Privacy and Cookie Policy
Last updated: 29 October 2026
This policy explains how personal data are processed when you visit this website or our product pages on eurobrokers.pro subdomains (for example rice.eurobrokers.pro), use their contact forms or write to us by email. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR").
1. Who is the controller
The controller of your personal data is Roberto Alfarano, running the business Eurobrokers.pro, Odkryta 1/49, 03-140 Warsaw, Poland, NIP 5242884198, REGON 383102525, EU VAT number PL5242884198.
Contact for all data protection matters: info@eurobrokers.pro, or by post to the address above. We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR.
2. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You send the contact form or email us | Name, email address, content of your message, and any further data you choose to include; date and time of sending | To read and answer your enquiry and continue the business correspondence | Art. 6(1)(b) GDPR where you ask about our services (steps before a possible contract); otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering messages addressed to us |
| You request a free consultation on one of our product pages | Your company website address, your WhatsApp number, what you are looking for (optional), the page you sent the request from; date and time of sending | To contact you by WhatsApp or phone about your request and prepare an offer | Art. 6(1)(b) GDPR (steps you ask for before a possible contract) |
| A business relationship follows | Contact and business details needed for the cooperation | To perform the agreement and keep the records the law requires | Art. 6(1)(b) GDPR (contract); Art. 6(1)(c) GDPR (accounting and tax obligations) |
| A dispute arises | The correspondence and data relevant to it | To establish, exercise or defend legal claims | Art. 6(1)(f) GDPR, our legitimate interest in protecting our rights |
| Any visit to the website | IP address, browser and device information, date and time of requests, pages requested (technical logs of the hosting platform); the technical identifiers described in section 7 | To deliver the website, keep it secure and prevent abuse | Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website |
Giving your data is voluntary. Without a name, an email address and a message we cannot reply to you. On the product pages, without a company website and a WhatsApp number we cannot call you back.
We do not use your data for automated decision-making or profiling within the meaning of Article 22 GDPR. This website does not use analytics, advertising or social media tracking tools.
3. Who receives your data
We do not sell your data. Your data are processed on our behalf by these service providers, under data processing agreements as required by Article 28 GDPR:
- Cloudflare, Inc. (San Francisco, United States): hosting of this website.
- Google Ireland Limited (Dublin, Ireland), with Google LLC: business email (Google Workspace) and the script that delivers contact form messages to it; our correspondence is received and stored there.
- WhatsApp Ireland Limited (Dublin, Ireland): if we contact you on WhatsApp after a consultation request, the messages are processed by WhatsApp under its own terms and privacy policy, as an independent controller.
Data may also be disclosed to public authorities where the law requires it, and to our accounting and legal advisers where this is necessary for the purposes described above.
4. Transfers outside the European Economic Area
Some of the providers above process data outside the EEA:
- United States: transfers take place to companies certified under the EU-U.S. Data Privacy Framework (Commission adequacy decision of 10 July 2023) or, where a recipient is not certified, on the basis of the European Commission's Standard Contractual Clauses (Article 46(2)(c) GDPR).
- Other countries where these providers' sub-processors operate: on the basis of an adequacy decision or the Standard Contractual Clauses.
You may request a copy of the safeguards used by writing to the address in section 1.
5. How long we keep your data
- Enquiries and correspondence: for as long as the business contact continues, and afterwards until the limitation period for possible claims has expired under Polish law (generally up to 6 years, and 3 years for claims related to business activity, under Article 118 of the Polish Civil Code).
- Accounting and tax documents, if an agreement follows: for the period required by tax law, generally 5 years from the end of the calendar year in which the tax payment deadline expired (Article 86 of the Polish Tax Ordinance).
- Technical logs: for the period set by the hosting provider for security purposes.
Data kept on the basis of our legitimate interest are deleted earlier if you object and we have no overriding grounds to continue (see section 6).
6. Your rights
Under the GDPR you have the right to:
- access your data and receive a copy of them (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict the processing (Art. 18);
- receive the data you provided in a structured, machine-readable format, where processing is based on a contract and carried out by automated means (Art. 20);
- object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (Art. 21).
To exercise these rights, write to info@eurobrokers.pro. We will reply within one month, as Article 12 GDPR requires; exercising your rights is free of charge.
You also have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also complain to the authority in the EU country where you live or work.
7. Cookies and similar technologies
This website stores only the following item on your device. It is strictly necessary for the website to be displayed correctly, so under Article 399(3) of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) of 12 July 2024 your consent is not required. We do not use analytics, advertising or tracking cookies, and therefore do not show a consent banner.
| Name | Type | Set by | Purpose |
|---|---|---|---|
| ebvf | Browser session storage | This website | Keeps the background picture steady while the page changes language; deleted when the tab is closed |
The hosting platform may also set further technical cookies for security and load balancing. You can delete or block cookies and browser storage in your browser settings; the website and its contact form keep working if you block them.
The fonts, video and images on this website are served from our own hosting; the website does not load content from Google Fonts, YouTube or social networks.
8. Changes to this policy
We will update this policy when the way we process data changes. The date at the top shows the latest version.