Rivabella Sp. z o.o.

This privacy policy applies to all websites and web applications that contain links to this policy and are published by Rivabella sp. z o.o. with its registered office in Warsaw (hereinafter collectively referred to as “Sites“).

Rivabella sp.z o.o. (hereinafter referred to as “Rivabella“) undertakes to maintain the privacy and confidentiality of information provided by users of the Sites. This privacy policy describes the principles and practices of the Rivabella investment in relation to personal data collected by the Rivabella through the Sites.

What information we collect and how we process it?

Please note that by sending us Personal Data manually or electronically, using our Sites, you consent to us processing all Personal Data in the manner and for the purposes described in this privacy policy.

The term “Personal Data” refers to information that personally identifies you, such as company name, your name, email address, phone number and computer IP address.

Who is responsible for processing Personal Data and who can I contact in this regard?

The Administrator – Rivabella Sp. z o. o. is responsible for collecting and processing Personal Data. z o.o. with its registered office in Warsaw, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Department of the National Court Register under the number: 0000705384, REGON: 36882942000000, NIP: 5252730841.

The Administrator can be contacted at:

Zajęcza 2B Street,

00-351 Warsaw, Poland,

Phone: (48 22) 564 50 00.

What sources and data we use?

We process your Personal Data, which, according to the law, we received from you as our potential contractor, i.e. company name, name and surname, e-mail address, telephone number, and IP address.

In some circumstances, we collect information about you from our partners or from publicly available websites to help us expand and better understand our customers and improve the relevance of our products.

Information that we obtain using cookies and similar tools.

We use cookies to track your use of our website. Cookies are text files placed on your computer to collect standard web journal data and information about user behavior. This information is used to track your use of the site and to compile statistical report activity.

Remember that if you disable cookies, some of the Website’s services or features may not be available. We use the following cookies:

– Analytical cookies. They allow us to recognize and count the number of visitors and to see how visitors navigate our Sites when they use them. This helps us improve the way our Website works, for example, by ensuring that users find what they are looking for.

– Marketing cookies. They are used to recognize you when you return to our Sites. Thanks to this, we can personalize the content of the Website and remember your preferences. These cookies also record your visit to our sites, pages and links that you follow.

– WordPress cookies. They are a result from the WordPress build mechanisms (e.g. language change depending on the web browser settings).

Most browsers allow you to manage cookie settings. These settings can usually be found in the “Settings” menu, “Window”, “Guide” or “Preferences” in the browser.

Why do we process your Personal Data (purpose of processing) and on what legal basis?

We process Personal Data only if we have the right to do so, for example

a. on the basis of consent (art.6 (1) a) GDPR)

In the event of express consent to the processing of Personal Data for a specific purpose. For example, if you fill out our “contact form”, you have consented to the processing of your Personal Data contained in the form to contact us, giving us your business card, you agree to the processing of Personal Data contained therein for business purposes. You have the right to withdraw this consent at any time by contacting us at the address given in point 1 above.

b. legitimate interest pursued by the Administrator (art.6 (1) f) GDPR)

If necessary, we process your Personal Data for purposes resulting from legitimate interests pursued by the Administrator or a third party. E.g:

  • for archiving (evidence) purposes, e.g. in the event of a potential dispute or claim;
  • for direct marketing purposes. In this case, we strive to balance our interests with your right to privacy.

c. compliance with the legal obligation incumbent on the Administrator (art.6 (1) c) GDPR)

We process your Personal Data when it is necessary to comply with the legal obligation to which we are subject, e.g. anti-fraud and anti-money laundering measures, compliance with tax control requirements and reporting obligations.

d. conclusion and performance of the contract (art.6 (1) b) GDPR)

The processing of your personal data is carried out in order to perform / conclude a contract with you. The purpose of processing basically depends on the specifics of a given contract and may relate in particular to contractual requirements, purchase, sale, delivery.

Who receives my Personal Data?

