Privacy Policy

Last updated: 2024

This Privacy Policy explains how Ranabu ("we", "us", "our") processes personal data of visitors and users of our website. We are committed to protecting your privacy in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Ustawa o ochronie danych osobowych).

1. Data Controller

The data controller responsible for your personal data is:

Ranabu
Grojecka 71
01-485 Warszawa, Poland
Email: [email protected]
Phone: +48 22 525 52 54

2. What Personal Data We Collect

Ranabu operates a platform providing home improvement and repair advice. We collect personal data primarily through the contact and inquiry form available on our website. Depending on how you use the form, the data we collect may include:

Your name;
Your email address;
Your phone number, if you choose to provide it;
The content of your message or inquiry, including any details about your home improvement or repair question.

We do not require you to submit any special categories of personal data (as defined in Article 9 GDPR), and we ask that you refrain from including such information in your messages.

3. Purpose and Legal Basis for Processing

Purpose	Legal Basis
Responding to your inquiry submitted via the contact form	Performance of a contract or steps prior to entering into a contract (Article 6(1)(b) GDPR), or legitimate interest in providing customer service (Article 6(1)(f) GDPR)
Storing your consent choice regarding cookies	Your consent (Article 6(1)(a) GDPR)
Advertising measurement on the confirmation page	Your consent, given prior to activation (Article 6(1)(a) GDPR)
Compliance with legal obligations, if applicable (e.g. accounting or archiving requirements)	Legal obligation (Article 6(1)(c) GDPR)

4. Cookies

Our website uses a single cookie, named privacy_choice, which stores your consent preference for a period of one year. This cookie does not track your browsing behavior across other websites and is used solely to remember the choice you made regarding data processing consent on our site.

We do not use any analytics, tracking, or statistical cookies. We do not deploy Google Analytics, Yandex Metrica, VK Pixel, or any similar third-party analytics tools. We do not set session cookies or CSRF-protection cookies beyond what is strictly necessary for the basic technical operation of the site.

Advertising measurement tools operate exclusively after you have given explicit consent, and only on the confirmation page displayed after you submit the contact form. No advertising measurement occurs elsewhere on the site or before consent has been granted.

5. Data Retention

Personal data submitted through our contact form is retained only for as long as necessary to respond to your inquiry and to handle any related follow-up communication, typically not exceeding 24 months from your last contact with us, unless a longer retention period is required by applicable law (for example, tax or accounting regulations).

The privacy_choice cookie is stored on your device for one year from the date it is set, after which your consent choice will need to be renewed.

6. Data Recipients

We do not sell or rent your personal data to third parties. Your personal data may be shared with:

Providers of hosting and IT infrastructure services who process data on our behalf under data processing agreements;
Advertising measurement service providers, but only after your explicit consent has been given on the confirmation page;
Public authorities, where disclosure is required by Polish or European Union law.

7. International Data Transfers

Where any data processor engaged by us is located outside the European Economic Area, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 GDPR.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access – to obtain confirmation of whether we process your data and to receive a copy of it;
Right to rectification – to correct inaccurate or incomplete data;
Right to erasure – to request deletion of your data ("right to be forgotten"), subject to legal exceptions;
Right to restriction of processing – to limit how we use your data in certain circumstances;
Right to data portability – to receive your data in a structured, machine-readable format;
Right to object – to object to processing based on legitimate interest;
Right to withdraw consent – at any time, without affecting the lawfulness of prior processing;
Right to lodge a complaint – with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), if you believe your data has been processed unlawfully.

9. How to Exercise Your Rights

To exercise any of the rights described above, or if you have any questions about this Privacy Policy or our data processing practices, please contact us at:

Email: [email protected]
Phone: +48 22 525 52 54
Postal address: Ranabu, Grojecka 71, 01-485 Warszawa, Poland

We will respond to your request within one month of receipt, as required under Article 12 GDPR. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.