1. Data Controller & Contact
The controller of your personal data is Michał Tutaj, conducting business activity under the company name HD Energy Michał Tutaj, Tax ID (NIP): 6772445219, REGON: 383821651.
Contact regarding privacy and exercising your data rights: info@hdenergy.pl.
This policy applies to the HD Energy website operating under the domain hdenergy.pl.
2. Data Related to Website Usage
Your browser transmits technical data necessary to provide access to the website. Server logs may record: IP address, request date and time, requested resource URL, browser and operating system details, response status, and referrer URL.
This data is used to provide the service, diagnose technical issues, and safeguard against abuse. The legal basis for processing is Art. 6(1)(f) GDPR — legitimate interests of the controller in ensuring the efficient and secure operation of the website.
Configurator selections are handled locally in your browser. In the current release, the reservation form is demonstrative: entered details remain in the active browser session and are not transmitted to the controller. A displayed confirmation does not constitute a completed order, an email transmission, or payment execution.
3. Inquiries & Correspondence
When contacting us via email (info@hdenergy.pl) or phone, we process your contact details and message contents (name, email address, phone number, and inquiry context).
When requesting an offer or steps leading to contract conclusion, the legal basis is Art. 6(1)(b) GDPR. Other correspondence is processed under Art. 6(1)(f) GDPR (legitimate interest in communication and response). Establishing, exercising, or defending legal claims is based on Art. 6(1)(f) GDPR.
4. Data Recipients
Data may be shared with hosting, email, and technical infrastructure providers to the extent necessary to deliver their services, as well as legal advisors where required.
Hosting and email services: JCHost.pl — Marcin Ćwiertnia JC HOST.PL, ul. Wspólna 11, 32-085 Modlniczka, Poland (contact: info@hdenergy.pl).
All fonts and media assets are self-hosted locally without third-party CDN transfers.
5. Storage Retention Periods
Server logs are retained for 30 days. Information regarding specific security incidents may be retained longer if required to investigate or defend against claims.
General correspondence is retained for the duration of the matter and for 30 days following its conclusion, or for the duration of applicable statutory limitation periods if relating to contracts or claims.
6. Cookies & Tracking Technologies
The website does not employ analytics or advertising cookies (no Google Analytics, Meta Pixel, etc.). Selections in the configurator are not stored in persistent cookies or localStorage.
Strictly necessary technical functions operate without prior consent. Any future optional technologies requiring consent will only be activated following affirmative consent.
7. External Services & International Transfers
Fonts and media assets are served directly from our own hosting infrastructure; loading them does not establish connections to Google Fonts or other third-party servers.
No personal data is transferred outside the European Economic Area (EEA).
8. Your Rights Under GDPR
Under GDPR, you have the right to access, rectify, erase, or restrict the processing of your data, the right to object to processing based on legitimate interests, and data portability rights where applicable.
To exercise your rights, contact us at: info@hdenergy.pl. You also have the right to lodge a complaint with the relevant data protection authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych).
9. Automated Decision-Making & Updates
We do not engage in automated decision-making or behavioral advertising profiling that produces legal or similarly significant effects.
This policy is updated in accordance with changes to website capabilities. Future deployment of live payments, automated orders, or integrated external tools will be accompanied by updated disclosures.