Privacy
Policy

The data controller responsible for personal data collected through this website is Elorani, with its registered correspondence address at ul. Piekna 37, 02-584 Warsaw, Poland. For all data-related enquiries, the controller may be contacted at [email protected].

Processing activities conducted under this policy relate exclusively to the operation of the elorani.info website, the handling of enquiry correspondence submitted via the contact form, and the use of standard web analytics for anonymous visitor interaction analysis.

When you submit an enquiry through the contact form on this website, we collect the following personal data: full name, email address, and the content of your message. If you voluntarily include a telephone number or select a subject category, that information is also collected as part of the submission.

We do not collect special categories of personal data as defined under Article 9 of the GDPR (including data relating to physical or mental condition, dietary needs of a professional nature, or any other sensitive category). The contact form is designed to receive general enquiries only. Any submission that includes sensitive personal data not requested by the form will be deleted without response.

In addition to form submissions, standard web server logs are maintained. These logs may record IP addresses, browser types, referring URLs, and page access timestamps for security and analytics purposes. Log data is anonymised before any aggregated analysis is performed.

Personal data submitted via the contact form is processed on the basis of Article 6(1)(f) of the GDPR — the legitimate interest of responding to an enquiry you have initiated. Where you have given explicit consent (for example, by ticking a consent checkbox if one is present), processing is also based on Article 6(1)(a).

Anonymous web analytics data is processed on the basis of Article 6(1)(f) — the legitimate interest of understanding how visitors interact with the website in aggregate form, for the purpose of improving the presentation of information. No individual profiles are constructed from this data.

Enquiry correspondence is retained for a period of 24 months from the date of the initial submission, after which it is permanently deleted from all systems. If an ongoing business relationship follows from an enquiry, correspondence may be retained for the duration of that relationship plus 36 months.

Web server log data is retained for a maximum of 90 days, after which it is automatically purged. Anonymised aggregate analytics data that contains no personally identifiable information may be retained indefinitely for statistical purposes.

Under the GDPR, you hold the following rights with respect to your personal data held by Elorani:

• Right of Access You may request a copy of any personal data we hold about you.
• Right to Rectification You may request correction of inaccurate personal data.
• Right to Erasure You may request deletion of your personal data, subject to any legal retention obligations.
• Right to Restrict Processing You may request that processing be restricted in certain circumstances.
• Right to Portability You may request a machine-readable copy of personal data you have provided.
• Right to Object You may object to processing based on legitimate interest.

To exercise any of the above rights, contact the data controller at [email protected]. Requests will be acknowledged within 5 working days and resolved within 30 days. You also have the right to lodge a complaint with the Polish data protection supervisory authority (Urząd Ochrony Danych Osobowych, UODO).

Personal data submitted through this website is not sold, rented, or shared with third parties for marketing purposes. Where third-party service providers are engaged for hosting, email provision, or analytics, they are bound by data processing agreements that restrict their use of personal data to the specific purpose for which it was shared.

Data is hosted within the European Economic Area (EEA). Where any transfer outside the EEA is technically required (for example, by a CDN infrastructure provider), such transfers are conducted under standard contractual clauses approved by the European Commission.

This website embeds a Google Maps iframe on the contact page for the purpose of displaying an office location. When the map is loaded, Google may collect technical data in accordance with Google's own privacy policy. No personal form data is transmitted to Google through this embed.

This website uses cookies to maintain essential functionality and collect anonymous visitor analytics. A full breakdown of cookie categories, their purpose, and their retention periods is available in our Cookie Policy. You may manage your cookie preferences at any time via the cookie settings link in the footer.

This Privacy Policy may be updated periodically to reflect changes in processing activities, legal requirements, or operational practices. The effective date at the top of this page will be updated upon revision. Continued use of the website following a policy update constitutes acknowledgement of the revised terms. Where a change is material, a notice will be displayed on the website for a minimum of 30 days.

For any questions regarding this policy, contact [email protected].