Privacy policy
Last updated:
This policy explains how we process personal data in connection with the use of elprojekt.eu and enquiries concerning our services.
1. Data controller and contact details
The controller of personal data is Mariusz Łacina, a sole trader operating under the business name elprojekt Mariusz Łacina, tax identification number (NIP) 6121365850, hereinafter referred to as the “Controller” or “we”. Correspondence address: ul. Jarzębinowa 50, 55–080 Smolec, Poland.
For matters concerning the processing of personal data and the exercise of your rights, you may contact us:
- by e-mail: contact@elprojekt.eu,
- by post: ul. Jarzębinowa 50, 55–080 Smolec, Poland.
2. Data we process
Contact and service enquiries
The website does not contain a contact form. When you contact us by e-mail or telephone, we process the data you provide in connection with that contact. This may include your first and last name, business contact details, company name, position, and information contained in your message and its attachments.
Please provide only the data necessary to handle your enquiry. For initial contact, we do not need special categories of personal data, such as health information, or copies of identity documents.
Providing data in an enquiry is voluntary. However, without contact details or the information necessary to understand the matter, we may be unable to respond or prepare an offer.
Technical data related to website visits
When you use the website, the server processes technical data required to handle the connection. Some of this data may be recorded in event logs.
HTTP logs include the IP address, date and time of the request, the method and address of the requested resource, the protocol used, the response code and size of the server response, the referring page address, and information provided by the browser about its type and the user's device.
Information about storing data on the user's device can be found in section 8.
3. Purposes and legal bases for processing
Responding to enquiries and conducting correspondence
We process data to respond to enquiries, explain technical matters and determine a possible scope of cooperation. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in conducting correspondence and handling enquiries. This also applies to contact with persons representing businesses.
Preparing an offer at your request
If you contact us as an individual who is to become a party to a contract, we process the data necessary to prepare an offer and take steps before entering into a contract under Article 6(1)(b) GDPR.
Operation and security of the website
We process necessary technical data to make the website available, detect errors, prevent abuse and protect the infrastructure. The legal basis is Article 6(1)(f) GDPR — our legitimate interest in ensuring the operation and security of the website.
Protection of rights and handling requests
We process data necessary to establish, pursue or defend claims under Article 6(1)(f) GDPR. We handle data protection requests under Article 6(1)(c) GDPR in connection with our obligations under the GDPR.
4. Recipients of data
To the extent necessary for the stated purposes, data may be disclosed to entities supporting our infrastructure and communications, in particular providers of hosting, e-mail and IT support services.
Hosting services and e-mail for the elprojekt.eu domain are provided by CYBER_FOLKS SPÓŁKA AKCYJNA, ul. Wierzbięcice 1B, 61–569 Poznań, Poland.
Under the standard configuration, the provider creates backups of files, databases and e-mail and uses a DNS Anycast service. The provider has confirmed that this configuration does not use a CDN service.
Entities processing data on our behalf act under appropriate agreements and our instructions. Data may also be disclosed to authorised public authorities where required by law and to legal advisers to the extent necessary to protect our rights.
5. Data retention periods
We retain data for the time necessary to fulfil the relevant purpose. We apply the following periods or criteria:
| Type of data | Retention period |
|---|---|
| Correspondence and enquiries that did not lead to cooperation | For the duration of handling the matter and then for 12 months from the last message. After that period, we delete the correspondence unless further retention is necessary to establish, pursue or defend claims. |
| Technical server logs | For 30 days from the creation of the log entry. |
| Backups of files, databases and e-mail | Backups are created every 6 hours, and each backup is retained for 7 days. |
| Documentation relating to the handling of personal data requests | For 3 years after the request has been completed, solely to the extent necessary to demonstrate proper performance of the Controller's obligations and to establish, pursue or defend claims. |
In the event of a specific dispute or security incident, the necessary portion of the data may be retained for longer — for the time required to investigate the event or protect claims, taking into account the applicable limitation periods.
If an enquiry leads to a contract, data related to its performance and settlement is subject to the rules applicable to that cooperation. We provide information about additional purposes and processing conditions before such processing begins.
6. Transfers outside the European Economic Area
The hosting and e-mail provider has confirmed that data within these services is processed exclusively within the European Economic Area. The servers used to provide the services are located in Poland, at the Beyond data centre in Poznań. Under the verified configuration, this data is therefore not transferred outside the EEA.
7. Your rights
Subject to the conditions laid down in the GDPR, you may request access to your data and obtain a copy of it, rectification of inaccurate data, erasure of data and restriction of processing.
You may also object, on grounds relating to your particular situation, to processing based on our legitimate interest. After receiving an objection, we will assess whether there are grounds for continuing the processing.
The right to data portability applies in the cases specified in the GDPR where processing is carried out by automated means on the basis of consent or a contract. Where consent is the basis for specific processing, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact us at contact@elprojekt.eu. If we have reasonable doubts about your identity, we may request additional information necessary to confirm it.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your data infringes applicable law. Information on how to lodge a complaint is available on the website of the Polish Personal Data Protection Office.
8. Cookies, browser storage and external services
We do not use advertising or analytics cookies or tools that track users for marketing purposes.
The elprojekt.eu website itself does not use cookies or localStorage or sessionStorage mechanisms. It also does not use external fonts, analytics, embedded content or external service scripts. E-mail and phone links launch the appropriate function on the user's device only after they are selected.
The hosting provider uses security mechanisms and protection against automated traffic. If additional security verification is triggered, these mechanisms may use technical cookies.
If the way the website operates changes in the future, we will update this policy and, where required by law, implement an appropriate consent mechanism.
9. Automated decision-making
We do not use data collected in connection with the use of the website and contact with us to make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
10. Policy updates
We update this policy when the operation of the website, the services used or the rules governing data processing change. The current version is available on this page. The date of the latest update is stated at the beginning of the document. A change to the policy does not itself replace consent where consent is required for particular processing.