Privacy Policy - EKOKONSULT

. General Information

This Privacy Policy is addressed to all users of the website available at https://ekokonsult.eu (hereinafter: the “Website”). This document sets out the rules for the processing of personal data of Website users and the rights granted to data subjects, in accordance with Regulation (EU) 2016/679 (GDPR).

2. Data Controller

The controller of your personal data is: EKOKONSULT Joanna Przybyłowicz ul. Rudnowska 32B, 67-200, NIP (Tax ID): 6842096498, REGON: 020443992, Email: kontakt@ekokonsult.eu.

3. Scope of Processed Data

The Controller may process the following personal data:

first and last name,
email address,
phone number,
IP address and technical data (browser, operating system, device),
data derived from cookies,
marketing preferences (e.g. newsletter subscription – in the future).

4. Methods and Sources of Data Collection

Personal data may be collected:

directly from the user (e.g. via the contact form),
automatically through cookies and analytical tools,
via social media platforms (e.g. Facebook),
during events, contests, or marketing campaigns,
from third parties, who have lawfully shared your data (e.g. to request a service offer).

Providing your personal data is voluntary but may be necessary to use certain features of the Website (e.g. sending an inquiry). Failure to provide required data may prevent the fulfilment of your request.

5. Purposes and Legal Basis of Data Processing

Your personal data may be processed for the following purposes:

to respond to your inquiry – Art. 6(1)(b) GDPR,
to handle service/order/offer requests – Art. 6(1)(b) GDPR,
for direct marketing purposes – Art. 6(1)(f) GDPR,
for remarketing activities (Google Ads, Meta Pixel) – Art. 6(1)(a) or (f) GDPR,
for email/newsletter communication – Art. 6(1)(a) GDPR,
for statistical and Website improvement purposes – Art. 6(1)(f) GDPR,
to fulfil legal obligations (e.g. tax-related) – Art. 6(1)(c) GDPR,
to establish or defend legal claims – Art. 6(1)(f) GDPR.

6. Data Recipients and Transfer Outside the EEA

Your personal data may be shared with the following categories of recipients:

IT service providers, hosting and email service providers,
advertising and marketing agencies,
providers of analytical tools (e.g. Google, Meta),
other trusted entities under data processing agreements.

In connection with the use of Google and Meta tools, data may be transferred outside the European Economic Area (e.g. to the USA). In such cases, appropriate safeguards are applied – in particular, Standard Contractual Clauses (SCCs) approved by the European Commission. You have the right to obtain a copy of these safeguards by contacting us.

7. Data Retention Perio

Personal data will be retained:

for as long as necessary to achieve the purpose for which it was collected,
until the consent is withdrawn (if that was the basis for processing),
for a period required by applicable law (e.g. tax or accounting regulations),
until the limitation period for potential claims expires.

8. Cookies and Tracking Technologies

The Website uses cookies for the following purposes:

ensuring correct functioning of the Website (technical cookies),
collecting statistics and analytics (Google Analytics),
conducting advertising and remarketing campaigns (Google Ads, Meta Pixel).

The use of cookies (other than technical) requires your consent. You can manage cookie settings in your web browser at any time.

9. Automated Decision-Making and Profiling

The Controller may use profiling for marketing purposes (e.g. adjusting advertising content to user interests).
However, no decisions producing legal effects are made solely based on automated processing.

The legal basis for profiling is the user’s consent or the Controller’s legitimate interest.

10. Security Measures

The Controller implements appropriate technical and organizational measures to ensure the security of personal data processing, in accordance with Art. 32 GDPR. Personal data is protected against unauthorized access, loss, destruction, or disclosure.

11. Rights of Data Subject

You have the following rights:

Right of access to your data – Art. 15 GDPR
Right to rectify your data – Art. 16 GDPR
Right to erasure (“right to be forgotten”) – Art. 17 GDPR
Right to restrict processing – Art. 18 GDPR
Right to data portability – Art. 20 GDPR
Right to object to processing – Art. 21 GDPR
Right to withdraw consent at any time – Art. 7(3) GDPR
Right to lodge a complaint with a supervisory authority – Art. 77 GDPR

You may file a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw) or with a supervisory authority in your EU member state of residence.

To exercise your rights, please contact us at: kontakt@ekokonsult.eu

12. Data Protection Officer

The Controller has not appointed a Data Protection Officer. All inquiries should be sent to: kontakt@ekokonsult.eu

13. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy. The current version will always be available on the Website. Changes become effective upon publication.