Privacy policy
This policy explains which data we process when you use greenexperts.pl and the quotation form, why we process it and which rights you have.
1. Data controller
The data controller is Łukasz Kowalczyk, trading under the GreenExperts brand, based in Zielona Góra, Poland.
2. Data we collect
- form data: name, telephone number, email, project address, postcode, town and message;
- project information: building type and area, current heating, energy use, bills, planned equipment, budget and timing;
- enquiry-source data, where available: referring domain and campaign parameters such as UTM, gclid or fbclid;
- technical and security logs, such as IP address, browser type, request time and error data, if recorded by the hosting provider, CRM server or security infrastructure;
- aggregated website performance and visit data processed through Cloudflare Web Analytics.
3. Purposes and legal bases
| Purpose | Legal basis | Data used |
|---|---|---|
| Responding to an enquiry, contacting you and preparing a quotation | Article 6(1)(b) GDPR — steps requested before entering into a contract | Contact and project information needed for the response |
| Keeping the website and CRM secure and operational, detecting misuse | Article 6(1)(f) GDPR — the controller's legitimate interests | Technical data, logs and error information |
| Understanding the source of an enquiry and the effectiveness of information campaigns | Article 6(1)(f) GDPR | Referring domain and campaign parameters attached to the enquiry |
| Performing a contract and meeting accounting or tax duties | Article 6(1)(b) and (c) GDPR | Data of customers who enter into a contract |
| Establishing, exercising or defending legal claims | Article 6(1)(f) GDPR | Relevant data and correspondence |
| Direct marketing beyond responding to your enquiry | Article 6(1)(a) GDPR and applicable electronic-communications law — only after a separate, freely given consent | Data specified in that separate consent |
The checkbox next to the form confirms that you have read this policy and the terms. It is not marketing consent and does not replace separate consent where the law requires one.
4. Recipients
Data may be disclosed only where necessary and under appropriate arrangements to hosting, domain, security, Cloudflare Web Analytics, CRM, email, telephone and IT providers; accountants, lawyers and insurers; installers, service technicians or financing partners involved in an agreed project; and public authorities where disclosure is required by law. We do not sell personal data.
5. Transfers outside the EEA
Some infrastructure providers may process data outside the European Economic Area. Where this occurs, transfers rely on an adequacy decision, standard contractual clauses or another mechanism under Chapter V GDPR. You can ask the controller for information about the safeguards used.
6. Retention
- enquiries that do not lead to a contract: generally up to 12 months after the last contact, unless a valid objection is made earlier or data is needed for a legal claim;
- contract data: for the contract term and applicable limitation periods;
- accounting and tax records: for the period required by law;
- technical and security logs: only as long as needed for security and diagnostics under the controller's or provider's retention schedule;
- data based on consent: until consent is withdrawn, without affecting earlier lawful processing.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability of your data. You may object to processing based on legitimate interests and withdraw consent at any time where consent is the legal basis. Contact the controller using the details in section 1. We may request information needed to verify your identity.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office or the competent supervisory authority in your country.
8. Whether data is required
Providing data is voluntary. Fields marked with an asterisk are necessary to accept and answer the enquiry. Without them, we may not be able to contact you or prepare a quotation. Submitting the form does not create a paid contract.
9. Automated decisions
Form data is not used for solely automated decisions that produce legal or similarly significant effects. The calculator only provides an indicative output from the parameters entered and is not a binding offer.
10. Cookies, browser storage and analytics
Cloudflare Web Analytics. According to Cloudflare's documentation, this tool does not use cookies to track visitors, does not create cross-site profiles and collects limited visit and performance data.
Campaign parameters. UTM, gclid and fbclid parameters and the referring domain may be temporarily stored in your browser's sessionStorage. They are attached to an enquiry only if you submit the form. Session storage is generally cleared when the browser session ends.
Essential security cookies. The network-security provider may set strictly necessary cookies if a relevant protection feature is activated. They are not used for advertising. The website currently uses no marketing cookies or behavioural advertising.
11. Security and policy changes
We use organisational and technical safeguards appropriate to the risk, including HTTPS and access restrictions. This policy may be updated when website features, providers or laws change. The current version will remain available at this address.