1. Introduction

This GDPR Policy explains how HYBRYDYELEKTRYKI Sp. z o.o., registered at Stefana Czarnieckiego 86/88/4, 01-541 Warsaw, Poland (KRS: 0001159529, NIP: 1133160832, REGON: 541086089), processes personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

We are committed to protecting the privacy and rights of individuals whose data we process.

2. Data Controller

The data controller is:
HYBRYDYELEKTRYKI Sp. z o.o.
Email: contact@hybridelectric.eu
Tel.: +48 504 414 133

3. Principles of Data Processing

We ensure that all personal data is processed in accordance with the principles of GDPR:

• Lawfulness, fairness, and transparency – data is processed legally and users are informed about how it is used.

• Purpose limitation – data is collected for specific, explicit, and legitimate purposes.

• Data minimization – we only process data necessary for the stated purposes.

• Accuracy – data is kept up to date and corrected when necessary.

• Storage limitation – data is stored no longer than necessary.

• Integrity and confidentiality – we secure data against unauthorized access, loss, or misuse.

4. Legal Basis for Processing

Personal data is processed on the following legal grounds:

• performance of a contract or taking steps prior to entering into a contract,

• compliance with legal obligations,

• legitimate interests pursued by the Controller (e.g., website security, marketing),

• user consent, where required.

5. Rights of Data Subjects

Under GDPR, individuals have the right to:

• Access – request information about the personal data we hold,

• Rectification – correct inaccurate or incomplete data,

• Erasure – request deletion of data (“right to be forgotten”),

• Restriction – limit processing of personal data,

• Data portability – receive personal data in a structured, commonly used, machine-readable format,

• Objection – object to processing, particularly for marketing purposes,

• Withdraw consent – withdraw previously given consent at any time.

Requests related to these rights should be sent to: contact@hybridelectric.eu.

6. Data Transfers

We do not transfer personal data outside the European Economic Area (EEA) unless adequate safeguards are in place, such as Standard Contractual Clauses or the adequacy decision of the European Commission.

7. Data Security

We implement appropriate technical and organizational measures to ensure the security of personal data, including encryption, access controls, and secure hosting solutions.

8. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

9. Complaints

If you believe that your data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority – in Poland, this is the President of the Personal Data Protection Office (UODO).

10. Updates to the GDPR Policy

We may update this GDPR Policy to reflect changes in law or our business practices. The latest version will always be available on our website.