Privacy and cookie policy

1. Data controller and contact

The controller of your personal data, meaning the entity that decides how it is used, is:

For any matter concerning personal data you can write to kontakt@abc-energy.pl or send a letter to the registered address above.

We have not appointed a data protection officer, as we are not required to do so under Article 37 GDPR. Data protection matters are handled directly by the controller.

2. In short

This section is a plain language summary. It does not replace the rest of the document, but it gives you the picture quickly.

• The site has no forms and no user accounts. We do not ask you for any data in order to browse it.
• Analytics and marketing tools are off by default and start only after you give explicit consent.
• Refusing consent does not restrict access to any content on the site.
• The Google map loads only after you click a button, so nothing reaches Google without your action.
• You can withdraw consent at any time using the Privacy settings button in the site footer.

3. Purposes, legal bases and retention periods

We describe each processing purpose separately, together with the data involved, the legal basis under the GDPR and the retention period.

4. Cookies and similar technologies

Cookies are small text files saved on your device by your browser. We also use your browser's local storage to remember your consent choices. We group them into three categories:

• Necessary - required for the site to work and to remember your choice in the consent banner. They do not require consent, because without them the site could not function properly.
• Analytics - let us count visits and understand which content is useful. They run only after you give consent.
• Marketing - let us measure how well our social media activity works. They run only after you give consent.

A detailed list of cookies with their names, providers and expiry times is available on the Cookies page. You can change your decision at any time using the Privacy settings button in the footer. You can also manage and delete cookies in your browser settings. Bear in mind that clearing your browser data also removes the record of your decision, so the banner will appear again.

5. Google Analytics 4

Once you give analytics consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand how many people visit the site, where they come from and which pages they read. In this respect Google acts as a processor, under the data processing terms agreed with us.

In Google Analytics 4 IP addresses are truncated and are not stored in full. We do not combine Google Analytics data with any other data that would identify you directly, and we do not use Google advertising features.

Google Analytics scripts load only after you consent. We also use a consent management mechanism (Google Consent Mode) in which the default state is no consent. You can additionally install a browser add on that blocks Google Analytics, available at tools.google.com/dlpage/gaoptout. How Google processes data is described in the Google privacy policy.

6. Meta Pixel and our social media profiles

Once you give marketing consent we use Meta Pixel, a tool of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. It lets us see whether people who saw our content on Facebook or Instagram then visit this site, measure campaign performance and direct campaigns to the right audiences.

For the collection of data through Meta Pixel and its transfer to Meta, we and Meta Platforms Ireland Limited are joint controllers. This arrangement is set out in the Meta Controller Addendum. Meta is responsible for providing your rights under Articles 15 to 20 GDPR in relation to the data held on its side. Any further processing by Meta, including linking data to your account, follows the Meta privacy policy and is outside our control.

We do not send Meta your email address, phone number or other contact details. We do not use so called advanced matching. You can manage your advert settings directly in your Facebook or Instagram account.

We also run profiles on Facebook and Instagram. For the statistics of those profiles, which Meta provides to us in aggregated form, we are joint controllers with Meta. If you contact us by private message or comment, we process the data visible on your profile and the content of your message in order to reply, on the basis of Article 6(1)(f) GDPR.

7. Google Maps

On station pages we provide a map showing how to get there, based on Google Maps. The map does not load automatically. It is embedded only after you click the Show map button, which we treat as giving consent. Until then no data is sent to Google.

Once the map loads, Google receives your IP address and information about your browser and device, and processes it as a separate controller under the Google privacy policy. If you do not want your data to reach Google, simply do not click the button. We also give the station address as plain text.

8. Recipients of data

We do not sell your data. We share it only with parties we need in order to run the site and handle enquiries, and with public authorities where the law requires it.

9. Transfers outside the EEA

We use tools provided by companies based in the United States. This means your data may be transferred outside the European Economic Area, to Google LLC, Meta Platforms, Inc. and Cloudflare, Inc.

Transfers take place on the basis of the European Commission implementing decision of 10 July 2023 finding an adequate level of protection under the EU - US Data Privacy Framework. The companies listed are participants in that programme. Standard contractual clauses approved by the European Commission are applied in addition.

You can obtain a copy of the safeguards used by writing to kontakt@abc-energy.pl. If you do not want your data to reach these companies, do not give analytics or marketing consent. The site will work without any restrictions.

10. Profiling and automated decisions

We do not make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you, within the meaning of Article 22 GDPR.

If you give marketing consent, the data collected by Meta Pixel may be used by Meta for profiling for marketing purposes, that is, to assign you to advertising audiences based on your online behaviour. You have the right to object to such processing, and the simplest way to exercise it is to withdraw marketing consent in the privacy settings in the footer.

11. Your rights

In connection with the processing of your data you have the following rights:

To exercise any of these rights, write to kontakt@abc-energy.pl. We reply without undue delay and no later than one month after receiving the request. In complex cases that period may be extended by a further two months, and we will tell you why. Exercising your rights is free of charge.

12. Providing data is voluntary

Providing data is entirely voluntary. We have no forms and no user accounts, so you do not need to give us anything in order to use the site. If you email us, giving a return address and describing your matter is necessary for us to reply. Without it we cannot get back to you.

Giving analytics and marketing consent is completely voluntary. Refusing has no negative consequences and does not restrict access to any content on the site.

13. Data security

We apply technical and organisational measures appropriate to the risk. All communication with the site uses an encrypted HTTPS connection. Only authorised people have access to correspondence and analytics tools, and the service providers we entrust data to are contractually bound to keep it confidential and apply appropriate safeguards.

14. Children's data

The site is not aimed at children and we do not knowingly collect data of people under 16. If we find that such data has reached us without a guardian's consent, we will delete it without delay. If you are a guardian and believe we process your child's data, please contact us.

15. Links to external sites

The site contains links to external sites and profiles, including our social media profiles and Google Maps. Once you follow such a link, your data is processed by that provider under its own rules. We are not responsible for the content or privacy policies of external services, and we encourage you to read them.

16. Changes to this policy

We may update this policy when the law or the way the site works changes, for example when we add a new analytics tool. The current version is always available at this address, and the date of the last change is given at the top of the document. If a change affects the scope of your consent, we will ask you for it again in the privacy settings banner.

Document version dated 26 August 2026