Privacy Policy
This Privacy Policy sets out the principles governing the processing of personal data, the use of cookies, and other technologies used on the ECOPRIUS Energy Systems websites.
This document has been prepared in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR),
- the Polish Act of 10 May 2018 on the Protection of Personal Data,
- the Electronic Communications Law,
- the applicable European Union legislation concerning the protection of the privacy of Internet users.
§1 Data Controller
The controller of your personal data is:
ECOPRIUS Energy Systems
M.Eng. Rafal Gawlik
ul. Bytnara 38
09-410 Płock
Poland
Tax Identification Number (NIP): 644-000-38-91
REGON: 272506906
Telephone: +48 517 976 046
E-mail:
The Controller makes every reasonable effort to ensure that personal data are processed in accordance with the applicable legal provisions while observing the principles of confidentiality, integrity, availability and accountability laid down in the GDPR.
§2 Scope of Application
This Privacy Policy applies to all persons using the ECOPRIUS Energy Systems websites, including in particular:
This Policy also applies to persons contacting the Controller through:
- contact forms,
- Microsoft Forms,
- e-mail,
- telephone,
- WhatsApp.
§3 Definitions
For the purposes of this Privacy Policy, the following definitions shall apply:
- Controller – ECOPRIUS Energy Systems M.Eng. Rafal Gawlik.
- GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
- Personal Data – any information relating to an identified or identifiable natural person.
- Processing – any operation or set of operations performed on personal data, including collection, storage, modification, deletion, consultation, disclosure or restriction.
- User – any person visiting the ECOPRIUS Energy Systems websites.
- Website – the websites owned and operated by the Controller.
§4 Principles of Data Processing
The Controller processes personal data in accordance with the following principles:
- lawfully,
- fairly and transparently,
- only for clearly specified purposes,
- only to the extent necessary to achieve those purposes,
- for no longer than necessary,
- using appropriate technical and organisational security measures.
§5 Purposes of Data Processing
The Controller may process personal data for the following purposes:
- responding to enquiries submitted through contact forms,
- conducting e-mail correspondence,
- telephone communication,
- preparing commercial offers,
- providing services offered by ECOPRIUS Energy Systems,
- performing statistical analyses concerning the operation of the Website,
- ensuring the security of the websites,
- fulfilling legal obligations,
- establishing, exercising or defending legal claims.
§6 Legal Basis for Processing
The Controller processes personal data pursuant to Article 6(1) of the GDPR, in particular:
- Article 6(1)(a) – the data subject's consent,
- Article 6(1)(b) – performance of a contract or taking steps prior to entering into a contract,
- Article 6(1)(c) – compliance with a legal obligation to which the Controller is subject,
- Article 6(1)(f) – the Controller's legitimate interests, including protecting the Website, pursuing or defending legal claims, analysing website traffic and ensuring IT security.
The Controller does not process personal data by means of automated decision-making producing legal effects concerning the User, unless required by applicable law.
§7 Scope of Personal Data Processed
The scope of personal data processed depends on the manner in which the Website is used and the type of contact with the Controller. The Controller processes only the data necessary to achieve the specified purposes.
In particular, the following categories of personal data may be processed:
- full name,
- company name,
- job title,
- e-mail address,
- telephone number,
- postal address,
- content of the submitted message,
- IP address,
- technical information concerning the device and Internet browser,
- information regarding the use of the Website.
The Controller does not collect special categories of personal data referred to in Article 9 of the GDPR unless such processing is required by law or the data are voluntarily provided by the data subject.
§8 Contact Forms
Data submitted through contact forms are used solely for responding to enquiries, preparing quotations, conducting correspondence or providing services offered by ECOPRIUS Energy Systems.
Providing personal data is voluntary; however, it may be necessary in order to respond to an enquiry or process a request.
The data are not used for automated decision-making or profiling.
§9 Contact by E-mail
When contacting the Controller by e-mail, the User voluntarily provides the personal data contained in the message.
E-mail correspondence may be archived in order to ensure continuity of communication, protect the Controller's legitimate interests and document the course of cooperation.
§10 Telephone Contact
Where contact is made by telephone, the Controller may process the personal data provided during the conversation to the extent necessary to provide information, prepare an offer or perform services.
