Privacy Policy

Last updated: 20 July 2026.

1. Data Controller

The controller of personal data collected through this website is EVCON Spółka z ograniczoną odpowiedzialnością with its registered office at Al. Pokoju 18D, 31-564 Kraków, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0000988565, NIP 676-262-40-44, REGON 522901992, share capital: PLN 5,000 (“EVCON”, “we”, “us”).

In all matters concerning personal data you can contact us at enquiries@evcon.pl.

2. What Data We Collect

  • Contact form: name, email address, company name (optional), and the content of your message.
  • Newsletter: your email address.
  • Server logs: our hosting provider (Netlify) automatically records basic technical data such as IP address, browser type, and pages requested, for security and operational purposes.

Providing your data is voluntary, but it is necessary if you want us to respond to an enquiry or send you the newsletter. This website does not currently use any analytics or marketing tools.

3. Purposes and Legal Bases of Processing

  • Responding to enquiries submitted via the contact form or email — Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6(1)(f) GDPR (our legitimate interest in handling correspondence).
  • Sending the newsletter to subscribers — Art. 6(1)(a) GDPR (your consent, given by signing up). You can withdraw consent at any time.
  • Website security and operation (server logs) — Art. 6(1)(f) GDPR (our legitimate interest in keeping the website secure and available).
  • Establishing, pursuing, or defending legal claims — Art. 6(1)(f) GDPR.

4. Recipients of Data

We do not sell personal data. We share it only with service providers who process it on our behalf:

  • EmailJS — delivery of contact form submissions to our mailbox.
  • Mailchimp (Intuit Inc.) — newsletter management and distribution.
  • Calendly — scheduling consultations, if you choose to book a call.
  • Cloudinary — hosting of images displayed on the website (your browser requests images directly from Cloudinary, which involves your IP address).
  • Netlify — website hosting and server logs.

Each provider operates under its own privacy policy and a data processing agreement where required.

5. International Data Transfers

Some of the providers listed above are established in the United States. Where personal data is transferred outside the European Economic Area, the transfer is based on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. You can request more information about the safeguards applied by contacting us.

6. How Long We Keep Data

  • Contact enquiries: for the time needed to handle the enquiry and up to 12 months afterwards, unless the correspondence leads to a contract or a legal claim requires longer retention.
  • Newsletter data: until you unsubscribe or we discontinue the newsletter.
  • Server logs: for the period set by our hosting provider for security purposes.

7. Your Rights

Under the GDPR you have the right to:

  • access your personal data and obtain a copy of it,
  • rectify (correct) inaccurate data,
  • request erasure of your data,
  • request restriction of processing,
  • object to processing based on legitimate interest,
  • receive your data in a portable format (data portability),
  • withdraw consent at any time (for processing based on consent), without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at enquiries@evcon.pl. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. Newsletter

You can unsubscribe from the newsletter at any time using the link included in every email, or by contacting us. Our newsletter provider (Mailchimp) may collect statistics on whether emails are opened and which links are clicked; this information helps us understand what content is useful.

9. Cookies and Local Storage

This website does not currently use analytics or marketing cookies. The only information stored in your browser is your response to the cookie banner, kept in your browser’s local storage so we do not ask you repeatedly. Third-party services embedded on or linked from this site (e.g. Calendly, Mailchimp) may set their own cookies when you use them, under their own policies.

You can change your choice at any time by clearing this website’s site data in your browser settings, after which the banner will be shown again. If we introduce analytics in the future, we will ask for your consent before any analytics cookies are set.

10. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to This Policy

We may update this policy when our website or legal requirements change. The current version, with its last-updated date, is always available on this page.