Privacy policy

Privacy Policy – DPE International Sp. z o.o.

We respect your privacy and provide this Privacy Policy so that you  know to what extent and for what purposes your personal data is processed.

Below is a table of contents to help you quickly find the information you need:

  1. Information about the Personal Data Controller
  2. Joint data control
  3. Requirement to provide personal data
  4. Purposes and scope of personal data processing
  5. Users’ rights in relation to the processing of personal data
  6. Consent to processing and its withdrawal
  7. How long we store personal data
  8. Recipients of personal data
  9. Automated decision-making and profiling of personal data
  10. Data processing outside the EEA
  11. Principles we follow when processing personal data
  12. Changes to the Privacy Policy

 

The privacy policy is general in nature and presents the most important issues related to the processing of personal data. This policy may be supplemented by additional information clauses or regulations that you may encounter when working with us.

 

I.INFORMATION ABOUT THE PERSONAL DATA CONTROLLER

We kindly inform you that the administrator of your personal data is DPE International Sp. z o.o. with its registered office in Poznań at ul. Rodawska 32A, 61-312 Poznań, entered in the Register of Entrepreneurs kept by the District Court in Poznań, 8th Commercial Division, under KRS number 0001037779, NIP 782 292 36 80, REGON 525383150.

 

Contact details:

Address: DPE International Sp. z o.o. , ul. Rodawska 32A, 61-312 Poznań

Website(s): www.dpeint.com

E-mail: hello@dpeint.com

The administrator has appointed Łukasz Głowacki as Data Protection Officer. The Officer can be contacted at the following e-mail address: gdpr@dpeint.com .

 

II. JOINT DATA CONTROL

 

DPE International Sp. z o.o. is affiliated with Dom Pełen Energii Sp. z o.o., therefore, in terms of common goals, personnel and financial optimisation, joint administration takes place.

We have established complementary companies and share some of our infrastructure, IT systems and business processes.

Examples of shared processes include query handling, marketing, recruitment, accounting, reporting, auditing, customer service, customer service quality control, complaint handling, warranty fulfilment, claims handling and accounting.

Each of the joint controllers may be involved in the processing of personal data at different stages and to varying degrees, sometimes pursuing their own individual objectives, which may or may not be related to each other.

The common goal of the affiliated companies is to sell the products and services of each company individually. Each of the joint controllers is responsible for the exercise of your rights in relation to personal data.

 

III. REQUIREMENT TO PROVIDE PERSONAL DATA

 

  1. Providing any personal data is voluntary and depends on your decision. However, if you wish to enter into a franchise agreement or a construction contract with us, it is necessary to provide certain personal data.
  2. In order to receive a commercial offer, it is necessary to provide your e-mail address and telephone number — without this, we are unable to meet your expectations and maintain the highest quality of service, which is very important to us.
  3. Failure to provide personal data will result in the inability to achieve specific processing objectives.

 

IV. PURPOSES AND SCOPE OF PERSONAL DATA PROCESSING

In order to carry out our activities, we have established certain processing procedures in accordance with the scope of our activities. Below is a summary of these procedures to inform you of the details.

 

