Privacy Policy of Riotters

Last updated

Who We Are

This policy explains how Riotters sp. z o.o. (“we”, “us”) handles personal data when you visit riotters.com (the “Site”), contact us or book a call. We are the controller of that data.

Riotters sp. z o.o.
Królowej Korony Polskiej 24/315, 70-486 Szczecin, Poland
NIP/VAT-UE: PL8522656985

For anything about your data, write to legal@riotters.com.

What We Collect and Why

Contact form

Your first name, last name, email address and message. They are sent to our mailbox by email (Google Workspace), so we can reply to your enquiry and, if you ask, prepare an offer. The legal basis is taking steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Voice memo (Music Tech)

Your voice recording, email address and optional note. They reach our mailbox as an email with the recording attached, for the same purpose and on the same legal basis as the contact form. The Site doesn’t store the recording; the microphone is used only while you record.

Booking a call

When you book a call, Calendly collects your name, email address and anything you add to the booking, and passes it to us to arrange and hold the call (Art. 6(1)(b) GDPR).

Cookies, analytics and advertising

With your consent (Art. 6(1)(a) GDPR), we use Google Analytics, Google Ads and FullContact, and Calendly’s popup on the Site. Without consent, none of them run. Our Cookies Policy lists each cookie, and Cookie settings in the footer changes or withdraws your consent at any time.

Visitor recognition (FullContact)

If you allow marketing cookies, FullContact, Inc. recognises your browser and may match your visit to a person or company profile it already holds. That can tell us who visited, such as a name, job title, company and business contact details. FullContact builds these profiles from its own sources, described in FullContact’s privacy policy. We use them to understand which companies are interested in our work. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in Cookie settings.

Security and server logs

When you use the Site, our hosting provider processes your IP address, browser details and the pages you request, to deliver the Site, keep it secure and stop spam in our forms (Vercel BotID). The legal basis is our legitimate interest in running a secure site (Art. 6(1)(f) GDPR).

Giving us your details is voluntary, but without an email address we can’t reply to you.

How Long We Keep It

  • Enquiries, voice memos and bookings: 12 months after our last contact with you, then we delete them. If a project follows, we keep them while it runs and then until any claims related to it are time-barred.
  • Visitor details from FullContact: 12 months after your visit.
  • Cookies: as listed in the Cookies Policy; your consent choice for 12 months.
  • Server logs: up to 30 days.

Who Receives It

We share data only with the providers that run the Site and our email, acting on our instructions:

  • Vercel Inc.: hosting, privacy-friendly analytics and form spam protection
  • Google Ireland Limited: email (Google Workspace)
  • Cloudinary Ltd.: delivery of the Site’s images and videos
  • Neon: the database behind the Site’s content
  • Calendly LLC: booking calls

With your consent, also Google Ireland Limited (Google Analytics, Google Ads) and FullContact, Inc., as described in the Cookies Policy. We don’t sell your data.

Transfers Outside the EEA

Some of these providers process data in the United States. Where data leaves the European Economic Area, it is protected by an adequacy decision, such as the EU–US Data Privacy Framework for certified providers, or by the European Commission’s Standard Contractual Clauses.

Your Rights

You have the right to:

  • access your data and get a copy of it
  • have it corrected or deleted
  • restrict how we use it, or object to uses based on our legitimate interest
  • take it with you (data portability)
  • withdraw your consent at any time, without affecting what we did before

To use any of them, write to legal@riotters.com. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

We don’t make decisions about you based solely on automated processing, including the visitor recognition described above.

Changes to This Policy

When how we handle data changes, we update this policy and the date above.