PRIVACY · ROMDEN BIKES
Privacy policy
This page explains who is responsible for personal data, why it is processed and which rights apply to people using Romden Bikes.
Version dated 7 September 2026.The Polish-language version is the reference version.
01
Controllers and operators
Romden Bikes is a trade brand used jointly by two independent entrepreneurs and is not a separate legal entity.
Denys Vyskorka
- NIP
- 7123361868
- REGON
- 543451512
- Service address
- ul. Augustyna Szamarzewskiego 21/2, 60-514 Poznań, Polska
Roman Taran
- NIP
- 6492311860
- REGON
- 542905900
- Service address
- Piastowskie 36/1, 61-151 Poznań, Polska
For shared handling of enquiries, customer contact, equipment support and the shared CRM, Denys Vyskorka and Roman Taran jointly determine the purposes and means of processing and act as joint controllers.
For a specific rental agreement, settlement, accounting and tax documentation, and other obligations connected with that agreement, the controller may be the entrepreneur who is the party to that specific agreement. The contracting entrepreneur is identified when the agreement or settlement is made.
02
Data we may process
Depending on the contact and service, we may process identification and contact details, correspondence and information about rentals, payments, equipment, service and support history.
When the website is used, technical infrastructure may process basic connection and device data necessary to deliver the website, maintain security and diagnose technical issues.
03
Purposes and legal grounds
We process data only to the extent needed to operate Romden Bikes and manage the relevant customer relationship.
Providing data is voluntary, but some information may be necessary to answer an enquiry, enter into or perform an agreement, or complete a settlement correctly.
- answering enquiries and taking steps before an agreement;
- entering into, performing and supporting a rental or service agreement;
- customer support and the shared CRM;
- settlements and legal, accounting and tax obligations;
- security, abuse prevention and establishing, pursuing or defending claims.
04
Recipients and external services
Data may be entrusted or disclosed to providers of hosting and IT infrastructure, CRM and operational systems, accounting, legal or technical services, and to competent authorities where required by law.
Contact through Telegram takes place in an external service. After opening Telegram, data is also processed under that provider's rules.
Where a provider processes data outside the European Economic Area, the transfer should use mechanisms required by the GDPR.
05
Retention
Data connected with agreements and settlements is retained for the period needed to perform the agreement and afterwards for periods required by law or needed to establish, pursue or defend claims.
Enquiry and correspondence data is retained for as long as necessary to handle the matter and justified follow-up.
06
Your rights
Subject to the GDPR conditions, you may have the right to access, rectify or erase data, restrict processing, receive portable data and object to processing.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
07
Cookies and browser storage
The website uses the functional romden_locale cookie to remember the selected language and the sessionStorage entry romden-motion-seen-v1 to support animation behaviour during the current browser session.
The website uses Vercel Web Analytics to collect aggregated visit statistics such as viewed pages, referrer, approximate country, basic device and browser information, and key interactions with WAKE SYSTEM, the configurator, and the Telegram handoff. Vercel Web Analytics does not use analytics cookies.
Vercel uses a short-lived hash created from request information; it is not used to track a person across different websites or applications, and the data is discarded after 24 hours. We do not send names, phone numbers, Telegram usernames, message contents, agreement data, or CRM data to Web Analytics. If other analytics or marketing tools requiring consent are introduced later, this policy and the consent mechanism will be updated before those tools are enabled.
08
Automated decisions
We currently do not make decisions producing legal effects for users solely by automated means and do not conduct profiling for such a purpose.
09
Joint control and contact
Denys Vyskorka and Roman Taran arrange their responsibilities for jointly processed data. The essence of that arrangement corresponds to the division of roles described on this page.
Regardless of the internal division of responsibilities, a data subject may exercise GDPR rights against either joint controller. The common contact point is provided below.