The Controller does not automatically record telephone conversations unless the caller has been informed before the recording begins.
§11 Microsoft Forms
The Website may use Microsoft Forms to enable Users to submit enquiries, requests and information regarding cooperation.
Data submitted via Microsoft Forms are processed solely for the purpose of handling the request and maintaining further correspondence.
Microsoft Forms is a service provided by Microsoft Corporation. Detailed information regarding Microsoft's processing of personal data is available in Microsoft's Privacy Statement.
§12 Hosting and Server Logs
The ECOPRIUS Energy Systems websites are hosted on a professional hosting infrastructure ensuring security, availability and protection of personal data.
While using the Website, server logs may automatically record, among other things:
- the User's IP address,
- date and time of the connection,
- Internet browser type,
- operating system type,
- address of the visited page,
- referring page address,
- information relating to system errors.
Server logs are used exclusively for Website administration, ensuring security and diagnosing technical problems.
§13 Security of Data Transmission
The Website uses SSL/TLS encryption to ensure the confidentiality of data transmitted between the User's browser and the Controller's server.
The Controller applies appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised disclosure, alteration or access by unauthorised persons.
The security measures implemented include, among others:
- encrypted data transmission,
- access control for IT systems,
- regular software updates,
- protection against malicious software,
- data backups,
- continuous monitoring of IT infrastructure security.
§14 Recipients of Personal Data
The Controller may entrust the processing of personal data to entities providing services on its behalf only to the extent necessary for the fulfilment of the specified purposes.
Recipients of personal data may include, in particular:
- hosting service providers,
- e-mail service providers,
- Microsoft Corporation (Microsoft Forms),
- Google Ireland Limited (Google Analytics, YouTube),
- IT and administrative service providers,
- legal and accounting service providers,
- public authorities where disclosure is required by applicable law.
The Controller does not sell personal data and does not disclose them to third parties for marketing purposes.
§15 Data Retention Period
Personal data are retained only for the period necessary to fulfil the purpose for which they were collected.
In particular:
- data submitted through contact forms – for the duration of the correspondence and for up to 24 months after its completion,
- e-mail correspondence – until the matter has been concluded and for the period required by applicable law,
- data related to the performance of contracts – for the period required under tax and accounting regulations,
- server logs – for the period necessary to ensure the security of IT systems.
After the above retention periods have expired, the data are deleted or anonymised unless further storage is required by applicable law.
§16 Cookie Policy
The ECOPRIUS Energy Systems websites use cookies and similar technologies to ensure the proper functioning of the Website, enhance security, perform statistical analyses and improve the User's browsing experience.
Cookies are small text files stored on the User's device while visiting the Website.
Cookies are not used to directly identify Users and do not modify the configuration of the User's device or installed software.
§17 Types of Cookies Used
The Website may use the following categories of cookies:
1. Essential Cookies
Essential cookies enable the proper functioning of the Website and its core features. Without these cookies, some functions of the Website may not operate correctly.
2. Analytical Cookies
Analytical cookies are used to create anonymous statistics concerning Website usage, including visitor numbers, traffic sources and the popularity of individual pages.
3. Functional Cookies
Functional cookies allow the Website to remember User preferences, such as language selection, display settings or other preferences that improve usability.
4. Third-Party Cookies
Certain elements of the Website may use technologies provided by third-party service providers whose services may store their own cookies in accordance with their respective privacy policies.
§18 Google Analytics
The Website may use Google Analytics 4 provided by Google Ireland Limited to generate anonymous statistics concerning the use of the Website.
Google Analytics may analyse, among other things:
- the number of visitors,
- page views,
- time spent on the Website,
- the most frequently visited pages,
- types of devices and browsers used,
- the approximate geographical location of Users,
- traffic sources.
The Controller does not use Google Analytics data to identify individual Users.
Analytical cookies are activated only after the User has given consent where such consent is required under applicable law.
§19 YouTube
The Website may embed videos published on the YouTube platform operated by Google Ireland Limited.
Viewing embedded YouTube content may result in the processing of certain technical data, including the User's IP address and information concerning the device used.
