Privacy Policy
This page explains how we process personal data of people using eco-sfi.com, in line with the GDPR (Regulation (EU) 2016/679).
Last updated: October 4, 2026
1. Data controller
The controller of personal data is ECO - SOLUTIONS FOR INDUSTRY Spółka z ograniczoną odpowiedzialnością, located at: ul. Żurawia 22 / 704, 00-515 Warszawa, tax ID (NIP): 7011153946, KRS: 0001045631, REGON: 525771580 ("ECO-SFI").
For any matter concerning personal data, contact us through the contact form in the Contact section.
2. What data we process and why
- Contact form: your name, email address and the content of your message. We process it to answer your enquiry and keep the correspondence (Art. 6(1)(f) GDPR, our legitimate interest, or Art. 6(1)(b) where the enquiry concerns entering into a contract).
- Email correspondence: data contained in messages sent to or by us, to hold conversations and carry out cooperation (Art. 6(1)(b) and (f) GDPR).
- Technical data: IP address, date and time of the request, browser type, collected in server logs to keep the site secure and working properly (Art. 6(1)(f) GDPR).
- Cookie choice: stored in your browser so we do not ask on every visit.
- Visit statistics (only with your consent): data about how the site is used, collected by Google Analytics, such as pages viewed, approximate location, device and browser type, and an identifier stored in a cookie. We process it to improve the site (Art. 6(1)(a) GDPR).
3. Retention
We keep contact form data and correspondence until the matter is closed, then for the limitation period of possible claims. If an enquiry leads to cooperation, we keep the data for its duration and as long as tax and accounting rules require. Server log data is kept for a short period set by the hosting service.
4. Recipients
Data may be entrusted to the service providers we use: website hosting (Cloudflare, Inc.), delivery of contact form messages (Resend) and email. They act under data processing agreements. Where data leaves the European Economic Area, we rely on GDPR mechanisms such as standard contractual clauses or an adequacy decision. We do not sell data. If you consent to analytics, statistics data is also processed by Google Ireland Limited (Google Analytics), which may transfer it to entities in the USA based on standard contractual clauses or the Data Privacy Framework.
5. Your rights
To exercise your rights, use the contact form in the Contact section.
- access to your data and a copy of it,
- rectification,
- erasure or restriction of processing,
- data portability,
- objection to processing based on legitimate interest,
- withdrawal of consent where processing is based on consent (without affecting earlier processing),
- lodging a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw) or your local data protection authority.
6. Providing data is voluntary
Providing data in the form is voluntary, but we need it to be able to reply to you.
7. Cookies and similar technologies
The site uses the technologies necessary for it to work and stores your cookie choice in your browser. With your consent we also use Google Analytics, which sets the cookies _ga and _ga_* (valid for 2 years) and is used to produce aggregated visit statistics. We do not use advertising cookies.
Analytics starts only after you click "Accept all" or switch on the "Analytics" category. You can change or withdraw your choice at any time with the cookie settings button (the icon in the corner of the page) or the "Cookie settings" link in the footer; when you withdraw consent we remove the Google Analytics cookies. You can also block or delete cookies in your browser settings.
8. Security
The site runs over an encrypted connection (HTTPS) and access to data is limited to people who need to process it.
9. Changes
We may update this policy. The current version is always available on this page, with the date of the last change.