Legal

Privacy Policy

How Clenviora collects, uses, and protects your personal data.

Last updated: 1 January 2025

This Privacy Policy explains how Clenviora ("we", "our", "us"), operating at clenviora.com, collects, processes, stores, and protects personal data in connection with the use of our informational website. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Polish data protection legislation.

1. Data Controller

The data controller responsible for your personal data is Clenviora, based in Warsaw, Poland. You can contact us regarding data protection matters at: info@clenviora.com

2. What Data We Collect

We may collect and process the following categories of personal data:

  • Contact form data: Name, email address, city/region, and message content submitted via our contact form.
  • Usage data: Information about how you use our website, including pages visited, time spent, and referring URLs, collected via analytics tools.
  • Technical data: IP address, browser type and version, device type, and operating system, collected automatically when you access the website.
  • Cookie data: Information stored via cookies as described in our Cookie Policy.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

  • Legitimate interests (Art. 6(1)(f)): For website analytics and improving our informational content.
  • Consent (Art. 6(1)(a)): For non-essential cookies, where you have provided explicit consent via our cookie consent tool.
  • Performance of a contract or pre-contractual steps (Art. 6(1)(b)): When you submit a contact form enquiry and we respond to your request.

4. How We Use Your Data

We use collected data for the following purposes:

  • To respond to enquiries submitted through our contact form
  • To analyse and improve the performance and content of our website
  • To comply with legal obligations
  • To detect and prevent fraud or misuse of our website

We do not use your data for automated decision-making or profiling, and we do not sell or rent your personal data to third parties.

5. Data Sharing

We may share your data with the following categories of third parties:

  • Hosting and infrastructure providers: Who provide the technical infrastructure to operate this website, under data processing agreements.
  • Analytics providers: Such as Google Analytics, for the purpose of understanding website usage (subject to your cookie consent).
  • Legal authorities: Where required by applicable law or to respond to valid legal process.

Any third-party processors are required to handle your data in accordance with this policy and applicable data protection law.

6. International Transfers

Some of our third-party providers may be located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

  • Contact form data: up to 12 months from the date of last contact
  • Analytics data: as configured by our analytics provider (typically 26 months)
  • Legal compliance data: as required by applicable law

8. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access: To request a copy of the personal data we hold about you.
  • Right to rectification: To request correction of inaccurate or incomplete data.
  • Right to erasure: To request deletion of your personal data in certain circumstances.
  • Right to restriction: To request that we restrict processing of your data in certain circumstances.
  • Right to data portability: To receive your data in a structured, commonly used format.
  • Right to object: To object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@clenviora.com. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO) at uodo.gov.pl.

9. Website Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website is served over HTTPS with TLS encryption.

10. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions about this Privacy Policy or our data practices, please contact us at:

Clenviora
Email: info@clenviora.com
Website: clenviora.com