1.Data controller
The controller of your personal data is Scavolt P.S.A. (simple joint-stock company) with its registered office in Gdynia, Al. Zwycięstwa 241/13, 81-521 Gdynia, Poland, entered in the National Court Register (KRS) under no. 0001019380, NIP (tax ID) 5842830934, REGON 524478977 (the “Controller” or “Scavolt”).
For all matters concerning personal data, you can contact us by email: contact@scavolt.com or by post at our registered office. The Controller has not appointed a data protection officer.
2.Scope of the policy
This policy describes how we process personal data in connection with the use of www.scavolt.com and its language versions (the “Website”), contact with us and business cooperation. We apply Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act and the Polish Electronic Communications Law.
The Website may contain links to other sites, e.g. the RTB project assessment form or partner websites. Those sites have their own privacy policies.
3.What data we process
- contact data – name, email address, phone number, company name and job title;
- content of correspondence – including project information provided in the enquiry;
- contract-related data – data of representatives and contact persons of customers, suppliers and partners;
- technical data – IP address, browser and device type, server logs, data stored in cookies and similar technologies.
We receive data directly from you and, for people representing companies, also from the employer or principal who named you as a contact person.
4.Purposes and legal bases
5.Retention period
- correspondence and enquiries – for as long as needed to handle it and then for 12 months after the last contact, unless it turns into cooperation;
- contracts and offers – for the duration of the contract and then until claims become time-barred (as a rule 3 years for business-related claims, Art. 118 of the Polish Civil Code);
- accounting and tax records – for 5 years from the end of the year in which the tax payment deadline expired or the document was prepared;
- marketing – until you object or withdraw consent;
- cookie data – for the periods set out in the Cookie policy;
- server logs – no longer than 12 months.
6.Recipients of data
We do not sell personal data. Data may be received only by entities that help us run our business, to the extent necessary and under agreements ensuring its protection:
- IT service providers – hosting, email, website maintenance and support;
- providers of analytics and form-protection tools – only as described in the Cookie policy;
- accounting firm, legal and tax advisers;
- construction partners and equipment suppliers – where necessary to prepare an offer or perform a contract;
- courier and postal companies;
- public authorities – where required by law.
7.Transfers outside the EEA
Some providers (e.g. Google, Meta) may process data outside the European Economic Area, including in the USA. In such cases the transfer is based on a European Commission adequacy decision – including the decision of 10 July 2023 on the EU-U.S. Data Privacy Framework for certified entities – or on standard contractual clauses approved by the Commission (Art. 46(2)(c) GDPR). You can obtain a copy of the safeguards by writing to contact@scavolt.com.
8.Your rights
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy (Art. 15 GDPR);
- rectification (Art. 16 GDPR);
- erasure (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- portability of data processed on the basis of consent or contract (Art. 20 GDPR);
- object to processing based on legitimate interest, and to direct marketing at any time without giving reasons (Art. 21 GDPR);
- withdraw consent at any time – without affecting the lawfulness of processing carried out before withdrawal (Art. 7(3) GDPR).
To exercise your rights, write to contact@scavolt.com. We will reply without undue delay and no later than within one month.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or with the supervisory authority in your country of residence.
9.Voluntary provision of data
Providing data is voluntary but necessary for us to reply to an enquiry, prepare an offer or conclude a contract. Providing data required by law (e.g. for invoicing) is a statutory obligation.
10.Automated decisions and profiling
We do not take decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Marketing tools that use ad profiling are enabled only after you consent in the cookie settings.
11.Data security
We apply appropriate technical and organisational measures, including encrypted connections (TLS), access control, backups and confidentiality obligations for authorised persons.
12.Cookies
The Website uses cookies and similar technologies. Details, including the list of cookies and how to manage consent, can be found in the Cookie policy.
13.Changes to the policy
We update this policy when laws or our processing change. The current version is always available on the Website, and we will announce material changes on the site.