Privacy policy

Last updated: 26 June 2026.

1. Data controller

The controller of your personal data is Galia Green Power sp. z o.o., registered office in Warsaw (00-689), ul. Poznańska 37, entered into the Polish National Court Register under KRS 0001094731, NIP 7011195376, REGON 528102677 (the "Controller", "we").

For matters related to data processing you can contact us:

• in writing — to the registered address above,
• by e-mail — at kontakt@galiagreenpower.com.

2. Scope and purposes of processing

We process personal data only as needed for a specific purpose, in particular:

• Responding to enquiries sent via the contact form or directly by e-mail — in order to respond and conduct correspondence (Art. 6(1)(f) GDPR — legitimate interest).
• Establishing and conducting cooperation with farmers, municipalities and business partners — to enter into and perform a contract or take steps before doing so (Art. 6(1)(b) GDPR).
• Press contact and handling media enquiries (Art. 6(1)(f) GDPR).
• Compliance with legal obligations, including tax and accounting (Art. 6(1)(c) GDPR).
• Establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR).

3. Categories of data

We process data you provide voluntarily — typically: first and last name, e-mail, phone number, the organisation you represent and the content of correspondence. For business cooperation we may also process company identification data (VAT ID, REGON, address).

4. Retention periods

We keep data no longer than necessary for the purpose for which it was collected:

• contact-form data — for the duration of correspondence and up to 3 years afterwards (for evidentiary purposes);
• contract-related data — for the contract's duration and the limitation period for claims;
• data processed under a legal obligation — for the period required by law.

5. Recipients of data

Data may be processed by entities cooperating with the Controller under data-processing agreements, in particular IT and hosting providers, e-mail providers, law and tax firms, and accounting offices. We do not sell your personal data to third parties.

6. Transfers outside the EEA

As a rule we do not transfer data outside the European Economic Area. If we use service providers outside the EEA, we do so only on the basis of safeguards ensuring an appropriate level of protection (including Standard Contractual Clauses approved by the European Commission).

7. Your rights

In connection with data processing you have the following rights:

• access to data and obtaining a copy,
• rectification,
• erasure ("right to be forgotten"),
• restriction of processing,
• data portability,
• objection to processing,
• lodging a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

To exercise your rights, write to us at kontakt@galiagreenpower.com.

8. Voluntary nature of data

Providing personal data is voluntary, but in many cases necessary to respond to an enquiry or establish cooperation.

9. Cookies and analytics

The galiagreenpower.com site uses cookies (small files stored on your device) to the extent necessary for proper site operation and — with your consent — for analytics that help us understand how users interact with the site.

Google Analytics

We use Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The tool uses cookies to gather anonymised information about site traffic (entry source, pages visited, visit time, device type and browser). We apply IP anonymisation, so we do not identify individual users.

We process analytics data based on your consent (Art. 6(1)(a) GDPR), expressed via the cookie banner. You can withdraw consent at any time via the banner or your browser settings. Google may transfer this data to countries outside the EEA on the basis of Standard Contractual Clauses approved by the European Commission. More in Google's privacy policy. To opt out of Google Analytics measurement, you can install the Google Analytics Opt-out add-on.

Beyond Google Analytics we do not use advertising or profiling tools (e.g. social pixels, remarketing).

You can manage cookies at any time in your browser settings, including blocking or deleting them. Restricting cookies may affect some site features.

10. Security measures

We apply technical and organisational data-protection measures appropriate to the risk, in particular:

• encryption of data transmission using HTTPS (TLS),
• system access controls and multi-factor authentication,
• regular software updates and backups,
• limiting access to data to the minimum necessary.

11. Hosting and server logs

The site is hosted on infrastructure providing appropriate security measures, with servers located in the European Union. The server may automatically log technical information (IP address, date/time of request, browser type) solely for site administration, troubleshooting and security purposes (Art. 6(1)(f) GDPR).

12. Automated decision-making

Your personal data is not subject to automated decision-making, including profiling, that would have legal or similarly significant effects on you.

13. Changes to the privacy policy

We update this policy as our services and the law evolve. The latest version is always available at this address. If you have any questions, please use the Contact page.