Purpose of processingScope of personal data collectedLegal basis
Conclusion and performance of a contractFirst name, surname, address, company name, company headquarters, correspondence address, work address, e-mail address, telephone number, tax identification number, statistical number, company registration number, bank account number and other information included in the documentation we have received from you.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract or in order to take steps to enter into a contract;
Acquisition of franchiseesFirst name, surname, company name, company headquarters, correspondence address, e-mail address, telephone number, company registration details.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract or in order to take steps to enter into a contract.
Training of franchisees’ staffFirst name, surname, company name, company headquarters, correspondence address, branch addresses, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Conducting franchisee auditsFirst name, surname, company name, company headquarters, correspondence address, branch addresses, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Franchisee quality assessmentFirst name, surname, company name, company headquarters, correspondence address, branch addresses, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Settlements with franchiseesCompany name, registered office, correspondence address, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Creation of franchisee websitesFirst name, surname, company name, company headquarters, correspondence address, branch addresses, company registration details, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Franchisee marketingFirst name, surname, company name, company headquarters, correspondence address, branch addresses, company registration details, e-mail address, telephone number, personal and contact details of staff.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract.
Own marketingFirst name, surname, company name, e-mail address, telephone number, correspondence address.
  • Article 6(1)(a) of the GDPR, which allows the processing of personal data on the basis of freely given consent.
  • Article 6(1)(f) of the GDPR, which allows the processing of personal data if the Controller pursues its legitimate interests in this way.
Responses to enquiries about cooperation opportunitiesFirst name, surname, address, company name, company headquarters, correspondence address, address of planned works, e-mail address, telephone number, tax identification number, statistical number, National Court Register number, bank account number, IP number and other information included in the documentation we have received from you.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract or in order to take steps to enter into a contract;
Fulfilment of our legal obligationsFirst name, surname, company name, home address, company registered office, correspondence address, e-mail address, bank account number.
  • Article 6(1)(c) of the GDPR, which allows the processing of personal data if such processing is necessary for the controller to comply with its legal obligations.
Consideration of matters addressed directly to the Personal Data ControllerFirst name, surname, address of residence, company name, company registered office, correspondence address, address of work performed, e-mail address, telephone number, tax identification number, statistical number and other information provided to us for this purpose.
  • Article 6(1)(b) of the GDPR, which allows the processing of personal data if it is necessary for the performance of a contract;
  • Article 6(1)(a) of the GDPR, which allows the processing of personal data on the basis of voluntary consent.

Archival, evidentiary and establishing, defending and pursuing claims

First name, surname, address, company name, company headquarters, correspondence address, address of work performed, e-mail address, telephone number, tax identification number, statistical number, information contained in public registers, bank account number, IP number and other information included in the documentation we have received from you.

▹ Article 6(1)(f) of the GDPR, which allows the processing of personal data if the Controller pursues its legitimate interest in this way (in this case, the Controller’s interest is to have personal data that will allow it to prove certain facts related to the performance of the contract

▹ Article 6(1)(c) of the GDPR, which allows the processing of personal data if such processing is necessary for the Controller to comply with its legal obligations.

Website administrationIP address, server date and time, web browser information, operating system information;▹ Article 6(1)(f) of the GDPR, which allows the processing of personal data if the Controller pursues its legitimate interest in this way. In this case, the Controller’s interest is to be able to administer the website. For more information, please see our Cookie Policy.

 

V. USERS’ RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA

 

  1. You have the right to:
    • access your personal data – i.e. obtain information about the purpose and method of processing your personal data and a copy of the data.
    • rectify your data – i.e. correct your data if it is incorrect, has changed or is out of date.
    • partial or complete erasure of your data (“Right to be forgotten”) – i.e. to have your data erased if it is being processed without a legitimate legal basis.
    • restriction of processing – i.e. restricting the processing of data solely to its storage.
    • data portability – i.e. obtaining your personal data that you have provided to us or indicating another controller to whom we should transfer it, if technically possible.
    • objection to personal data that is provided voluntarily – i.e. for direct marketing purposes, among others.
    • withdrawal of consent – you may withdraw any consent you have given at any time. Please note that once you have given us your instructions, we will no longer process your data for the purpose you have indicated, but we have the right to process your data until you withdraw your consent.
    • lodge a complaint with the Polish Data Protection Authority (UODO) – if you believe that your personal data is being processed in violation of applicable law, you may lodge a complaint with the Polish Data Protection Authority (UODO) at the following address: ul. Stawki 2, 00-193 Warsaw”
  1. We respect your rights under data protection regulations and strive to facilitate their exercise to the greatest extent possible.
  2. Please note that these rights are not absolute, and therefore in some situations we may lawfully refuse to comply with them. However, if we refuse to comply with a request, it will only be after careful consideration and only in situations where refusal is necessary.
  3. With regard to the right to object, we explain that you have the right to object at any time to the processing of personal data on the basis of the legitimate interest of the Personal Data Controller in relation to your particular situation. However, you must remember that, in accordance with the regulations, we may refuse to comply with your objection if we demonstrate that:
    1. there are legitimate grounds for processing that override your interests, rights and freedoms; or
    2. there are grounds for establishing, pursuing or defending claims.
  1. Furthermore, you may object to the processing of your personal data for marketing purposes at any time. In such a situation, we will cease processing for this purpose upon receipt of your objection.
  2. You can exercise your rights by sending a letter directly to the Personal Data Administrator at the address of the registered office or by sending an email to: gdpr@dpeint.com .