Detailed information regarding the processing of personal data by YouTube is available in Google's Privacy Policy.
§20 Social Media
The Website may contain links to the Controller's profiles on social media platforms, including:
- LinkedIn,
- Facebook,
- YouTube.
Using these services is subject to the privacy policies of the respective platform providers.
The Controller is not responsible for the data processing practices applied by external social media platforms.
§21 Microsoft Forms
The Website may use Microsoft Forms to collect registration information, enquiries, surveys and requests related to the Controller's business activities.
Data submitted through Microsoft Forms are processed exclusively for the purpose indicated in the respective form.
Providing personal data is voluntary; however, failure to provide the required information may prevent the processing of the submitted request.
§22 Cookie Consent Management
During the first visit to the Website, the User may be presented with information regarding the use of cookies and, where required by law, may choose which categories of cookies to accept.
The User may modify or withdraw their consent at any time using the available cookie settings.
§23 Managing Cookies in the Browser
Regardless of the cookie settings available on the Website, the User may independently manage cookies through the settings of their Internet browser.
Most web browsers allow Users to:
- delete cookies,
- block the storage of cookies,
- receive notifications before cookies are stored,
- limit the operation of third-party cookies.
Disabling cookies may affect the proper functioning of certain features of the Website.
§24 Data Security
The Controller applies technical and organisational measures appropriate to the risks associated with the processing of personal data.
These measures include, in particular:
- SSL/TLS encrypted connections,
- restricted access to personal data,
- regular software updates,
- protection against cyberattacks,
- periodic backups,
- continuous monitoring of IT system security.
Despite the application of appropriate security measures, no method of data transmission over the Internet or electronic storage can be guaranteed to be completely secure.
§25 Transfer of Personal Data Outside the European Economic Area
As a rule, the Controller processes personal data within the European Economic Area (EEA).
Where services provided by entities whose infrastructure may involve the transfer of personal data outside the EEA are used, such transfers are carried out in accordance with the provisions of the GDPR and based on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission or other legal transfer mechanisms.
The Controller makes every reasonable effort to ensure that personal data transferred outside the EEA receive an adequate level of protection.
§26 Rights of Data Subjects
Every person whose personal data are processed has the right to:
- access their personal data,
- rectify inaccurate or incomplete personal data,
- request the erasure of personal data ("right to be forgotten"),
- request the restriction of processing,
- data portability,
- object to the processing of personal data,
- withdraw consent at any time where processing is based on consent.
The exercise of these rights may be subject to limitations resulting from applicable legal provisions.
Requests concerning the exercise of the above rights may be submitted by e-mail to:
§27 Right to Lodge a Complaint
If you believe that your personal data are being processed in violation of the GDPR or other applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority.
In the Republic of Poland, the competent supervisory authority is the President of the Personal Data Protection Office (UODO).
§28 Contact
Any questions regarding the processing of personal data may be directed to:
ECOPRIUS Energy Systems
M.Eng. Rafal Gawlik
ul. Bytnara 38
09-410 Płock
Poland
Telephone: +48 517 976 046
E-mail:
The Controller has not appointed a Data Protection Officer, as there is no legal obligation to do so.
§29 Children's Privacy
The Website is not intended for children under the age of 16.
The Controller does not knowingly collect personal data from children. If such data are obtained unintentionally, they will be deleted without undue delay after becoming aware of the circumstances.
§30 Amendments to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy, in particular due to:
- changes in applicable laws,
- technological developments,
- changes in the operation of the Website,
- the introduction of new electronic services.
The current version of the Privacy Policy is always available on the ECOPRIUS Energy Systems websites.
§31 Final Provisions
This Privacy Policy shall enter into force on the date of its publication on the ECOPRIUS Energy Systems websites.
Matters not governed by this Privacy Policy shall be subject to the provisions of the GDPR, the Polish Personal Data Protection Act, the Electronic Communications Law, and other applicable provisions of Polish and European Union law.
Effective date: 29 July 2026
Last updated: 29 July 2026
Data Controller:
ECOPRIUS Energy Systems
M.Eng. Rafal Gawlik
ul. Bytnara 38
09-410 Płock
Poland
Telephone: +48 517 976 046
E-mail:
