Privacy Policy

ENERGY SAFE POWER SA
Address: ul. Wolnego 4, 40-857 Katowice, Poland
REGON: 387272610, NIP: 6342982498
Entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court in Katowice, 8th Commercial Division of the National Court Register, under KRS number 0000864340
Share capital: PLN 120,000, paid up in full.
E-mail: esp@espsa.pl
‍

1. Personal data controller

The controller of your personal data is ENERGY SAFE POWER SA (hereinafter the "Controller"), providing B2B services. You can contact us at the following e-mail address: esp@espsa.pl.

2. Scope of data processing

We process the following personal data:

• first name and surname,
• e-mail address,
• telephone number,
• company details (name, NIP tax number, registered address),
• other data provided voluntarily in the contact form.

3. Purposes of data processingWe process personal data in order to:

• handling enquiries and communicating with customers (Article 6(1)(b) GDPR),
• carrying out the steps necessary to conclude and perform contracts (Article 6(1)(b) GDPR),
• direct marketing (based on consent, Article 6(1)(a) GDPR),
• compliance with legal obligations (Article 6(1)(c) GDPR).

4. Legal bases for processingWe process data on the basis of:

• the consent of the data subject (Article 6(1)(a) GDPR),
• performance of a contract or steps taken prior to its conclusion (Article 6(1)(b) GDPR),
• legal obligations (Article 6(1)(c) GDPR),
• the legitimate interest of the Controller (Article 6(1)(f) GDPR).

5. Data recipients

Data may be transferred to entities that support us in providing our services, e.g. IT service providers, accounting, legal and hosting companies, subject to appropriate data protection measures.6. Data retention periodWe store data:

6. Data retention period

• for as long as the purpose for which they were collected is being pursued,
• until consent is withdrawn (where processing is based on consent),
• for the period required by law (e.g. tax regulations).

7. Cookies and similar technologies

This site uses cookies and your browser’s local storage. Cookies are small pieces of information stored on your device that let the site work correctly and - with your consent - measure how it is used.

We load no external tools without your consent. Until you make a choice in the banner, the site sends no requests to third-party servers and stores nothing beyond what is strictly necessary for it to work.

Necessary - required for the site to work. We store only your cookie decision, so that we do not ask again on every visit. These cannot be switched off, because without them the site would not remember your choice.

• esp_cookies - browser local storage, kept until deleted by the user, remembers the cookie decision

Analytics - loaded only after you give consent. They show us which pages are visited and where visitors come from. The data is aggregated and is not used to identify individuals.

• _ga - cookie, 2 years, distinguishes users in Google Analytics
• _ga_9JJ17Q7FPM - cookie, 2 years, maintains the measurement session state
• _gid - cookie, 24 hours, distinguishes users
• esp_zrodlo - browser session storage, until the tab is closed, remembers the source of the visit

Marketing - we currently use no tools of this kind. The category remains in the settings in case that changes.

8. Measurement tools

With your consent we use Google Tag Manager and Google Analytics 4 (property ID G-9JJ17Q7FPM). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data may be transferred to the United States. This takes place on the basis of the European Commission implementing decision of 10 July 2023 finding an adequate level of data protection under the EU-US Data Privacy Framework. That decision was upheld by the General Court of the European Union in its judgment of 3 September 2025 in case T-553/23.

The legal basis is your consent - Article 6(1)(a) GDPR.

9. Source of the visit

If you consent to analytics cookies, on the first page you open we store in your browser session the information about where you came from: the referring address, campaign parameters from the address, and the address of the page where the visit began.

If you send us an enquiry through the contact form, that information is attached to the message. It helps us judge which of our activities actually reach clients.

The information is stored in browser session storage, not in a cookie. It disappears automatically when the tab is closed and is not sent with every request to the server. We store no data that would allow you to be identified.

The legal basis is your consent - Article 6(1)(a) GDPR.

10. How to change or withdraw consent

You may withdraw your consent at any time, as easily as you gave it. In the bottom left corner of every page there is a cookie icon - clicking it opens the settings where you can change your decision for each category.

Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

You can also delete and block cookies in your browser settings. Disabling the necessary ones means we will ask for consent on every visit.

11. Legal basis for cookies

Storing information on your device and gaining access to it requires your prior consent, except for what is strictly necessary to provide the service you request. This follows from Article 5(3) of Directive 2002/58/EC and from the Polish Electronic Communications Law (Journal of Laws 2024, item 1221).

12. Rights of data subjectsYou have the right to:

• access to your data,
• rectification of that data,
• erasure (the right to be forgotten),
• restriction of processing,
• data portability,
• objection to processing,
• withdrawal of consent at any time (where processing is based on consent).

To exercise your rights, please contact us: esp@espsa.pl.

13. Right to lodge a complaint

You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO) if you consider that the processing infringes your rights.

14. Data security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.

15. Changes to the privacy policy

This privacy policy may be updated. We will announce any material changes on our website.

Last updated: 4 August 2026