 

VI. CONSENT TO PROCESSING AND ITS WITHDRAWAL

 

  1. If the processing of personal data is based on your consent, you may withdraw this consent at any time, at your own discretion.
  2. If you wish to withdraw your consent to the processing of personal data, simply send a request by post to the registered office or to the contact email address provided: gdpr@dpeint.com .
  3. If the processing of your personal data was based on consent, its withdrawal does not make the processing of personal data up to that point illegal. In other words, until you withdraw your consent, we have the right to process your personal data and its withdrawal does not affect the lawfulness of the processing to date.

 

VII. HOW LONG WE STORE PERSONAL DATA
  1. In accordance with applicable law, we process your personal data for the time necessary to achieve the specified purpose. After this period, your personal data will be irrevocably deleted or destroyed.
  2. With regard to the specific periods of personal data processing, we kindly inform you that we process personal data for the following periods:

 

Conclusion and performance of the contract
  • Until the end of the contract and the expiry of mutual claims.
Acquisition of franchisees
  • 1 year from the last contact if no cooperation has been established.
Training of franchisees’ staff
  • Up to 3 years from the completion of training.
Conducting franchisee audits
  • Up to 3 years after the audits have been performed.
Franchisee quality assessment
  • 1 year from activities determining the franchisee’s compliance with the franchisor’s requirements.
Settlements with franchisees
  • 5 years from the date of issue of the sales invoice.
Creation and maintenance of franchisees’ websites
  • Until the end of the contract.
Franchisee marketing
  • 1 year from the last contact if no cooperation has been established;
  • Until consent is withdrawn or an objection is raised.
Own marketing
  • 1 year from the last contact if no cooperation has been established;
  • Until consent is withdrawn or an objection is raised.
Responses related to enquiries about cooperation opportunities
  • 1 year from the last contact if no cooperation has been established.
Fulfilment of our legal obligations
  • Until the time specified by law.
Consideration of matters addressed directly to the Personal Data Controller
  • 1 year from the last contact if no cooperation has been established;
  • Until the end of the contract and the expiry of mutual claims.
Archival, evidentiary and determination, defence and pursuit of claims
  • Until the end of the contract and the expiry of mutual claims.
Website administration
  • 1 year from the last contact if no cooperation has been established;
  • 1 year with regard to data made available by internet technologies;
  • Until consent is withdrawn or an objection is lodged.
  1. Periods in years are counted from the end of the year in which we began processing personal data in order to streamline the process of deleting or destroying personal data. Separate counting of the deadline for each event would involve significant organisational and technical difficulties, as well as considerable financial outlay, therefore establishing a single date for the deletion or destruction of personal data allows us to manage this process more efficiently.

 

VIII. RECIPIENTS OF PERSONAL DATA

 

  1. We may transfer your personal data to our employees and associates who need to have access to it in order to perform our obligations or activities on your behalf.
  2. Like most businesses, we also use the services of other entities in our operations, which often involves the transfer of personal data. Therefore, if necessary, we transfer your personal data to the following recipients:
    1. entities that maintain our IT systems and provide us with software;
    2. entities providing postal and courier services;
    3. entities providing us with marketing services, training and event organisation;
    4. entities conducting payment activities;
    5. research agencies/institutes acting on our behalf;
    6. entities purchasing receivables;
    7. entities providing us with consulting or legal assistance services.

