Privacy Policy

The administrator of your personal data is ENTHRUST ENERGY POLSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with registered office at UL. WOLNOŚĆ 6/44, 01-018 WARSZAWA, Poland, NIP: 5273141328. We are committed to protecting your privacy and ensuring the security of your personal information in accordance with the General Data Protection Regulation (GDPR).

We collect the following categories of personal data:

• Contact Form Data: Name, email address, company name, and phone number provided when you submit inquiries through our contact forms.
• Technical Data: IP address, browser type and version, device information, operating system, and cookies for website performance optimization and security purposes.

Your personal data is processed for the following purposes:

• Handling business inquiries and responding to your requests for information about our energy optimization solutions.
• Conducting energy audits and preparing customized proposals for your facility.
• Performance monitoring and website optimization to improve user experience.
• Compliance with legal and tax obligations as required by applicable law.
• Marketing communications (only with your explicit consent).

We process your personal data based on the following legal grounds:

• Article 6(1)(b) GDPR: Processing necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., responding to inquiries, preparing energy audit proposals).
• Article 6(1)(f) GDPR: Processing necessary for our legitimate interests, such as responding to messages, improving our services, and direct marketing of our products.
• Article 6(1)(a) GDPR: Processing based on your consent for specific purposes, such as marketing communications.
• Article 6(1)(c) GDPR: Processing necessary for compliance with legal obligations to which we are subject.

We use professional external services to maintain our operations and ensure high-quality service. The following third-party providers may process your data on our behalf:

• Vercel (Hosting & Infrastructure): Our website is hosted on Vercel's infrastructure. Vercel processes technical logs including IP addresses and browser data for security purposes and site delivery.
• Resend.com (Form Delivery): Contact form submissions are processed via Resend.com to deliver emails to our administrators. This includes email addresses, names, and message content.
• Google Analytics (Analytical Data): We use Google Analytics to understand user behavior and improve our website. Google Analytics processes anonymized IP addresses, session data, and interaction history using Analytical Cookies. Google Analytics cookies include: _ga, _ga_*, _gid.
• Google Search Console (SEO Analysis): We use Google Search Console for SEO analysis, which processes general technical data and search performance metrics to help us optimize the site.

Some of our third-party service providers (including Google, Resend, and Vercel) are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs): We rely on EU-approved Standard Contractual Clauses as the legal mechanism for transferring personal data to third countries, ensuring a high level of data protection.
• Adequacy Decisions: Where applicable, we transfer data to countries that have received an adequacy decision from the European Commission.
• Additional Safeguards: Our service providers implement additional technical and organizational measures to protect your data during international transfers.

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You have the right to obtain confirmation whether your personal data is being processed and to access that data.
• Right to Rectification: You have the right to request correction of inaccurate personal data and completion of incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data ('right to be forgotten') under certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data in certain situations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data, including for direct marketing purposes.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych).

Our website uses cookies to enhance your browsing experience:

• Necessary Cookies: Essential cookies required for the basic functionality of our website. These cannot be disabled as they are necessary for the site to work properly.
• Analytical Cookies (Google Analytics): We use Google Analytics cookies to collect information about how visitors use our website, including which pages are visited most often, session duration, and user interactions. This data is anonymized and helps us improve our website performance. Google Analytics cookies include: _ga, _ga_*, _gid.
• Marketing Cookies: Used to track visitors across websites to display relevant advertisements. These are only placed with your explicit consent.
• Third-Party Embedded Content Cookies: Our website may embed content from third-party services such as YouTube, Vimeo, Google Maps, and social media platforms. When you interact with this embedded content, these services may set their own cookies on your device. YouTube (owned by Google) may set cookies such as VISITOR_INFO1_LIVE, YSC, and PREF to track video playback preferences and viewing history. We have no control over these third-party cookies.

You can manage your cookie preferences through your browser settings at any time. To opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on. For YouTube cookies, you can manage your Google privacy settings at myaccount.google.com.

Our website may include embedded content and integrations with third-party services:

• YouTube Videos: We may embed YouTube videos on our website. When you view pages containing YouTube videos, YouTube (Google) may collect data about your device, estimate your location, and set cookies to track your viewing preferences. YouTube's privacy policy applies to this data collection: policies.google.com/privacy
• Social Media Integrations: Our website may include links to social media platforms (LinkedIn, Facebook, Twitter/X). When you click these links, you will be redirected to external sites governed by their own privacy policies. We do not share your personal data with these platforms unless you explicitly choose to do so.
• Google Fonts: We use Google Fonts to display typography on our website. When you access our site, your browser may connect to Google servers to load font files. Google may log your IP address and browser information. More information: developers.google.com/fonts/faq/privacy

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Business inquiries: retained for the duration of correspondence and up to 3 years after the last contact for potential follow-up.
• Contractual data: retained for the duration of the contract and for 5 years afterwards for legal compliance.
• Technical data: retained for up to 12 months for security and performance analysis.
• Google Analytics data: retained for 14 months as per our Google Analytics configuration.
• Legal obligations: retained as required by applicable tax and accounting regulations.

For any questions regarding this Privacy Policy or to exercise your data protection rights, please contact us:

We will respond to your request within 30 days as required by GDPR.