Last updated: July 2026.

§ 1. GENERAL PROVISIONS AND ADMINISTRATOR DATA

1. The operator of the website available at the address https://evsolutions.com.pl (hereinafter referred to as the "Service") and the Administrator of Personal Data (within the meaning of Article 4 point 7 of the GDPR) is: EVSOLUTIONS Limited Liability Company based in Opole (45-221) at ul. Chabrów 50A, registered in the National Court Register under KRS number: 0000819998, NIP: 7543251371, REGON: 384891180 (hereinafter referred to as the "Administrator" or "EVSolutions").
2. Contact with the Administrator regarding any matters related to the protection of personal data and the exercise of Users' rights is possible via:
   • Email address: info@evsolutions.com.pl
   • Correspondence address: ul. Chabrów 50A, 45-221 Opole.
3. The Administrator declares that it processes Users' personal data in accordance with the provisions of the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 (GDPR), the Personal Data Protection Act, the Act on Providing Services by Electronic Means, the Electronic Communications Law and the Regulation of the European Parliament and of the Council (EU) 2024/1689 (AI Act) .
4. The Administrator implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

§ 2. DEFINITIONS

1. Service – the website operating at the address https://evsolutions.com.pl.
2. User – any natural person visiting the Service or using the services and functionalities offered in the Service (including contact forms and AI Assistant).
3. Personal data – any information about an identified or identifiable natural person.
4. AI Assistant (Chatbot) – interactive conversational software based on artificial intelligence, implemented in the Service via the Chatbase platform, used for automatic handling of Users' inquiries.
5. GDPR – Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016.
6. AI Act – Regulation of the European Parliament and of the Council (EU) 2024/1689 of June 13, 2024, establishing harmonized provisions on artificial intelligence.

§ 3. PURPOSES, LEGAL BASES AND DATA PROCESSING PERIODS

We process your personal data for the following purposes:

1. Handling inquiries via contact and audit forms

• Scope of data: First name, last name, email address, phone number, company/object name, message content.
• Legal basis: Article 6(1)(f) of the GDPR (legitimate interest of the Administrator consisting of responding to inquiries, handling audit and implementation requests) or Article 6(1)(b) of the GDPR (taking action at the request of the data subject before entering into a contract).
• Data retention period: The time necessary to handle the inquiry, and then for the period of limitation of potential claims (up to 6 years).

2. Conversation and interaction with the AI Assistant (Chatbot Chatbase)

• Scope of data: Content of entered inquiries (prompts), IP address, session identifier, technical data of the browser, and contact details if voluntarily provided in the chat window.
• Legal basis: Article 6(1)(f) of the GDPR (legitimate interest of the Administrator consisting of automating customer service, providing immediate information about products and services, and building the image of a modern company) in conjunction with the transparency requirements of Article 50 of the AI Act.
• Data retention period: For the duration of the session and up to 30 days in the chat system logs for analytical purposes and improving the quality of responses.

3. E-marketing activities, Remarketing, and Lead Generation (B2B/B2C)

• Scope of data: IP address, cookies, advertising identifiers (Google ID, Meta Pixel ID, LinkedIn Insight Tag), history of activity in the Service.
• Legal basis: Article 6(1)(a) of the GDPR (voluntary consent of the User expressed through the cookie banner) and Article 6(1)(f) of the GDPR (legitimate interest consisting of promoting own products, including Fingerhuth insulation sheets, e-Cell Guard systems, LOXXER cabinets, and the CAMELEON project).
• Data retention period: Until consent for cookies is withdrawn or an effective objection is raised, no longer than the validity period of the cookies (up to 2 years).

4. Analytics, statistics, and optimization of the Service

• Scope of data:Information about the device, operating system, time spent on the page, visited subpages, sources of traffic.
• Legal basis: Art. 6 sec. 1 letter f GDPR (legitimate interest – tailoring the website content to the needs of Users and improving its performance).
• Retention period: In accordance with the retention period set in analytical tools (e.g. Google Analytics 4 – up to 14 months).

5. Establishing, pursuing, or defending against claims

• Scope of data: Data collected for the above purposes.
• Legal basis: Art. 6 sec. 1 letter f GDPR (legitimate interest of the Administrator – protection of property and image rights).
• Retention period: Until the expiration of statutory limitation periods for claims arising from the Civil Code.

§ 4. INTERACTION WITH AI ASSISTANT (CHATBOT CHATBASE) AND AI ACT REQUIREMENTS

Acting in fulfillment of transparency obligations imposed by art. 50EU Regulation 2024/1689 (AI Act), the Administrator informs Users about the following principles governing the operation of the AI Assistant in the Service:

