Privacy Policy
for elrandos.pl / elrandos.com
Last updated: April 4, 2026
Β§ 1. Data Controller
The controller of your personal data is RadosΕaw BryΕa (hereinafter: "Controller").
For matters related to the protection of personal data, you can contact the Controller at: kontakt@elrandos.pl.
Β§ 2. Purposes and Legal Bases for Data Processing
Your personal data is processed for the following purposes:
Waitlist
Scope of data: email address, name (optional), product interests, car model (optional), language, signup source.
Purpose: registration on the waiting list, notification about product availability and sales launch.
Legal basis: Art. 6(1)(a) GDPR (consent given by signing up for the waitlist).
You may withdraw your consent at any time by contacting the Controller at kontakt@elrandos.pl.
Contact Form
Scope of data: name, email address, message subject, message content, language.
Purpose: responding to your inquiry and handling correspondence.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest of the Controller β handling inquiries).
Newsletter
Scope of data: email address.
Purpose: sending marketing information, product updates, and newsletters.
Legal basis: Art. 6(1)(a) GDPR (consent given by subscribing to the newsletter).
You may withdraw your consent at any time via the unsubscribe link in every email or by contacting the Controller.
Cookies
Scope of data: analytics identifiers (Google Analytics).
Purpose: website traffic analysis, service quality improvement.
Legal basis: Art. 6(1)(a) GDPR (consent given via the cookie banner).
Detailed information about cookies can be found on the Cookie Policy page.
Β§ 3. Data Recipients
Your data may be shared with the following categories of recipients:
- MailerSend (Mailerlite Group, Lithuania) β transactional email service (confirmations, notifications). Processing within the EEA.
- Vercel Inc. (USA) β application hosting. Data processed in the EU region (Paris, France). Data transfer secured by Standard Contractual Clauses (SCCs).
- Google LLC (USA) β Google Analytics service, only with your consent. Data transfer secured by Standard Contractual Clauses (SCCs).
Β§ 4. Data Transfers Outside the EEA
Due to the use of Google Analytics and Vercel hosting, your data may be transferred to the United States.
Data transfers are carried out based on Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your data.
Β§ 5. Data Retention Period
Your data will be stored for the following periods:
- Waitlist: until consent withdrawal or a maximum of 2 years from the registration date.
- Contact form: 12 months from the date the message was received.
- Newsletter: until you unsubscribe from the mailing list.
- Analytics cookies: according to Google Analytics settings (up to 2 years).
After the retention period, data is deleted or anonymized.
Β§ 6. Your Rights
In connection with the processing of your personal data, you have the following rights:
- Right of access β you can obtain information about what data we process about you.
- Right to rectification β you can request the correction of inaccurate data.
- Right to erasure ("right to be forgotten") β you can request the deletion of your data.
- Right to restriction of processing β you can request restriction of processing in certain situations.
- Right to data portability β you can receive your data in a structured format.
- Right to object β you can object to processing based on legitimate interest.
- Right to withdraw consent β if processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl).
To exercise any of the above rights, contact the Controller: kontakt@elrandos.pl.
Β§ 7. Voluntary Nature of Providing Data
Providing personal data is voluntary but necessary to use certain services (waitlist, contact form, newsletter).
Failure to provide the required data will prevent the delivery of the given service.
Β§ 8. Automated Decision-Making
The Controller does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Β§ 9. Cookies
Β§ 10. Changes to the Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy. Users will be informed of significant changes via a notice on the website.
The date of the last update is visible at the beginning of this document.