This Privacy Policy describes how Solfusion Group Polska sp. z o.o. processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
1. Data Controller
The Controller of your personal data is:
- Solfusion Group Polska sp. z o.o.
- Aleja Grunwaldzka 56 / 113, 80-241 Gdańsk, Poland
- KRS: 0001053788 · NIP: 9571162203 · REGON: 526162899
- E-mail: dok@solfusion.pl
2. Data Protection Officer
The Controller has not appointed a Data Protection Officer. For any matters concerning personal data processing, please contact us at: dok@solfusion.pl.
3. Purposes and legal basis
| Purpose | Legal basis | Period |
|---|---|---|
| Replying to contact form inquiries | Art. 6(1)(b) GDPR (pre-contractual steps) | up to 12 months from last contact |
| AI Energy Auditor (preliminary analysis) | Art. 6(1)(b) GDPR | form data is not stored |
| AI Chat (Solfusion AI) | Art. 6(1)(b) GDPR | processed only during session, not stored |
| Contract performance (audit, design, installation, monitoring) | Art. 6(1)(b) GDPR | contract term + statutory retention (5 years) |
| Direct marketing of own products | Art. 6(1)(f) GDPR (legitimate interest) | until withdrawal of consent / objection |
| Newsletter / commercial communication | Art. 6(1)(a) GDPR (consent) | until consent withdrawal |
| Invoicing, accounting | Art. 6(1)(c) GDPR (legal obligation) | 5 years from end of fiscal year |
| Claims pursuit / defence | Art. 6(1)(f) GDPR | until statutory limitation period |
| Analytics cookies | Art. 6(1)(a) GDPR (consent) | until withdrawal / max 13 months |
4. Scope of processed data
- Contact data: first name, last name, e-mail, phone, company name
- Technical property data: energy consumption (kWh/year), industry, area, tariff, location, load profile
- Billing data: tax ID, VAT number, billing address
- Correspondence data: message content, contact history
- Visit technical data: IP address, browser type, OS, visit time (server logs, cookies)
5. Data recipients
- IT infrastructure providers: server provider, e-mail hosting (Mailcow), Let's Encrypt
- AI service providers: DeepSeek (chat queries are sent to the model provider only to generate responses; data is not used for model training)
- Accounting, legal, advisory service providers
- Technical subcontractors: PV/BESS installers, equipment suppliers (KENO Energy and others) — only within the scope necessary for contract performance
- Distribution System Operators (DSO) for installation registration
- State authorities — where required by law (Tax Office, ZUS, KSeF, URE, courts)
With every processor we sign a data processing agreement under Art. 28 GDPR.
6. Transfers outside the EEA
Some service providers (e.g., DeepSeek) may be located outside the European Economic Area. Transfers are based on:
- Standard contractual clauses approved by the European Commission, or
- Commission adequacy decisions, or
- Explicit consent of the data subject.
7. Your rights
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure ("right to be forgotten", Art. 17 GDPR)
- Right to restriction (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR) — especially to direct marketing
- Right to withdraw consent (Art. 7(3) GDPR)
- Right to lodge a complaint with the Polish DPA (UODO, uodo.gov.pl)
To exercise your rights, contact us at dok@solfusion.pl. We respond within 30 days.
8. Automated decision-making and profiling
The AI Energy Auditor and Solfusion AI automatically analyse the data you provide and generate preliminary recommendations (PV capacity, BESS sizing, payback). These are not decisions with legal effect — they are preliminary estimates. Binding offers require an individual audit and 15-min consumption profile analysis.
9. Security
We apply technical and organisational measures appropriate to the risk:
- HTTPS / TLS 1.2+ encryption in transit
- role-based access control
- regular backups
- security updates
- staff training on data protection
10. Cookies
See our Cookies Policy for details.
11. Changes to this Policy
This Policy may be updated to reflect legal or technical changes. The current version is always available at solfusion.pl/en/privacy.
12. Contact
For any questions regarding personal data processing, write to: dok@solfusion.pl.