Privacy
Policy

The controller of your personal data is:

The controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.

We process your personal data on the following legal bases:

• Article 6(1)(a) GDPR — consent of the data subject (e.g. contact form, newsletter).
• Article 6(1)(b) GDPR — performance of a contract, or steps taken at the data subject's request before entering into a contract.
• Article 6(1)(c) GDPR — compliance with a legal obligation to which the controller is subject (e.g. tax and accounting rules).
• Article 6(1)(f) GDPR — the legitimate interest of the controller (e.g. direct marketing of our own services, pursuing claims).

We process personal data for the following purposes:

3.1 Contact form

When you complete the contact form on the site, we process: your name, email address, telephone number (optional) and the content of your message. The data is processed in order to respond to your enquiry (basis: Article 6(1)(b) or (f) GDPR).

3.2 Provision of services

In connection with the provision of water treatment services, EcoWater equipment servicing, laboratory water testing and wastewater treatment biotechnology, we process the data necessary to perform the contract and issue accounting documents (basis: Article 6(1)(b) and (c) GDPR).

3.3 Marketing and communication

With your consent we may send commercial information about our services by electronic means or by telephone. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before it was withdrawn (basis: Article 6(1)(a) GDPR).

3.4 Website analytics

We use analytics tools (Google Analytics) to analyse traffic on the site. The data is processed in an anonymised or pseudonymised form. Details of cookies are set out in section 7 (basis: Article 6(1)(f) GDPR).

Under the GDPR you have the following rights:

Your personal data may be transferred to the following categories of recipients:

• IT service providers — hosting companies and providers of email and CRM systems, acting as processors under data processing agreements.
• Providers of accounting and legal services — to the extent necessary to fulfil legal and contractual obligations.
• Commercial partners — where fulfilling orders requires cooperation with external entities (e.g. EcoWater Systems, GBA Polska laboratories, BIATECH), solely to the extent necessary to deliver the service.
• Public authorities — where required by law or by a decision of an authorised body.

We do not sell personal data to third parties for marketing purposes.

• Contact form data: for the duration of the correspondence and for up to 3 years from the last contact (legitimate interest — potential claims).
• Contract and invoice data: 5 years from the end of the tax year in which the document was issued (an obligation arising from the law).
• Marketing data: until consent is withdrawn or an effective objection is raised.
• Analytics data (cookies): in accordance with the cookie policy — see section 7.

Our website uses cookies — small text files saved on your device.

7.1 Types of cookies

7.2 Managing cookies

You can change your cookie settings at any time in your web browser or using our cookie banner. Disabling essential cookies may make the site harder to use.

7.3 Google Analytics

We use Google Analytics 4 (GA4) from Google LLC. The data is processed on Google's servers. Google LLC is certified under the EU-US Data Privacy Framework. You can install the Google Analytics opt-out add-on.

We apply appropriate technical and organisational security measures to protect your data against unauthorised access, loss or destruction, including:

• Encryption of data transmission using TLS/SSL (HTTPS).
• Access control for systems processing personal data.
• Regular backups and software updates.
• Staff training in personal data protection.
• A password policy and multi-factor authentication in internal systems.

You can contact us on personal data protection matters:

We will respond to your request within 30 days of receiving it. For complex or numerous requests this period may be extended by a further 2 months, and we will inform you of this and give our reasons.

We reserve the right to amend this Privacy Policy. We will inform you of any significant changes by clearly marking the date of the last update on this page or by other appropriate means of communication.

We encourage you to check this page regularly. Continued use of the site after changes have been made means you accept them, to the extent permitted by law.