Privacy policy

Version effective from: 5 October 2026

1. Personal data controller

The controller of personal data processed through the rsqm.pl website is:

ResQ Mobilities Spółka z ograniczoną odpowiedzialnością al. Jana Pawła II 27 00-867 Warszawa KRS: 0001248371 NIP: 5273223782 REGON: 545052489

Contact email address for matters relating to personal data: biuro@rsqm.pl

In the remainder of this Policy, ResQ Mobilities Sp. z o.o. is referred to as the “Controller” or “ResQ Mobilities”.

2. Scope of the Policy

This Policy sets out the rules for processing the personal data of people using the rsqm.pl website, in particular people:

– contacting ResQ Mobilities using contact forms, – using the ambulance configurator, – using the funeral vehicle configurator, – submitting enquiries about medical equipment, – submitting specifications, documents or other attachments, – contacting ResQ Mobilities by email or telephone, – representing customers, prospective customers, suppliers or business partners.

3. What data we may process

Depending on the method of contact and the scope of the enquiry, we may process, in particular:

first and last name, company or entity name, email address, telephone number, message content, information about the selected vehicle, information about the selected configuration, information about equipment, number of vehicles or products ordered, expected completion date, information contained in submitted specifications and documents, technical data concerning use of the Website, in particular the IP address, device and browser information, and technical or security events.

Please do not provide personal data in forms or attachments that is not needed to prepare or handle the enquiry.

4. Purposes and legal bases of processing

Personal data may be processed for the following purposes:

a) Handling enquiries and preparing an offer

We process data provided through a contact form, configurator, email, telephone or otherwise in order to respond, analyse needs, prepare a configuration and present an offer.

The basis for processing is Art. 6(1)(b) GDPR where processing is necessary to take steps at the person's request prior to entering into a contract.

In other cases, the basis may be Art. 6(1)(f) GDPR, i.e. the Controller's legitimate interest in conducting business communications and handling enquiries addressed to us.

b) Entering into and performing a contract

If an enquiry results in a contract being entered into, we process data to the extent necessary to enter into and perform that contract.

Legal basis: Art. 6(1)(b) GDPR.

c) Compliance with legal obligations

Data may be processed to comply with obligations arising from legal provisions, in particular tax, accounting and other provisions applicable to the Controller's activities.

Legal basis: Art. 6(1)(c) GDPR.

d) Establishing, pursuing or defending claims

Data may be processed to safeguard documentation and to establish, pursue or defend against claims.

Legal basis: Art. 6(1)(f) GDPR.

The Controller's legitimate interest is to protect its rights and to be able to demonstrate the course of cooperation and communications.

e) Ensuring the security of the Website

Technical data may be processed to ensure website security, prevent misuse, detect errors and ensure that the Website operates correctly.

Legal basis: Art. 6(1)(f) GDPR.

The Controller's legitimate interest is to protect the Website, its users and IT systems.

f) Analytics

If optional analytics tools requiring user consent are introduced on the Website, data will be processed in accordance with the user's choice regarding cookies or similar technologies.

Analytics tools requiring consent should not be activated before consent has been given.

g) Marketing

Submitting a request for an offer does not subscribe the user to a newsletter or constitute consent to receive electronic marketing.

If ResQ Mobilities operates a newsletter or other marketing activities requiring consent in the future, consent will be obtained separately and voluntarily and may be withdrawn at any time.

5. Forms and configurators

The Website allows enquiries to be submitted, in particular concerning:

ambulances, funeral vehicles, medical equipment, individual projects, fleet orders, tender specifications.

Data provided in the configurator is used to prepare an appropriate configuration and to contact the person submitting the enquiry.

The configurator is not an online shop, and submitting it does not automatically result in a contract being entered into or create an obligation to purchase.

6. Attachments and specifications

Users may be able to submit documents, specifications, tender requirements or other materials needed to prepare an offer.

These materials are processed only to the extent needed to handle the enquiry, prepare an offer, carry out any resulting cooperation or safeguard claims related to it.

Please do not submit documents containing special categories of data, patients' medical data, PESEL numbers or other third-party data unless this is absolutely necessary.

7. Is providing data mandatory?

Providing data is voluntary.

However, certain data, such as contact details and information identifying the subject of the enquiry, may be necessary to provide a response or prepare an offer.

Failure to provide data marked as required may prevent submission of the form or handling of the enquiry.

8. Recipients of data

Data may be shared with entities supporting the Controller in operating the Website and handling enquiries. According to the technical state of the Website as of the effective date of this Policy, these are:

Lovable Labs Sweden AB – the provider of the Lovable platform, including the Lovable Cloud service used to build and make the Website available and to store form data and uploaded files, Supabase – the database and file storage infrastructure used within Lovable Cloud, Cloudflare – the infrastructure through which the Website is operated and delivered to users (including submitted forms and the IP address).

