Privacy policy

Version: 1.1  ·  Last updated: 2026-05-07

This privacy policy describes how personal data of users of the EtherLight.pl website is processed. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.

1. Controller information

The controller of your personal data is:

• Company: [COMPANY NAME]
• Address: [STREET, POSTAL CODE, CITY], Poland
• Tax ID (NIP): [NIP]  ·  REGON: [REGON]
• Contact: [CONTACT EMAIL]

2. Purposes and legal bases

We process data for the following purposes:

• Handling inquiries (contact form) — Article 6(1)(f) GDPR, legitimate interest of the controller in responding to messages.
• Newsletter — Article 6(1)(a) GDPR, on the basis of voluntary consent (in conjunction with Article 10 of the Polish Act on Electronic Service Provision and Article 172 of the Polish Electronic Communications Law).
• B2B services — Article 6(1)(b) GDPR, steps necessary to enter into or perform a contract.
• Site security — Article 6(1)(f) GDPR, technical logs and protection against attacks. IP addresses are anonymised before storage (last octet zeroed out).

3. Data retention

• Correspondence: up to 24 months from the last contact.
• Newsletter: until consent is withdrawn.
• Tax data and invoices: 5 years from the end of the financial year (as required by tax law).
• Technical logs (anonymised IP, user-agent): up to 12 months.

4. Recipients

Data may be entrusted to the following processors (Article 28 GDPR):

• Hosting provider: [NAME, e.g. Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA].
• Database provider: [NAME, e.g. MongoDB Atlas — EU/Frankfurt region].
• Email (SMTP) provider: [NAME].
• IT, legal and accounting service providers — to the extent necessary to provide their services.

For transfers of data outside the European Economic Area, we apply safeguards consistent with the GDPR (European Commission adequacy decisions, standard contractual clauses, EU-U.S. Data Privacy Framework).

5. Your rights

In connection with the processing, you have the right to:

• access your data (Article 15 GDPR),
• rectification (Article 16 GDPR),
• erasure — “right to be forgotten” (Article 17 GDPR),
• restriction of processing (Article 18 GDPR),
• data portability (Article 20 GDPR),
• object to processing (Article 21 GDPR),
• withdraw consent at any time (Article 7(3) GDPR),
• lodge a complaint with the President of the Personal Data Protection Office (UODO): uodo.gov.pl.

To exercise these rights, contact us at [CONTACT EMAIL]. We respond without undue delay, no later than one month from receipt of the request.

6. Cookies

EtherLight.pl uses only strictly necessary cookies (e.g. remembering the selected language). We do not use tracking scripts such as Google Analytics, Meta Pixel, etc. — therefore no consent banner is required. Should such tools be introduced in the future, this policy will be updated and users will be asked for consent.

Users may block cookies in their browser settings. This may limit some site functionality.

7. Changes to this policy

The Controller reserves the right to introduce changes to this privacy policy. The current version is always available at this address. The date of the last update is indicated at the beginning of the document.