1. Introduction

Sun Valley Energy Sp. z o.o. w organizacji (hereinafter, “we,” “us,” or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Polish laws.

Controller Name & Address

Sun Valley Energy Sp. z o.o. w organizacji

ul. Dąbrowskiego 75/81

60-532 Poznań, Poland

Contact Email: legal@sunvalley.pl

We are not required to appoint a Data Protection Officer; however, any privacy-related inquiries can be sent to the above email.

2. Personal Data We Collect

1. Data Provided by You

• Contact Forms: When you fill out our online contact forms or request our services, we collect personal information such as your name, email address, phone number, and any other details you voluntarily provide.

• Marketing Consent: If you opt in (via checkbox or similar mechanism) to receive marketing materials or newsletters, we collect and store that consent and corresponding contact data (e.g., email address).

2. Data Collected Automatically

• Server Logs: Our servers automatically record certain data when you visit our website, such as your IP address, browser type, operating system, time of visit, pages visited, and referring URL.

• Cookies and Similar Technologies: We use cookies to personalize your experience, analyze website traffic, and improve our services. See Section 5 for more details.

We do not engage in any automated decision-making or profiling that produces legal or similarly significant effects on you.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

1. To Provide Services

• Legal Basis: Performance of a contract (GDPR Art. 6(1)(b)) or taking steps at your request prior to entering into a contract.

2. Customer Support & Inquiries

• Legal Basis: Our legitimate interests in responding to your questions or processing your requests (GDPR Art. 6(1)(f)).`

3. Marketing and Newsletter Distribution

• Legal Basis: Your consent (GDPR Art. 6(1)(a)), obtained via an explicit opt-in checkbox or similar mechanism. You may withdraw your consent at any time by contacting us at legal@sunvalley.pl.

4. Statistical and Analytical Purposes

• Legal Basis: Our legitimate interests in analyzing and improving our services (GDPR Art. 6(1)(f)).

5. Compliance with Legal Obligations

• Legal Basis: Compliance with Polish law or EU regulations (GDPR Art. 6(1)(c)).

4. Data Retention

We retain personal data as required by Polish regulations and GDPR. Generally:

• Service-Related Data: Kept for as long as necessary to fulfill the purpose(s) for which it was collected and comply with legal obligations.

• Marketing Data: Retained until you withdraw your consent or request erasure.

• Server Logs: Retained for a limited duration for security, debugging, and site maintenance, after which they may be anonymized or deleted.

5. Cookies and Similar Technologies

We use cookies to provide a better user experience, remember your preferences, and analyze how our website is used. Cookies are small text files stored on your device.

1. Session Cookies: These expire when you close your browser.

2. Persistent Cookies: These remain on your device until they expire or you delete them manually.

3. Third-Party Cookies: Our service providers (e.g., Google Analytics) may set their own cookies to analyze website traffic or deliver ads based on your interests.

Managing Cookies

Most web browsers accept cookies by default. You can modify your browser settings to block or delete cookies. However, some website features may not function properly without cookies.

6. Data Sharing and International Transfers

1. Service Providers and Partners

• We may share personal data with trusted third-party providers (e.g., web hosting, analytics, email platforms) who process data on our behalf and under our instructions.

2. International Transfers

• Some of our service providers (e.g., Google Cloud, Wix) may process data on servers located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other approved mechanisms, in compliance with GDPR Chapter V.

We do not sell or rent your personal data to third parties.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Obtain confirmation that your data is being processed and request a copy of your personal data.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to certain exceptions.

• Right to Restriction of Processing: Under certain circumstances, request the restriction of processing your data.

• Right to Data Portability: Receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller where technically feasible.

• Right to Object: Object to certain processing, such as direct marketing or processing based on our legitimate interests.

• Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at legal@sunvalley.pl.

Right to Lodge a Complaint: If you believe we are violating GDPR or other data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, “UODO”).

8. Security Measures

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These may include, but are not limited to, SSL/TLS encryption, access controls, and regular security assessments.

9. External Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those external sites. We encourage you to review their respective privacy policies when you visit them.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant updates, we will post a notice on our website or notify you via other appropriate channels.

Last Updated: [31/01/2025]

Contact Us

If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at:

Sun Valley Energy Sp. z o.o. w organizacji

ul. Dąbrowskiego 75/81

60-532 Poznań, Poland

Email: legal@sunvalley.pl