Privacy Policy

1. Controller and contact

EcoPIR is responsible for the personal data described in this policy. For privacy questions or requests, email [email protected].

2. Data, purposes and legal bases

• Email enquiries: we receive your email address, name and any project, company or other details you choose to provide. We use them to answer questions and discuss products. The basis is our legitimate interest in handling correspondence (Article 6(1)(f) GDPR), or taking steps at your request before a contract where applicable (Article 6(1)(b)).
• Website operation and security: technical records may include IP address, request time, requested URL, browser information and errors. We use these records to deliver the site, diagnose faults and protect against misuse, based on our legitimate interests in a reliable and secure service (Article 6(1)(f)).
• Optional analytics: with your consent, Google Analytics helps us understand visits, page use, referral sources, device/browser information and approximate location. Cookie identifiers may be processed. The basis is consent (Article 6(1)(a)).
• Cookie choices: the consent system stores your selection and may keep a record of the choice, time and consent identifier to apply and demonstrate it. This supports our legal accountability obligations (Article 6(1)(c)).

You do not need to send us personal data to read the site. Providing enquiry details is voluntary, but we need a reply address and enough information to answer. Please avoid sending sensitive personal information that is not needed for your enquiry.

3. Recipients and international processing

Data may be handled by hosting, email, IT support and backup providers supporting EcoPIR, and by authorised people dealing with your enquiry. Information may also be disclosed where required by law or necessary to establish or defend claims.

If you allow analytics, Google processes analytics information. Its infrastructure and support operations may involve processing outside the European Economic Area, including the United States. Google describes the applicable transfer mechanisms and safeguards in its international data transfer information. You can also read how Google uses data from partner sites. Contact us for information about safeguards relevant to your data.

4. How long data are kept

Enquiry correspondence is kept for the time needed to handle the enquiry and related follow-up. Where correspondence forms part of a transaction or is needed for a dispute, retention is determined by the applicable record-keeping duties and limitation periods. Technical logs and backups are retained according to operational, security and recovery needs; relevant records may be kept longer to investigate an incident. We do not state a fixed period where it depends on the service or purpose.

Cookie lifetimes are listed in the Cookie Policy. They are separate from the retention of analytics records on Google’s servers. You may ask us about retention relevant to a specific enquiry or processing activity.

5. Your rights

Where the GDPR applies, you may request access, correction, deletion, restriction or portability, subject to the conditions for each right. You may object to processing based on legitimate interests. You can withdraw analytics consent through Cookie Settings at any time; withdrawal does not affect the lawfulness of earlier processing. We may need proportionate information to verify a request.

You may complain to the data protection authority in your habitual residence, workplace or the place of an alleged infringement. In Poland, this is the President of the Personal Data Protection Office (UODO).

6. Scope and updates

This policy concerns ecopir.eu and enquiries sent to EcoPIR. External websites have their own privacy notices. We may update this policy when the website, processing activities or legal requirements change; the date above identifies the current version.