 

  1. In addition, it may happen that, for example, on the basis of a relevant provision of law or a decision of a competent authority, we will also have to transfer your personal data to other entities, whether public or private, such as the Social Insurance Institution, the Tax Office, the National Tax Administration, etc. It is extremely difficult for us to predict who may request access to personal data. Nevertheless, we assure you that we analyse each request for access to personal data very carefully and thoroughly in order to avoid disclosing information to unauthorised persons.

 

IX. AUTOMATED DECISION-MAKING AND PROFILING OF PERSONAL DATA

 

Please be advised that we use automated decision-making. As a result of using popular technologies such as Google Ads or Facebook Ads, profiling may occur in our marketing processes. However, this obviously has no legal consequences and does not have a significant impact on our customers.

As part of our marketing processes, we use cookies to observe and analyse traffic on our websites and to carry out remarketing activities.

 

X. DATA PROCESSING OUTSIDE THE EEA

Please be advised that your personal data is transferred outside the European Economic Area in connection with our use of tools from trusted companies such as Microsoft and Google. These are transfers to commercial organisations in the USA participating in the Data Privacy Framework programme, which, according to the European Commission’s decision, ensures an adequate level of personal data protection.

 

XI. PRINCIPLES WE FOLLOW WHEN PROCESSING PERSONAL DATA

 

The security of your personal data is one of our priorities, which is why we have set ourselves several principles that we strictly adhere to, namely:

  1. We set clear objectives for the collection of personal data and do not process it in a manner inconsistent with those objectives;
  2. We collect personal data only to the minimum extent necessary to achieve the objectives we have set ourselves;
  3. We ensure that the personal data we collect is up to date and accurate, and therefore we respond to every request for its correction or updating;
  4. We carefully monitor data retention periods and delete personal data that is no longer needed;
  5. We protect personal data against loss, unauthorised access and unauthorised modification;
  6. We exercise our rights under the law;
  7. If personal data is shared or entrusted to other entities, this is done in a secure manner, contractually secured and in accordance with applicable law.

  

XII. CHANGES TO THE PRIVACY POLICY

 You will be notified of any changes to this Privacy Policy by email or via a notice on our website: www.dpeint.com.

This Privacy Policy is effective from 24 October 2025

Last updated: 1 October 2025.    

 

 

 

 

COOKIE POLICY AND DESCRIPTION OF INTERNET TECHNOLOGIES USED

 

This Cookie Policy supplements the Privacy Policy with a description of the internet technologies we use. Below, we explain how your personal data may be involved in our personal data processing procedures.

Below is a table of contents to help you find the information you need:

  1. Information about the Personal Data Controller
  2. Joint data control
  3. What are cookies
  4. Requirement to accept cookies
  5. Purposes, scope and legal basis for the processing of personal data
  6. Information on changing cookie settings
  7. How long we store personal data
  8. Changes to the Privacy Policy

 

I. INFORMATION ABOUT THE PERSONAL DATA CONTROLLER

We kindly inform you that the controller of your personal data is DPE International Sp. z o.o. with its registered office in Poznań at ul. Rodawska 32A, 61-312 Poznań, entered in the Register of Entrepreneurs kept by the District Court in Poznań, 8th Commercial Division, under KRS number 0001037779, NIP 782 292 36 80, REGON 525383150.

Contact details:

Address: DPE International Sp. z o.o. , ul. Rodawska 32A, 61-312 Poznań

Website(s): www.dpeint.com

E-mail: hello@dpeint.com

The controller has appointed Łukasz Głowacki as Data Protection Officer. The Officer can be contacted at the following e-mail address: gdpr@dpeint.com .

 

II. JOINT DATA CONTROL

If you give your consent in the pop-up window related to cookies, the selected tools, and thus the companies, become co-controllers of personal data.

This means that for functional, analytical, advertising or social purposes, we become joint controllers together with technology providers. We jointly determine the purposes and means of processing. Depending on the programmes, tools, pixels or other internet technologies we use, a list of joint controllers is created. 

