Privacy Policy
Last updated: 10 July 2026
This Privacy Policy explains what personal data we collect when you visit rainbowurns.com (the "Website") or contact us, why we collect it, and the rights you have over it. The Website is an informational business website: it does not sell products online, take payments, or handle personalised orders.
This Policy is provided in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").
1. Who is responsible for your data (Controller)
The controller of your personal data is:
ML Native sp. z o.o. (MLNATIVE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ)
ul. Stefana Batorego 33/19, 80-251 Gdańsk, Poland
Email: hello@rainbowurns.com
You can contact us at the email above for any question about this Policy or your data. (We have not appointed a Data Protection Officer, as we are not legally required to. If this changes, we will update this Policy.)
2. What personal data we collect
Depending on how you use the Website, we may collect:
- Contact data: if you email us or otherwise get in touch, we process the contact details and the content of your message — for example your name, email address, and anything you choose to tell us about your business or enquiry.
- Technical and usage data: IP address, browser type and language, device information, and pages visited, collected automatically through cookies and similar technologies (see Section 6).
We do not collect payment data, process online orders, or handle personalised-product details through this Website.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| To respond to enquiries you send us and communicate about a possible business relationship | Our legitimate interest in answering you – Art. 6(1)(f) |
| To detect your browser language and show the Website in a suitable language | Our legitimate interest in presenting the site correctly – Art. 6(1)(f) |
| To operate, secure and improve the Website and prevent misuse | Our legitimate interest – Art. 6(1)(f) |
| To set non-essential cookies (e.g. analytics) | Your consent – Art. 6(1)(a) |
You can withdraw any consent at any time, without affecting the lawfulness of processing before withdrawal.
4. Who we share your data with (Recipients)
We share your data only where necessary, with:
- Vercel (website hosting, infrastructure and analytics) — to host the Website and measure how it is used.
- Accountants, tax advisors and legal advisors — where necessary to meet our legal obligations or defend our rights.
- Public authorities — only where we are legally required to disclose data.
These recipients act either as separate controllers or as our processors under a data processing agreement, and may only use your data as instructed.
5. International data transfers
Some of our service providers (for example, website hosting or analytics) may process data outside the European Economic Area (EEA), including in the United States. Where this happens, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision (including the EU–US Data Privacy Framework where the provider is certified). You can request a copy of the safeguards in place by contacting us.
6. Cookies and similar technologies
We use essential cookies (and similar local storage) to make the Website work and to remember your language and cookie choices. With your consent, we also use analytics cookies to understand how the Website is used. Essential cookies are always active because the Website cannot function without them. Analytics cookies are set only after you consent via our cookie banner. You can change or withdraw your choice at any time through the cookie settings link in the footer.
7. How long we keep your data
- Contact/enquiry data: for as long as needed to handle your enquiry and any resulting business relationship, and a reasonable period afterwards.
- Technical/cookie data: for the lifetime of the relevant cookie or as described in our cookie settings.
8. Your rights
Under the GDPR you have the right to:
- access your personal data and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten"), where applicable;
- restrict processing in certain circumstances;
- data portability — receive your data in a structured, machine-readable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at hello@rainbowurns.com. We will respond within one month.
9. Right to complain
If you believe we process your data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl
You may also complain to the supervisory authority in your own EU country of residence.
10. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects, and we do not carry out profiling of this kind.
11. Changes to this Policy
We may update this Policy from time to time. The current version is always available on the Website, with the "Last updated" date shown above. Material changes will be communicated where required by law.