Nowa EnergiaNOWA ENERGIA
PLEN

Privacy policy

This privacy policy sets out how the personal data provided by users is processed and protected in connection with their use of this website.

1. Data controller

The controller of your personal data is Nowa Energia S.A., with its registered office in Gdynia (ul. Gorczycowa 2A/1, 81-591 Gdynia, Poland), entered in the register of entrepreneurs of the National Court Register kept by the District Court Gdańsk-Północ in Gdańsk, 8th Commercial Division of the National Court Register, under KRS 0000364011, NIP 5862257917, REGON 221068432.

2. Purposes of processing

Personal data is processed on the basis of the consent given by the user, and in cases where the law authorises the controller to process personal data under statutory provisions or in order to perform a contract concluded between the parties.

The website collects information through data that users voluntarily enter into its forms. We also measure anonymous conversion events, such as a click on the main call to action or the successful submission of a form. These events contain only the name of the action, the page path and the position of the button — with no name, e-mail address, telephone number, message content or any other data entered into a form.

Messages sent through the contact form are passed to the CRM system in which the controller handles enquiries and further correspondence. To be able to demonstrate that consent was given (Articles 5(2) and 7(1) GDPR), we store together with the message the text and version of the clause shown next to the form, the date of submission, the address of the page with the form, the e-mail address provided and cryptographic hashes (SHA-256) of the IP address and of the browser identifier. We do not store the IP address or the browser identifier themselves.

3. Legal bases and retention period

We process personal data on the following legal bases:

  • Article 6(1)(b) GDPR — taking steps at your request prior to entering into a contract and performing that contract (for example, responding to a request for a quotation);
  • Article 6(1)(f) GDPR — the legitimate interest of the controller, namely conducting correspondence, direct marketing of its own services and pursuing or defending legal claims;
  • Article 6(1)(c) GDPR — compliance with the legal obligations to which the controller is subject (for example, tax and accounting regulations);
  • Article 6(1)(a) GDPR — consent, to the extent that it has been given.

We retain data for as long as is necessary to fulfil the purpose for which it was collected: data from the contact form — for the duration of the correspondence and thereafter until the limitation period for any claims expires; data processed on the basis of consent — until that consent is withdrawn; data processed under statutory provisions — for the period required by those provisions. The copy of a message stored in the website database is deleted automatically after 365 days; the evidence of consent is kept together with the message in the CRM system for as long as the data it concerns is retained.

4. Data recipients

Personal data may be entrusted to entities that provide the controller with services necessary to operate the website and run its business, in particular hosting, IT, CRM system and e-mail providers — solely on the basis of data processing agreements and only to the extent necessary to deliver those services. Data is neither sold nor made available to third parties for marketing purposes.

5. Data subject rights

You have the right to request that the controller give you access to your personal data and rectify, erase or restrict its processing, as well as the right to object to processing and the right to data portability. Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

6. Voluntary provision of data

Providing your personal data is voluntary, but it is necessary in order to handle an enquiry submitted through the contact form or the request-for-quotation form.

7. Cookies

The website uses cookies only to the extent necessary for it to function correctly (technical cookies), and browser storage (localStorage) only to remember the chosen language version. The anonymous measurement of basic conversion events uses neither advertising cookies nor user identifiers. The website does not use marketing or profiling cookies. You can change your cookie settings at any time in your web browser.

8. Contacting us about data protection

For any matters relating to the processing of personal data, you may contact the controller in writing at its registered office (ul. Gorczycowa 2A/1, 81-591 Gdynia, Poland) or by e-mail at biuro@nowaenergiasa.com.

9. Changes to this privacy policy

The controller reserves the right to amend this privacy policy. The current version of the policy is always available on this page.