1. Data Controller
The controller of your personal data is PNP ENERGY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, address: UL. ELEKTORALNA 13 /121, 00-137 WARSZAWA, NIP: 5253001222, e-mail: biuro@pnpenergy.pl. In matters related to the processing of personal data, you can contact the controller via the email address provided above. The Controller has not appointed a Data Protection Officer (DPO).
2. Scope of Processed Data
Through the contact form, we process the following personal data:
- First and last name,
- Email address,
- Phone number (if provided),
- Content of the message,
- IP address (automatically collected by the hosting server).
Providing data is voluntary, but necessary to respond to your inquiry.
3. Purposes and Legal Grounds for Processing
Personal data is processed for the purpose of:
a) Responding to inquiries sent via the contact form Legal basis:
- Art. 6(1)(f) GDPR – the controller's legitimate interest in conducting correspondence and handling inquiries;
- Or – in the case of inquiries regarding offers or concluding a contract: Art. 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.
If processing is based on consent, the legal basis is Art. 6(1)(a) GDPR.
4. Legitimate Interest of the Controller
The controller's legitimate interest is the ability to respond to inquiries, maintain correspondence, and potentially establish, exercise, or defend against legal claims. You have the right to object to the processing of your data on this basis at any time.
5. Data Retention Period
Personal data is stored for the duration of the correspondence or telephone contact, and subsequently until the expiration of the limitation period for any claims related to the business activity, in accordance with applicable legal provisions. In the event of concluding a contract, data may be stored for the period required by law, in particular by tax and accounting regulations.
6. Data Recipients
Data may be transferred to entities processing data on behalf of the controller, in particular:
- Hosting service providers,
- IT service providers.
These entities process data based on data processing agreements.
7. Data Transfer Outside the EU
The Controller does not transfer your personal data to third countries (outside the European Economic Area) or international organizations.
8. Your Rights
You have the right to:
- Access your data,
- Rectify your data,
- Erasure of data ("the right to be forgotten"),
- Restriction of processing,
- Object to processing,
- Data portability (if processing is based on consent or a contract),
- Withdraw consent at any time (if processing is based on it).
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you believe that the processing of your data violates GDPR regulations.
9. Automated Decision-Making and Profiling
Your personal data is not used for automated decision-making or profiling.
