Privacy Policy

General information

This Privacy Policy sets out the rules for processing the personal data of users of the Envalis website (the "Website"). The controller of personal data is Envalis Prosta Spółka Akcyjna, with its registered office in Warsaw, ul. Puławska 77, lok. U5, 02-595 Warszawa, entered in the register of entrepreneurs of the National Court Register under KRS number 0001224662, NIP 5214153554, REGON 544024775 ("Envalis"). Envalis processes personal data in accordance with applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and national data protection legislation.

Scope of the data processed

Envalis may process identification data, including first name and surname; contact data, including email address and telephone number; data relating to the organisation or business activity represented by the user; data provided voluntarily in contact forms or correspondence; and technical data, including IP address and information about the device, browser and activity on the Website.

Purposes and legal bases of processing

Personal data is processed in order to respond to enquiries submitted through the Website, to communicate with the user, to carry out activities relating to the services and projects offered, to ensure the proper operation of the Website, to conduct statistical analyses and improve the quality of services, and to establish, pursue or defend claims. The legal bases for processing are the user's consent, the necessity of processing in order to take action at the request of the data subject, and the legitimate interest of the controller.

Voluntary provision of data

The provision of personal data is voluntary; however, in certain cases it may be necessary in order to respond to an enquiry or to establish cooperation.

Recipients of the data

Personal data may be disclosed to entities cooperating with Envalis in the area of IT services, hosting or technical support, to entities providing advisory, legal or accounting services, and to entities authorised under the law. Data is not sold or disclosed to third parties for marketing purposes.

Transfers of data outside the EEA

As a rule, personal data is processed within the European Economic Area. Where data is transferred outside the EEA, Envalis ensures appropriate safeguards in accordance with applicable law.

Data retention period

Personal data is retained for the period necessary to achieve the purposes of processing, in particular for the duration of correspondence, for the period required by law, and until claims become time-barred.

Rights of the user

The user has the right to access their data, to rectify it, to erase it, to restrict its processing, to data portability, to object to processing, and to withdraw consent at any time. The user also has the right to lodge a complaint with the President of the Personal Data Protection Office.

Data security

Envalis applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access or disclosure. Envalis adopts a risk-based approach when designing and implementing data processing operations.

Detailed GDPR information

To the extent required by law, Envalis provides users with detailed information regarding the processing of personal data, including the legal bases for processing, the categories of data recipients and the data retention periods, as part of direct communication or in connection with the establishment of cooperation.

Where a contract is concluded or a business relationship is established, the user will receive separate, detailed information regarding the processing of personal data in accordance with Article 13 or 14 GDPR.

Cookies

The Website may use cookies in order to ensure its proper operation, to analyse traffic and to improve the quality of services. Detailed information about cookies is set out in a separate Cookie Policy.

Automated decision-making

Envalis does not take decisions in relation to users by automated means, including profiling, that would produce legal effects or similarly significantly affect the user.

Changes to the Privacy Policy

Envalis reserves the right to make changes to this Privacy Policy. The current version of the Policy is published on the Website.

Contact

For matters relating to the processing of personal data, Envalis can be contacted at kontakt@envalis.energy.