Privacy policy

The controller of your personal data is Sebastian Torz, who runs the EgzoPower project, ul. Barlickiego 1, 43-170 Łaziska Górne, Poland.

For any matter concerning personal data, write to biuro@egzopower.pl or by post to the address above. We have not appointed a data protection officer.

• Enquiry form: name, email, phone, planned date, chosen model and rental option, and your message. We attach your IP address and the time of sending to the enquiry.
• Direct contact: the data you give us when you email, call or message us on WhatsApp (usually your name, email or phone number and the content of the conversation).
• Contact persons in organisations (e.g. universities of the third age, seniors' clubs, associations): name, position, business email and phone, and the history of our conversations. This data comes from the organisation itself, from its public website or from talking to you.
• Technical data: the server that runs the website may record your IP address, the time of your visit and browser information in technical logs.
• Cookies and similar technologies: described in section 9.

• Answering your enquiry, preparing and handling a rental or a demonstration. Basis: steps taken at your request before entering into a contract, and performance of the contract (Art. 6(1)(b) GDPR).
• Contacting organisations, including presenting our offer for groups and arranging demonstrations. Basis: our legitimate interest in promoting and running our activity (Art. 6(1)(f) GDPR). We send marketing by email, phone or text message only with your consent, which we record together with its date and form.
• Protection against abuse and spam, and website security (IP address, technical logs). Basis: legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, pursuing or defending legal claims. Basis: legitimate interest (Art. 6(1)(f) GDPR).
• Accounting and tax obligations when a rental takes place. Basis: legal obligation (Art. 6(1)(c) GDPR).
• Website visit statistics and measuring the effectiveness of ads. Basis: your consent given in the cookie banner (Art. 6(1)(a) GDPR).

We do not sell your data. We use companies that process data on our behalf and only on our instructions:

• Zoho: the email service through which form enquiries and messages reach us (servers in the European Union).
• OVH: the server that runs the website (data centre in Warsaw, Poland).
• Supabase: the database of our internal system where we keep contacts with organisations (servers in Ireland, in the European Union).
• Google Ireland Limited (Google Analytics, Google Ads) and Meta Platforms Ireland Limited (Meta Pixel): only if you accept analytics or advertising cookies.

When you message us on WhatsApp, your messages are also processed by WhatsApp (Meta) under its own privacy policy.

Google and Meta may transfer data to the USA. This is based on the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

We may also share data with public authorities where the law requires it.

• Form enquiries and correspondence: until the matter is closed, or until you object or ask us to delete them.
• Rental data: for the duration of the contract, and then until the limitation period for claims and the period for which tax law requires us to keep records have passed.
• Data of contact persons in organisations: until you object, or until it is no longer needed for working with the organisation. We keep the record of a consent or its withdrawal for as long as it is needed as evidence.
• Data processed on the basis of consent: until you withdraw it.
• Cookies: for the periods given in section 9.

You have the right to:

• access your data and receive a copy of it,
• have your data corrected,
• have your data erased,
• restrict processing,
• data portability for the data you gave us,
• object to processing based on our legitimate interest, including objecting to marketing at any time,
• withdraw your consent at any time (this does not affect the lawfulness of what we did before the withdrawal),
• lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

To exercise these rights, write to biuro@egzopower.pl. We will reply without undue delay, and within one month at the latest.

Giving us your data is voluntary. However, without your name, email and phone we cannot answer a form enquiry or prepare a rental.

We do not make decisions about you based solely on automated processing. If you accept advertising cookies, Google and Meta may tailor the ads you see based on your online activity.

Cookies are small files stored in your browser. We use them for the following purposes:

• Essential: NEXT_LOCALE remembers the language version you chose. It is deleted when you close the browser. These cookies do not need your acceptance because the website does not work properly without them. We also remember your choice in the cookie banner.
• Analytics (only with consent): Google Analytics 4 (_ga, _ga_*) shows us how many people visit the website and which pages they read. Kept for up to 2 years.
• Advertising (only with consent): Google Ads (_gcl_au) and Meta Pixel (_fbp) measure whether an ad led to an enquiry, and allow us to show ads to people who visited the website. Kept for up to 90 days.

Without your consent we do not run analytics or advertising tools. We use Google Consent Mode v2, which passes your decision on to Google.

On route pages we show a map from mapa-turystyczna.pl. When it is displayed, your browser connects to that service, which receives your IP address and may set its own cookies under its own privacy policy.

You can change your consent at any time in the cookie settings on the website. You can also delete or block cookies in your browser settings.

If we change the way we use data, we will update this page and the date at the top. The current version applies from the date of the last update.