1. Information about artificial intelligence: The chatbot available in the lower right corner of the Service isan artificial intelligence system.The User, by interacting with the chatbot, engages in direct interaction with a generative language model (LLM) integrated through the platformChatbase (Chatbase Inc.).
2. Purpose of using AI: The AI Assistant is designed to provide immediate, automated information about the EVSolutions offer (including insulation blankets, e-Cell Guard systems, LOXXER cabinets, EV zone audits, and training) and supports the qualification process for contact inquiries.
3. Limitations and non-binding nature of responses:
   • Responses generated by the AI Assistant arefor informational and educational purposes only.
   • The generated responsesdo not constitute a binding commercial offer in the sense of the Civil Code or an official report from a fire safety audit.
   • Final pricing, contractual terms, and technical and formal recommendations require verification and approval by a human – experts or the Management of EVSolutions.
4. User safety principles:
   • When conversing with the AI Assistant,sensitive data should not be provided (e.g., health data), passwords, private PESEL/ID numbers, or confidential trade secrets of the enterprise.
   • Data entered in the chat window is sent to the service provider processor (Chatbase Inc.) to generate a response.
5. No automated decision-making with legal effects: Interaction with the AI Assistant does not lead to decisions based solely on automated processing within the meaning of art. 22 GDPR, which would have legal effects on the User or similarly significantly affect them.

§ 5. DATA RECIPIENTS AND TRANSFER OF DATA OUTSIDE THE EEA

1. Users' personal data may be transferred to entities processing it on behalf of the Administrator (so-called processors) based on concluded data processing agreements. These include:
   • Hosting and server service providers.
   • Software development and IT maintenance service providers.
   • AI chat technology provider:Chatbase Inc. (USA).
   • Providers of analytical and marketing tools (Google Ireland Ltd., Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Company).
   • External accounting offices and legal and tax advisors.
2. Transfer of data outside the European Economic Area (EEA): Due to the use of external technology providers (e.g., Chatbase, Google, Meta, LinkedIn), personal data may be transferred to third countries, in particular to the United States (USA).
   • The transfer of data is carried out with the appropriate legal safeguards required by GDPR, in particular based on a decision of the European Commission determining an adequate level of protection (EU-US Data Privacy Framework) or based on Standard Contractual Clauses (SCC) approved by the European Commission.

§ 6. RIGHTS OF THE DATA SUBJECT

Every User has the following rights in relation to the processing of their personal data:

1. Right of access to data (art. 15 GDPR) – obtaining information about the processed data and a copy of the data.
2. Right to rectification of data (art. 16 GDPR) – correcting inaccurate or completing incomplete data.
3. Right to erasure of data ("right to be forgotten") (art. 17 GDPR) – erasure of data when there is no basis for processing.
4. Right to restrict processing (Article 18 GDPR) – suspension of data operations.
5. Right to data portability (Article 20 GDPR) – receiving data in a structured, commonly used format.
6. Right to object (Article 21 GDPR) – lodging an objection to processing based on legitimate interests or for direct marketing purposes.
7. Right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
8. Right to lodge a complaint with a supervisory authority: If the User believes that the processing of their data violates GDPR regulations, they have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, https://uodo.gov.pl).

To exercise their rights, please contact us at the following email address: info@evsolutions.com.pl.

§ 7. COOKIE POLICY AND TRACKING TECHNOLOGIES

1. The service uses cookies (so-called "cookies") and similar technologies (e.g., local storage, analytical and advertising pixels).
2. Cookies are small text files stored on the User's device while browsing the Service.
3. The following categories of cookies are used within the Service:
   • Essential / Technical: They ensure the proper functioning of the site, security, navigation, and support for basic functions (e.g., remembering privacy settings). They do not require the User's consent.
   • Functional (including AI chat): They allow for the retention of selected settings and the proper loading of the AI Assistant widget (Chatbase).
   • Analytical and performance: They help analyze visit statistics (e.g., Google Analytics) to optimize the structure and content of the Service.
   • Marketing and advertising: They serve to tailor advertising content on external portals (e.g., Google, Facebook, LinkedIn) to the User's preferences (remarketing).
4. Managing cookie consents:
   • During the first visit to the Service, a cookie consent management banner is displayed to the User.
   • The User can change their preferences or withdraw consent for individual types of cookies at any time via their web browser settings or the "Cookie Settings" link available in the footer of the Service.
5. Disabling or limiting essential cookies may negatively affect the functioning of some features of the Service.

§ 8. AUTOMATED DECISION-MAKING AND PROFILING

1. The Service does not make decisions regarding Users based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects them.
2. Analytical and marketing tools used (e.g., Google/Meta/LinkedIn pixels) may utilize profiling for advertising purposes (e.g., displaying EVSolutions banners to individuals who visited the page about insulation sheets), but this occurs solely based on the prior consent of the User expressed in the cookie banner.

§ 9. DATA SECURITY

The Administrator employs modern technical and organizational measures to prevent unauthorized access to data, including:

• Encryption of the connection using the SSL/TLS.
• Securing databases against unauthorized access and leaks.
• Access to personal data is limited to authorized employees and associates bound by confidentiality obligations.
• Regular audits and software updates.

§ 10. FINAL PROVISIONS

1. This Privacy Policy is regularly reviewed and updated as necessary due to changes in legal regulations (including GDPR and AI Act) or technical developments of the Service.
2. The current version of the Privacy Policy is always available at: https://evsolutions.com.pl/polityka-prywatnosci.

Design and implementation of the website: agencja.energiczni