stored on your device.

Email Contact

When you contact us via email or the contact form, you provide us with your email address. Providing this data is voluntary but necessary to establish contact.

You may also include other personal data in the body of your message.

We use this data to establish and maintain contact, based on your consent resulting from your initiation of contact (Article 6(1)(a) of the GDPR).

The data will be processed for the duration of our contact. Once contact has ended, the data will be archived and retained to defend against potential claims, in particular to demonstrate that you have given your consent.

Newsletter

When you subscribe to the newsletter, you provide us with your first name, last name, and email address. Providing this information is voluntary but necessary to subscribe to the newsletter.

We use this data to send the newsletter, based on the consent you provided when subscribing (Article 6(1)(a) of the GDPR).

The data will be processed for as long as the newsletter is active. You can unsubscribe at any time. In this case, the data will not be deleted from the database but will continue to be stored in the mailing system to defend against any potential claims related to the sending of the newsletter—in particular, to demonstrate that you gave your consent—until the statute of limitations for claims arising from the concluded contract expires.

Social Media Profiles

We may process your personal data in connection with our social media profiles (e.g., on Facebook, Instagram). This includes data such as your first name, last name, username, image, the content of your comments, or information you send via chat. We process the data of individuals who have subscribed to our fan page by clicking the “Like” or “Follow” button, used the chat feature, or posted a comment under a post on the fan page.

We obtain this data from the platform owner (e.g., Meta Platforms Ireland Ltd.) and from your public profile on the respective online platform.

We use this data to administer and manage our social media profiles, communicate with you, and deliver marketing content to you (Article 6(1)(f) of the GDPR).

The data will be processed for as long as you maintain an account on the respective platform or until you object to such processing.

Please note that the terms of use for a specific platform and the processing of personal data within that platform are determined by the entity managing that platform (e.g., Meta Platforms Ireland Limited in the case of Facebook and Instagram). Be sure to review these terms.

Additionally, pursuant to Article 6(1)(f) of the GDPR, we may process your personal data for the following purposes:

  • establishing, pursuing, or defending against claims,
  • archival and statistical purposes,
  • conducting surveys on satisfaction with the services we offer,
  • contacting you to present offers and for direct marketing.

HOW LONG DO WE PROCESS YOUR PERSONAL DATA?

We process your data for as long as necessary to achieve a specific purpose and:

  • for the period during which claims are time-barred in accordance with the provisions of the Code of Civil Procedure (3 or 6 years),
  • for the period required by tax law—with respect to personal data related to the fulfillment of tax law obligations,
  • until an objection is effectively filed—with respect to personal data processed on the basis of the controller’s legitimate interest or for marketing purposes,
  • until consent is withdrawn or the purpose of processing is achieved—with respect to personal data processed on the basis of consent,
  • until the data becomes outdated or loses its usefulness—with respect to personal data processed primarily for analytical and statistical purposes, the use of cookies, and the administration of the Website.

After this period, the data will be permanently deleted or destroyed.

TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA?

We may disclose your personal data to our trusted partners, such as a software provider, payment processor, accounting firm, hosting provider, marketing service provider, and statistics service provider.

These are, in particular, entities that provide us with the following services: a reservation system (www.bookero.pl), an online payment platform (Tpay), accounting services (Agnieszka Stala FHU Inter Stimm, Fakturownia sp. z o.o.), hosting (cyber_Folks), a course management system (WEB TO LEARN sp. z o.o.), a newsletter provider, Zoom, Google, and software development companies (Safi Studio, Rise Up Team sp. z o.o.).

All entities to which we entrust the processing of personal data guarantee the implementation of appropriate measures to protect and secure personal data as required by law.

The Website may contain links to other websites. We are not responsible for the content provided by those websites. Be sure to review the privacy policies or terms of use of those websites.

To ensure the highest quality of service, we use the services of other providers, such as for IT support. Consequently, your personal data may be transferred outside the European Union. In such cases, the transfer will be based on an appropriate agreement containing standard data protection clauses adopted by the European Commission, or on the basis of a relevant decision by the European Commission.

WHAT ARE YOUR RIGHTS?

Since we process your personal data, you have certain rights under the GDPR. Please note that you may exercise some of these rights only in specific situations.

In general, you may:

  • request information about what personal data we process about you and how we do so (the so-called right of access),
  • request that your data be corrected if it becomes outdated, incomplete, or otherwise inaccurate,
  • request that your data be deleted if you believe that we should no longer store your personal data (in certain cases, we may refuse to delete the data),
  • request the restriction of the processing of your data (in the situations described in Article 18 of the GDPR),
  • request the transfer of your data to another controller (you have this right if you have entered into a contract with us or have given separate consent to the processing of personal data),
  • withdraw your consent at any time to the processing of data that we process based on your consent,
  • object to the processing of data that we process based on our legitimate interest,
  • file a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates the provisions of the GDPR.

WILL YOUR PERSONAL DATA BE PROFILED?

In order to create your profile for marketing purposes and to deliver direct marketing to you (e.g., ads on Facebook) tailored to your preferences, we may process your personal data in an automated manner, including profiling. This will not result in any legal effects on you nor will it otherwise significantly affect your situation.

The legal basis for processing personal data for the above purpose is Article 6(1)(f) of the GDPR, pursuant to which the controller may process personal data to pursue its legitimate interests, in this case, conducting marketing activities tailored to the preferences of its audience.

We will process your personal data for profiling purposes until you effectively object or until the purpose of the processing is achieved.

COOKIES

When you first visit the Website, you will see a notice regarding the use of cookies. By accepting and closing this notice, you consent to the use of cookies in accordance with the provisions of this Privacy Policy. You may withdraw your consent at any time by deleting cookies and changing your browser’s cookie settings. Please note, however, that disabling cookies may make it difficult to use this Website, as well as many other websites that use cookies.

Cookies are small files stored on your device. They enable the proper display of the Website, allow you to use all of its features, and enable us to track statistics regarding visits to the Website. Additionally, cookies allow us to remember your visits to the Website.

Cookies do not cause any configuration changes to your device or the software installed on it. You can read more about how cookies work at http://www.allaboutcookies.org or http://wszystkoociasteczkach.pl.

Cookies are divided into session cookies and persistent cookies. Session cookies remain active for as long as you have the Website open; they are then deleted. Persistent cookies are stored even after you close the Website, and even after you close your browser or shut down your computer.

Cookies can also be categorized as first-party or third-party cookies. First-party cookies are primarily essential cookies that enable the Website to function properly and securely.

Since the Website displays content from social media platforms such as Facebook and Instagram, cookies from the owners of these platforms are used on the Website.

We may use analytics tools, such as Google Analytics or Meta Pixel, which collect anonymous information about your visits to the Website. Cookies related to these services are used for this purpose. and

Details about Google Analytics are available here: https://analytics.google.com/analytics/web/provision/?hl=pl#/provision

Details about Meta Pixel are available here: https://www.facebook.com/business/tools/meta-pixel