Privacy Policy

Last updated: 14 October 2026

Data controller

AVENIZ sp. z o.o., ul. Partyzantów 3/5/7, lok. 3A/1, 26-600 Radom, Polska, trading under the Aveniz brand, is the controller of personal data. Privacy contact: contact@aveniz.eu. Registration details: NIP: 7963051756 · REGON: 545941344 · KRS: 0001272138.

Data we collect

We may process your name, company (if applicable), email, telephone number, preferred contact method, selected service, service or project location, information about the property, installation and required work, message and subsequent correspondence. Basic technical and security logs may be generated when the site is used. Do not send special-category data or identity documents unless necessary and agreed in advance.

Purposes and legal bases

We use enquiry data to respond, assess a service or project, prepare a quotation and take steps before entering into a contract — GDPR Art. 6(1)(b). We may also process it for website security, organising communications and work, and establishing or defending claims — Art. 6(1)(f) — and, after contracting, to meet legal, accounting and tax duties — Art. 6(1)(c). This applies to consumer and business enquiries. Electronic marketing will require separate voluntary consent if introduced. General questions and other non-contractual communications are handled on the basis of our legitimate interest in responding and managing contacts — GDPR Art. 6(1)(f).

Recipients and providers

We use SEOHOST sp. z o.o. for website hosting, form processing and Aveniz email. Data may also be shared with authorised authorities and accounting, legal or IT providers where necessary. SEOHOST privacy.

Transfers outside the EEA

The form is processed on our hosting and delivered by email through SEOHOST. Its security services may involve subprocessors and international transfers as described in its documentation. You may request information about the applicable providers and safeguards. SEOHOST security and data processing information.

Retention

We retain enquiries while they are being handled and negotiated. If no contract is concluded, we delete the enquiry messages, attachments and data from active mailboxes and copies under our control within 30 days after the enquiry is closed. Data needed to perform a contract, meet legal duties or establish or defend specific claims is retained for the applicable, justified period. Provider backups follow a separate deletion cycle. To prevent abusive submissions, the server maintains counters and a keyed fingerprint of the IP address in a one-hour window. These counters do not store form content.

Your rights

Depending on the legal basis, you may request access, rectification, erasure, restriction, portability or object to processing. Consent may be withdrawn at any time where processing actually relies on consent. You may complain to the President of the Polish Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warsaw.

Voluntary data, external channels and automation

Providing data is voluntary, but an email or telephone number is needed to reply. Company is optional. WhatsApp and email links open independent provider services governed by their own policies. We do not use solely automated decisions producing legal effects or profile website users. Reasonable technical and organisational safeguards are used, although internet transmission is never risk-free.