Data may also be shared with:

the provider of email and transactional messaging services – for email notifications of new enquiries sent to the Controller (the Lovable Cloud email service), legal, accounting or other professional advisers, other entities where the obligation to disclose data arises from legal provisions.

The fonts used on the Website are served directly from the Website's server; the Website does not retrieve them from external services.

The list of providers is periodically reviewed and updated as technical changes are made to the Website.

9. Lovable and technical infrastructure

The Website was built using Lovable technology and runs on Lovable Cloud.

The forms, enquiry database and storage of uploaded files use Lovable Cloud, whose database and file storage are provided by Supabase infrastructure. According to the project's technical configuration, the database and files are stored in the European Union region (Ireland).

Uploaded files are stored in private file storage without public internet addresses. Enquiries and files cannot be accessed through the website.

These entities may process data on behalf of the Controller to the extent necessary to provide their services. The Controller selects providers taking account of security and data protection requirements.

The detailed scope of the infrastructure used may change as the Website develops.

10. Transfers of data outside the European Economic Area

The enquiry database and uploaded files are stored in the European Union region (Ireland).

Some technology providers (in particular providers of the infrastructure through which the Website is delivered) or their subprocessors may be based or process data outside the European Economic Area.

Where such a transfer occurs, the Controller requires the use of the legal bases and safeguards provided for under the GDPR, in particular a European Commission adequacy decision or standard contractual clauses, where required.

Detailed information on transfers can be obtained by contacting the Controller.

11. Data retention period

As a rule, we retain enquiries submitted through the Website that do not lead to an active business relationship for up to 24 months from the last significant activity relating to the enquiry, unless further retention is justified by another lawful purpose or obligation. After this period, the enquiry and its submitted attachments are automatically deleted.

Enquiries linked to an active customer relationship, a contract, accounting documentation, legal obligations or a dispute or claim are excluded from the automatic deletion rule above.

If a contract is entered into, data and contractual documentation may be retained for the duration of its performance and then for the period required by law, in particular tax and accounting provisions.

We retain data needed to establish, pursue or defend claims for the limitation period applicable to those claims.

We retain data processed on the basis of a legitimate interest until that interest ceases to exist or an effective objection is raised, unless there is another basis for continued processing.

Data processed on the basis of consent is processed until consent is withdrawn, unless there is another legal basis for continued processing.

Technical logs and security data are retained for the period necessary to ensure security, diagnose problems and protect the Website.

The Controller applies the principle of storage limitation.

12. Rights of data subjects

In the cases specified by the GDPR, the data subject has the right to:

access data, receive a copy of data, rectify data, erase data, restrict processing, data portability, object to processing, withdraw consent where processing is based on consent.

The scope of individual rights depends on the legal basis and circumstances of processing.

To exercise these rights, you may contact the Controller at:

biuro@rsqm.pl

13. Right to lodge a complaint

If a user believes that their data is being processed unlawfully, they have the right to lodge a complaint with the competent supervisory authority.

In Poland, this authority is:

President of the Personal Data Protection Office ul. Stanisława Moniuszki 1A 00-014 Warszawa

14. Automated decision-making

ResQ Mobilities does not make decisions concerning users that produce legal effects or similarly significantly affect them solely on the basis of automated data processing.

The configurators are used to collect information needed to prepare an offer and do not make an automated decision on accepting an order, pricing, financing or entering into a contract.

15. Cookies and similar technologies

The Website does not currently use cookies, analytics tools, advertising pixels, session recording tools or other marketing or tracking technologies.

The Website uses only an essential browser session storage mechanism (sessionStorage), which remembers and restores the page scroll position when navigating the Website. This data is stored only in the user's browser, is not used for analytics or marketing purposes and is deleted when the tab is closed or the browser session ends. The technical name of this entry is assigned automatically by the Website's software and may change (currently: tsr-scroll-restoration-v1_3).

Category: technology essential for the operation of the Website. Its use does not require user consent.

If cookies or analytics, marketing or other technologies not required for the operation of the Website are introduced in the future, they will be activated only after user consent has been obtained, and the user will be able to:

accept optional cookies, reject optional cookies, change their decision later.

16. Data security

The Controller applies appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access, disclosure or other unlawful processing.

Only persons and entities that need access to data to perform their assigned tasks should have such access.

17. Third-party data

If a user provides the Controller with other people's personal data, they should have a basis for disclosing it.

In particular, please do not include data relating to patients or other persons not directly involved in the offer preparation process in forms or specifications.

18. Changes to the Privacy Policy

The Policy may be updated, in particular in the event of:

changes in legislation, changes in how the Website operates, the introduction of new forms, analytics functions or services, changes in technology providers.

The current version of the Policy will be published on the Website together with its effective date.

19. Contact

For matters relating to this Policy or the processing of personal data, you may contact:

ResQ Mobilities Sp. z o.o. al. Jana Pawła II 27 00-867 Warszawa

email: biuro@rsqm.pl