 

III. What are cookies?

Cookies are short pieces of information/text files stored on your computer, mobile phone, tablet or other device by the websites you visit. Cookies are encrypted in such a way that unauthorised persons cannot access them. They can be read by us as the personal data controller, as well as by systems belonging to other trusted entities whose technologies we use.

 

IV. Requirement to accept cookies

 In accordance with the latest guidelines and good practices, maintaining the session and providing the necessary functions of the website does not require your consent. Files related to this part are called essential.

Any additional cookies used for statistics or advertising require your consent. Our consent banners allow you to save all cookies, only essential cookies, or only the functionalities selected by you.

If the user gives their consent, they may later withdraw it or object to the processing of their personal data. This can be done by changing the cookie settings on our website by clicking on the cookie banner or by changing your browser settings. You can find more information about browser settings in section VI.

We fully accept your choices and comply with them.

 

V. Purposes, scope and legal basis for the processing of personal data

Cookies perform many functions on the website, which we will try to describe below:

  • impact on the processes and performance of the website — cookies are used to ensure that the website functions efficiently and that its features can be used, which is possible, among other things, by remembering settings between visits to the website. Thanks to cookies, you can efficiently navigate the website and its individual subpages;
  • session status — cookies often store information about how visitors use the website, e.g. which subpages they view most often. They also enable the identification of errors displayed on some subpages. Cookies used to store the so-called “session status” therefore help to improve services and increase the comfort of browsing the website;
  • creating statistics — cookies are used to analyse how users use the website (how many open the website, how long they stay on it, which content arouses the most interest, etc.). This allows us to continuously improve the website and adapt its operation to user preferences.
  • advertising targeting — these files are placed on our websites by our advertising partners. They can be used by these companies to create a profile of your interests and display relevant advertisements on other websites. Advertising cookies work based on the unique identification of your browser and device. If you do not agree to the use of these cookies, the advertisements displayed on various websites will not be tailored to you.
  • Connecting to social media – links to social media are part of internet technology. They sometimes allow you to log in, identify yourself, but also share content and rate it. They are often an integral part of today’s “online world”.

 

Scope of data collected

 Cookies identify the device and browser used to browse websites. They contain the name of the website they come from, the time they are stored on the end device and a unique number. They also allow us to find out if the device has already visited our website. We process information about how you use your computer, tablet or smartphone. Only some of this data, in combination with other data, may constitute personal data.

Importantly, many cookies are anonymised for us — without additional information, we are unable to identify individuals based on them.

Using the internet technologies we employ, we can process, for example:

  • device data: device type/model, unique device identifiers, MAC address, IP address, operating system, operating system version and device settings, language settings, screen resolution, web browser version and type;
  • location data: IP address, data about your location obtained using various positioning technologies;
  • other data: data on website usage, e.g. source of entry, links clicked by the User, number of clicks and views of dynamic website content, advertisements seen by the User and where, etc.

 

Purposes of processingTypes of cookiesLegal basis
Ensuring the proper functioning of the websiteNecessaryLegitimate interest of the Controller
Analytical and statisticalStatisticalUser consent
AdvertisingMarketingUser consent
SocialMarketingUser consent

 

VI. Information about changing cookie settings

It is possible to control and manage installed cookies.

One way to do this is through your web browser. If you do not want cookies to be used when browsing the website, most web browsers allow you to change your settings — you can completely block the automatic handling of cookies or request notification each time cookies are placed on your device. You can change your settings at any time. For more information, please visit: www.wszystkoociasteczkach.pl.

Information on how to delete cookies yourself in the most popular web browsers is available in the help section of your web browser and on the following pages (just click on the link):

 

Users can disable specific advertisers by visiting:

http://www.youronlinechoices.com/pl/twojewybory

 
VII. How long we store personal data

Cookies remain on your device:

  • until you leave the website or disable the software (web browser) – this mainly applies to technical cookies;
  • some cookies may remain on your device until you manually delete them.
  • Information that we can access using cookies is automatically deleted after one year.

 

VIII. Changes to the privacy policy 

The content of the Privacy Policy can be found here.

This Privacy Policy is effective from 24 October 2025.

Last update: 1 October 2025.