Privacy Policy
We look after other people’s data every day, so we take our own just as seriously. Here we explain, in plain language, what data we collect from you, why, on what legal basis and what you can do about it.
Who is the controller of your data
The controller of your personal data is Elementrica sp. z o.o., ul. Podole 60, 30-394 Kraków, Poland, tax ID (NIP) 6762627485 (the "Elementrica" or "we").
For anything to do with personal data, write to contact@elementrica.com or call +48 12 400 4777. We reply within 24 hours.
What data we collect
We collect only what we need to contact you and deliver the service. In practice that is:
- Data from the consultation or contact form: your name, email address, phone number and the content of your message.
- Correspondence data: whatever you write to us by email or tell us over the phone.
- Service and billing data: company details and contact persons on the client side, needed to conclude and perform the contract and to issue an invoice.
- Technical site data: server logs (IP address, date and type of request, browser information) and data from cookies, which we describe in our Cookie Policy.
We do not profile you and we do not make decisions about you by automated means alone.
For what purpose and on what basis
Every processing activity has a specific purpose and a legal basis under Article 6 of the GDPR:
- Answering your inquiry and business contact (Art. 6(1)(f), our legitimate interest in handling your request).
- Concluding and performing a service contract, for example a penetration test, audit or training (Art. 6(1)(b)).
- Legal obligations, including tax and accounting settlements (Art. 6(1)(c)).
- Statistics, marketing and cookies that require consent, based on your consent given in the Cookiebot banner (Art. 6(1)(a)). You can withdraw consent at any time.
- Establishing, pursuing or defending claims and site security (Art. 6(1)(f)).
Who we share data with
We do not sell your data. We share it only with trusted providers who help us run the business, and only to the extent needed for that:
- Hosting, content delivery and attack protection provider (Cloudflare, Inc.), which keeps this site running.
- Cookiebot (Usercentrics), which handles cookie consent.
- Resend, which delivers the messages sent from our contact forms.
- Email and IT tool providers we use to communicate and work.
With providers that process data on our behalf we have data processing agreements in place.
How long we keep data
We keep data only as long as needed for the purpose we collected it for:
- Billing documents: for the period required by tax law, usually 5 years from the end of the year in which the tax obligation arose.
- Cookie and consent data: for the period stated in our Cookie Policy or until you withdraw consent.
Your rights
In connection with the processing of your data you have the right to:
- access your data and obtain a copy of it,
- rectify inaccurate data or complete incomplete data,
- erase your data (the "right to be forgotten"),
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, write to contact@elementrica.com.
How we protect data
We apply technical and organizational measures appropriate to the risk: encryption in transit (HTTPS), access control based on the principle of least privilege and regular security reviews. Providing your data is voluntary, but without contact details we cannot answer your inquiry, and without contract data we cannot deliver the service.
Changes to this policy
We may update this policy when the law or the way the site works changes. The current version is always available at this address, and you will find the date of the last change at the top of the page.