Privacy policy

Who we are

Mark Spasonov Insights, trading as RSOD, is the controller of the personal data described here.

• Address: ul. Żupnicza 30A, 03-821 Warsaw, Poland
• NIP: 5273081833
• REGON: 526756647
• Email: contact@rsod.solutions

What we collect

If you write to us — through the form on this site or by emailing contact@rsod.solutions — we collect your name, your email address, your company name if you give one, and whatever you write in the message.

Our host also keeps standard server logs, including IP addresses, so the site stays up and secure. We do not use those logs to follow you around.

We do not use tracking cookies, analytics or advertising pixels on this site. If that ever changes, we will ask for your consent first.

Do you have to give us this?

No. Nothing on this site is required of you by law or by a contract, and you are under no obligation to write to us at all.

The form asks for a name, an email address and a message because without them there is nothing to answer and nowhere to send the answer — that is the only consequence of leaving them out. The company field is optional; leave it empty if you prefer. The marketing box is optional too, and ticking it is never a condition of getting a reply.

Why we use it, and on what legal basis

• To answer you. This is the whole point of writing to us. The legal basis is Article 6(1)(b) GDPR — steps taken at your request before any agreement between us.
• To keep the conversation. We keep your message and our reply so we can pick the thread back up. The legal basis is Article 6(1)(f) — our legitimate interest in running a business conversation properly.
• To keep the site working and secure. That is what the server logs are for. The legal basis is Article 6(1)(f) again — see Recital 49.
• To email you later about our services — only if you ticked the optional box on the form. The legal basis is your consent, Article 6(1)(a). You can withdraw it at any time, and withdrawing does not affect anything we sent before you did.

Your right to object

Where we rely on legitimate interest, you can object at any time — just tell us. We will stop unless we have a compelling reason not to, and we will explain it if so. This is your right under Article 21 GDPR.

Who else sees it

We are a two-person firm and we do not sell or share your data. To run the site and the inbox, we use:

• Notion Labs, Inc. — stores the message you send
• Vercel Inc. — hosts the site and runs the form endpoint
• Google LLC — our email

Notion and Google act on our instructions under a data processing agreement. Our host, Vercel, processes data under its published terms. All three are certified under the EU-US Data Privacy Framework; where the Framework does not apply, transfers to the United States run on the EU Standard Contractual Clauses.

How long we keep it

We keep your message and contact details for 24 months after our last contact with you. Business conversations in our field run long, and a lead that goes quiet is often still a live conversation. After that we delete them.

Two exceptions: if we end up working together, contract and tax records are kept for the periods Polish law requires; and if you gave marketing consent, we keep that consent record for as long as the consent is active, plus the period we may need to prove it was given.

You can ask us to delete your data earlier, and we will.

Your rights

You can ask us to show you the data we hold, correct it, delete it, limit what we do with it, or send it to you in a portable format. Write to contact@rsod.solutions and we will answer.

Complaints

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw.

Automated decisions

We do not make automated decisions about you and we do not profile you.

Changes

If this policy changes, the new version goes up on this page with a new date.