Rivabella sp.z o.o. belongs to the Cain International capital group (the “Cain Group”).

Rivabella as an Administrator, being a part of a group of enterprises or institutions associated with a central entity, may have a legitimate interest in sending Personal Data within a group of enterprises for internal administrative purposes, which also applies to the processing of Personal Data of customers or employees. The Rivabella company have access to your data that is required for them to meet our contractual and statutory obligations.

Rivabella is administered by White Star Real Estate sp.z o.o. belonging to the White Star Real Estate capital group (“White Star Group”) Service providers and employees of White Star Real Estate sp.z o.o. they may also receive data for these purposes if they comply with the obligation of confidentiality and our documented instructions in accordance with the GDPR.

Regarding the transfer of Personal Data to recipients outside the Cain Group and / or the White Star Group, we may disclose information about you only if we are legally required to do so. The recipients of Personal Data may be, for example:

  • public authorities and institutions if there is a statutory or official obligation.
  • entities providing office services for the Company (including document destruction, data deletion).

This includes, but is not limited to, postal service providers, IT service providers, and postal houses. We do not disclose, rent or sell Personal Data to third parties for personal use, except for the sale of all or a significant portion of the assets of the Rivabella. We take reasonable legal steps, such as contractual clauses and terms of service, to ensure that third parties who receive and process your Personal Data are bound by the same obligations as we do and do not use this information for any other purpose.

Is the data transferred to a third country or an international organization?

Personal Data that we receive from you may be transferred and stored at a destination outside the European Economic Area (“EEA”). In this case, we will take steps, such as relevant contractual clauses, to ensure data security and secure processing in accordance with this Privacy Policy.

How long will Personal Data be stored?

We store your Personal Data only as long as it is necessary to achieve the purposes for which we collected it, including the purposes of meeting legal, accounting or reporting requirements.

In order to determine the appropriate period of storage of Personal Data, we take into account the amount, nature and sensitivity of Personal Data, the potential risk of damage resulting from the unauthorized use or disclosure of Personal Data, the purposes for which we process Personal Data and whether we can achieve these purposes by other means and applicable legal requirements.

Personal Data provided for contact purposes will be processed for a period of 6 months from the date of their transfer, unless will change the purpose and the basis for processing Personal Data . Then Personal Data will be processed until the limitation period for claims arising from the given contract.

In some circumstances, you can ask us to delete your Personal Data by contacting us at:

However, this will not affect the lawfulness of the processing carried out prior to withdrawal of consent. If you withdraw your consent, we may not be able to provide you with certain products or services. We will advise you whether this is the case when you withdraw your consent.

In some circumstances, we may anonymize your Personal Data (so that it can no longer be associated with you) for research or statistical purposes. In this case, we may use this information indefinitely without notice.

What are the rights to the protection of Personal Data?

Each person whose Personal Data we process has the right: access to the content of their data, rectification (correction, supplementation), deletion, right to limit their processing, the right to object and the right to transfer Personal Data that we have received from you. The right of access and the right to delete are subject to restrictions arising from the GDPR. Data subjects also have the right to lodge a complaint with the competent supervisory authority, i.e., the President of the Office for Personal Data Protection – if they believe that the processing of Personal Data violates the provisions of the GDPR.

You will not have to pay a fee for accessing your Personal Data (or exercising other rights). However, we may charge a reasonable fee if your report is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in such circumstances.

Do I have to provide Personal Data?

Providing Personal Data is voluntary, but necessary to contact you if you complete our ‘contact’ form.

Our site is not intended for children under 16 years of age. We do not intentionally collect any information from children.

Your Personal Data will not be subject to automatic decision making, including profiling related to automatic decision making.

Changes to our privacy policy

We will improve and add new features to our Sites and improve our services and products. Due to these constant changes, changes in law and changing technologies, our policy on Personal Data will also change from time to time. If we make changes to this privacy policy regarding Personal Data, we will notify you.