Last updated: 01.12.2025

This Privacy Policy explains how AzraEnergy (“we”, “us”, “our”) collects, uses and protects your personal data when you visit our website azraenergy.com (the “Website”) or contact us via email or phone.

We process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and relevant Polish data protection laws.

By using our Website and services, you acknowledge that you have read and understood this Privacy Policy.

1. Data controller

The data controller responsible for processing your personal data is:

AzraEnergy
Warsaw, Poland
Email: info@azraenergy.com
Phone: +48 573 433 818

If you have any questions about this Privacy Policy or our use of your personal data, you can contact us using the details above.

2. How we collect personal data

We collect personal data in the following ways:

  • When you contact us via email, phone or the contact form on our Website
  • When you request an offer or information about our services
  • When you sign up for communications (if such options are available)
  • Automatically, through cookies and similar technologies when you use the Website

3. Types of personal data we collect

Depending on how you interact with us, we may process the following categories of personal data:

Identification and contact details

  • Name
  • Phone number
  • Email address

Communication data

  • Content of your messages, inquiries and any information you provide about your project
  • Technical information included in emails (e.g. date, time, sender/recipient)

Website usage and technical data

  • IP address
  • Browser type and version
  • Operating system
  • Device information
  • Referrer URL
  • Pages visited, time and duration of visit
  • Cookie identifiers and similar online identifiers

We do not intentionally collect special categories of data (such as data about health, religious beliefs, etc.). Please do not send such information unless it is strictly necessary and you understand that you do so voluntarily.

4. Purposes and legal bases for processing

We process your personal data only when we have a lawful basis under the GDPR. Depending on the situation, we rely on the following legal bases:

Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR)

  • To respond to your inquiries and requests
  • To prepare and send you offers, proposals or contracts
  • To perform our obligations under a contract for services

Legitimate interests (Art. 6(1)(f) GDPR)

  • To communicate with you as a business contact
  • To manage and improve our Website, services and customer relationships
  • To protect our rights, property and security
  • To prevent misuse or fraud
    Our legitimate interests are balanced against your interests and rights, and we only process data on this basis where our interests are not overridden by yours.

Compliance with legal obligations (Art. 6(1)(c) GDPR)

  • To comply with accounting, tax and other legal requirements
  • To respond to lawful requests from public authorities

Consent (Art. 6(1)(a) GDPR)

  • If we use optional cookies or trackers that require consent
  • If we send marketing communications by email or phone where required by law
    Where processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How we use your personal data

We use your personal data for the following purposes:

  • To provide, manage and develop our solar-related services
  • To answer your questions and communicate with you
  • To prepare offers and service proposals based on the information you provide
  • To manage our business relationship with you
  • To operate, maintain and improve the Website
  • To analyse how the Website is used and ensure its security and performance
  • To comply with legal obligations and defend legal claims

We do not sell your personal data.

6. Cookies and similar technologies

Our Website may use cookies and similar technologies to:

  • Enable basic functionality of the site
  • Remember your preferences (such as language)
  • Analyse Website traffic and performance
  • Improve user experience

Cookies are small text files stored on your device when you visit a website. Some cookies are necessary for the Website to function properly and do not require your consent. Other cookies (for example, for analytics or marketing) may require your consent under applicable law.

You can manage your cookie preferences through your browser settings. Most browsers allow you to:

  • Block all cookies
  • Delete existing cookies
  • Receive a notification before a cookie is stored

Please note that disabling certain cookies may affect the functionality of the Website.

If we use third-party analytics or tools (such as Google Analytics), we will do so in accordance with data protection law and, where required, on the basis of your consent. In such cases, the respective providers may act as our data processors or, in some circumstances, as separate controllers with their own privacy policies.

7. Data recipients

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described in this Privacy Policy:

Service providers and contractors

  • Providers of IT, hosting and maintenance services
  • Email and communication service providers
  • Professional advisers (e.g. legal, accounting)

Public authorities

  • When required by law or in response to lawful requests
  • To protect our rights, property or safety or that of others

We require our service providers to process personal data only in accordance with our instructions, to keep it secure and to comply with applicable data protection laws.

We do not transfer or disclose your data to third parties for their own marketing purposes.

8. International data transfers

Our Website and data are primarily hosted and processed within the European Economic Area (EEA). If, in specific cases, personal data is transferred outside the EEA (for example, through IT service providers), such transfers will only take place where an adequate level of protection is ensured, for example by:

  • An adequacy decision of the European Commission, or
  • Standard Contractual Clauses approved by the European Commission, or
  • Other appropriate safeguards as provided under the GDPR.

You can contact us for more information about international transfers and the safeguards in place.

9. Data retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, in particular:

  • Contact and communication data: kept for the duration of our communication and, if a contract is concluded, for the duration of the contractual relationship and applicable limitation periods.
  • Contract and billing data: kept for the period required by accounting and tax laws (often 5–10 years, depending on the type of document and applicable law).
  • Technical and website usage data: kept for a limited period necessary for security, analytics and improvement of the Website, typically in aggregated or pseudonymised form where possible.

When personal data is no longer needed for the purposes for which it was collected, we will delete or anonymise it, unless we have a legal obligation to keep it longer.

10. Your rights under the GDPR

As a data subject, you have the following rights in relation to your personal data:

  • Right of access
    You have the right to obtain confirmation whether we process your personal data and, if so, to receive a copy and information about the processing.
  • Right to rectification
    You have the right to request that inaccurate or incomplete personal data be corrected or completed.
  • Right to erasure (“right to be forgotten”)
    You have the right to request the deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purposes for which it was collected, or you have withdrawn your consent (where processing was based on consent).
  • Right to restriction of processing
    You have the right to request that we restrict the processing of your personal data in certain situations, for example while the accuracy of the data is being verified or if you object to processing based on legitimate interests.
  • Right to data portability
    Where processing is based on your consent or on a contract and is carried out by automated means, you have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted directly to another controller.
  • Right to object
    You have the right to object, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interests. We will no longer process the data unless we demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
  • Right to withdraw consent
    Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, please contact us at:
Email: info@azraenergy.com
Phone: +48 573 433 818

We may need to verify your identity before responding to certain requests.

11. Right to lodge a complaint

If you believe that your personal data is being processed in violation of data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

In Poland, the competent supervisory authority is:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
Stawki 2
00-193 Warsaw
Poland
Website: uodo.gov.pl

We would, however, appreciate the chance to address your concerns before you approach the supervisory authority, so please contact us in the first instance.

12. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. These measures may include, for example:

  • Secure servers and encrypted connections where appropriate
  • Access controls and limited access to personal data
  • Regular monitoring of our systems and procedures

Despite these measures, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s data

Our Website and services are not directed at persons under 18 years of age, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such data.

14. Links to other websites

Our Website may contain links to websites of third parties. We are not responsible for the privacy practices or content of such external websites. We encourage you to read the privacy policies of any websites you visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in our practices or in applicable law. The updated version will be published on our Website with a revised “Last updated” date.

We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.

16. How to contact us

If you have any questions about this Privacy Policy or our processing of your personal data, or if you wish to exercise your rights, you can contact us at:

AzraEnergy
Warsaw, Poland
Email: info@azraenergy.com
Phone: +48 573 433 818

We will do our best to respond to your request as soon as reasonably possible and within the time limits required by law.