Privacy policy
This policy explains how ENERGREEN sp. z o.o., operating under the RE:ORDER brand, processes personal data. It applies to visitors to reorder.com.pl, people who contact us, and representatives of our clients and business partners. We describe what data we collect, why, who we share it with, how long we keep it and what rights you have.
1. Data controller
The controller of your personal data is ENERGREEN spółka z ograniczoną odpowiedzialnością, registered in Kraków at ul. Czarnowiejska 48/6, 30‑054 Kraków, Poland, operating under the RE:ORDER brand.
The company is entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000776270, kept by the District Court for Kraków‑Śródmieście in Kraków, 11th Commercial Division of the National Court Register. NIP (tax ID) 6793182096, REGON 382811478, share capital PLN 10,000.
For data protection matters, write to office@reorder.com.pl or by post to our office: ul. Armii Krajowej 18, 30‑150 Kraków, Poland.
2. What data we process and where it comes from
We process only the data we need to communicate with you, to work together and to run the website:
- Contact form: your name, email address, the topic you choose and your message, and, if you provide them, your organisation's name and your phone number. With the form we also send the language version of the page and technical anti-spam safeguards that do not identify you as a person.
- Email and phone conversations: the data you give us when you contact us directly, e.g. your name, job title, contact details and the content of the correspondence.
- Clients and business partners: the name, job title, business contact details and organisation of people who represent a client or are designated as contacts. If this data did not come from you, we received it from the organisation you represent or work for, or from public registers such as the National Court Register (KRS).
- Technical data: IP address, date and time of the visit, and information about your browser and device, recorded automatically in server logs.
- Cookies: identifiers stored in cookies and information about how you use the website. We set analytics and marketing cookies only with your consent (section 9).
We do not ask for special categories of data, e.g. health data. Please do not include such data in your message.
3. Purposes and legal bases for processing
Each purpose has its own legal basis under Article 6(1) GDPR:
| Purpose | Legal basis |
|---|---|
| Replying to a message sent via the form, by email or by phone | Legitimate interest: communicating with people who contact us (Art. 6(1)(f)). If you ask about a contract you would conclude with us personally, e.g. as a sole trader: steps taken before entering into a contract (Art. 6(1)(b)). |
| Preparing an offer, concluding and performing a contract | A contract to which you are a party (Art. 6(1)(b)). If you represent a client or are a contact person: legitimate interest, i.e. cooperation with the client (Art. 6(1)(f)). |
| Invoicing, accounting and taxes | Legal obligation under tax law and the Polish Accounting Act (Art. 6(1)(c)). |
| Establishing, pursuing and defending legal claims | Legitimate interest: protecting our rights (Art. 6(1)(f)). |
| Website security and protecting the form against spam | Legitimate interest: security of the website and email (Art. 6(1)(f)). |
| Remembering your cookie choices | Legitimate interest: respecting and demonstrating your choices (Art. 6(1)(f)). |
| Visitor statistics (Google Analytics) | Your consent (Art. 6(1)(a)). |
| Measuring advertising effectiveness (Meta Pixel) | Your consent (Art. 6(1)(a)). |
You can withdraw your consent at any time in "" in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
4. Recipients of data
We share data only with entities that help us run our business, and only to the extent necessary. Service providers process it on our instructions, under data processing agreements.
- the hosting provider whose servers run the website and the contact form (LH.pl Sp. z o.o., registered in Poznań, Poland);
- Google Ireland Limited as the provider of email and office tools (Google Workspace);
- Google Ireland Limited as the provider of Google Analytics, if you consent to analytics cookies;
- Meta Platforms Ireland Limited as the provider of the Meta Pixel, if you consent to marketing cookies;
- providers of other IT services and software we use in our day-to-day work;
- experts and subcontractors working with us, if they take part in the engagement your enquiry concerns;
- our accounting firm, for accounting documents;
- law firms and other advisers, where needed to protect our rights;
- public authorities, where the law requires us to disclose data.
We and Meta Platforms Ireland Limited are joint controllers for collecting data through the Meta Pixel on our website and transmitting it to Meta. The arrangement is set out in the Meta Controller Addendum. Meta then processes this data as a separate controller under its privacy policy. Google's processing of data is described in the Google Privacy Policy.
5. Transfers outside the European Economic Area
Google and Meta may transfer data to the United States. The basis is the European Commission's adequacy decision under the EU-U.S. Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795), under which Google LLC and Meta Platforms, Inc. are certified. Standard contractual clauses approved by the European Commission are also used.
The website and the contact form run on servers in Poland. Apart from the cases above, we do not transfer data outside the EEA. You can obtain information about the safeguards for data transfers by writing to office@reorder.com.pl.
6. How long we keep data
We keep data only as long as the purpose or the law requires:
| Data | Retention period |
|---|---|
| Form messages, emails and call notes that did not lead to cooperation | Until the correspondence ends, then for 12 months in case you want to resume the conversation. |
| Contract-related data | For the term of the contract, then until the limitation periods for contractual claims expire. |
| Accounting and tax documents | 5 years from the end of the calendar year in which the tax payment deadline passed. |
| Server logs | Up to 90 days. |
| Data from analytics and marketing cookies | Until you withdraw consent or the cookies expire (section 9). |
If you withdraw consent or successfully object, we will stop processing the data for that purpose earlier. We keep it longer only when it is needed to establish, pursue or defend legal claims.
7. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy (Article 15 GDPR);
- have inaccurate or incomplete data corrected (Article 16 GDPR);
- have your data erased where there is no basis for further processing (Article 17 GDPR);
- restrict processing (Article 18 GDPR);
- data portability for data we process by automated means on the basis of consent or a contract (Article 20 GDPR);
- object to processing based on legitimate interest, on grounds relating to your particular situation (Article 21 GDPR);
- withdraw consent at any time, e.g. in "" in the website footer.
To exercise these rights, write to office@reorder.com.pl. We will respond within one month; if the request is complex, this period may be extended by two months, and we will let you know.
If you believe we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00‑193 Warsaw, Poland.
8. Whether you must provide data, and automated decisions
Providing data is voluntary. In the contact form, we cannot reply without your name, email address and message; your organisation's name and phone number are optional. To conclude and perform a contract we need the data required in the contract, and to issue an invoice, the data required by tax law.
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
9. Cookies
Cookies are small text files stored in your browser. We set necessary cookies without consent because the website cannot work properly without them. We set analytics and marketing cookies only with your consent, in accordance with Article 399 of the Polish Electronic Communications Law of 12 July 2024 (Prawo komunikacji elektronicznej).
On your first visit you choose which categories you accept. Until you consent, Google Analytics and the Meta Pixel are not activated, and if you refuse or withdraw consent, we delete their cookies.
| Cookie | Category | Provider | Purpose | Retention |
|---|---|---|---|---|
reorder_consent | Necessary | RE:ORDER | Remembers your cookie choices | 12 months |
_ga | Analytics | Distinguishes users in visitor statistics | 2 years by default | |
_ga_<identifier> | Analytics | Keeps session state in visitor statistics | 2 years by default | |
_fbp | Marketing | Meta | Measures advertising effectiveness | 90 days from your last visit |
You can change your choices at any time in "" in the website footer. You can also delete or block cookies in your browser settings, but blocking necessary cookies may make the website harder to use.
10. Changes to this privacy policy
We update this policy when laws, the tools we use or the way we process data change. The current version is always available on this page.
Effective from: 10 October 2026