1. Controller and scope
The controller of personal data processed through this website is Ultra Power Polska Sp. z o.o., Główna 28a, 66-460 Nowiny Wielkie, Poland, VAT ID 5993245582, KRS 0000817267.
This policy applies to the UPP System website, including its English and German language versions, and to the enquiry forms available on it.
2. Data, purposes and legal bases
Depending on how you use the website, we may process contact details, company and project information, the content of your enquiry, and technical information such as IP address, time, requested URL, browser and device type.
- Enquiries and quotations: handling your message and taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in business communication and establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).
- Marketing information: only after separate, freely given consent (Article 6(1)(a) GDPR).
- Technical operation and security: delivering, troubleshooting and protecting the website (Article 6(1)(f) GDPR).
- Optional analytics: measuring and improving the website only after consent (Article 6(1)(a) GDPR).
3. Email and enquiry forms
When you contact us, we process the information you provide to answer the enquiry, prepare a configuration or quotation and continue the correspondence. Required fields are necessary to handle the relevant enquiry; all other details are voluntary.
A configurator enquiry may include buyer status, legal company name, EU VAT ID or local tax identifier, contact and delivery details, selected rack configurations, and price and transport calculations. We use these details to verify VAT treatment, including a VIES check where applicable, calculate transport and prepare the final offer. Submitting the enquiry is not a binding order.
The form sends the enquiry to info@ultrapower.pl. An automatic receipt confirmation may be sent from sales@ultrapower.pl.
4. Cookies, local storage and optional analytics
The website stores your privacy choice and the unsubmitted configuration basket in the browser's local storage. Contact details, delivery address and VAT ID are not stored there. These strictly necessary entries preserve your choice and configuration on your device. Analytics tools are not loaded unless consent has been given.
After you consent, Google Tag Manager may load to manage the analytics tags configured in its container. Google Analytics 4 and Microsoft Clarity are activated only when configured there. Google Analytics may then measure page views, events, approximate location, browser and device information. Clarity may collect interactions such as clicks, scrolling and page navigation for heatmaps and reconstructed session recordings. Form fields and sensitive areas must remain masked in Clarity.
You can change your choice at any time through “Cookie settings” in the footer. When consent is withdrawn, accessible analytics cookies are removed and further analytics tags are not started on the reloaded page.
5. Storage technologies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
upp-cookie-consent | Ultra Power | Stores the privacy choice in the browser's local storage. | Up to 6 months or until deleted |
upp-rack-configurations-v1 | Ultra Power | Stores the unsubmitted configuration basket without contact or delivery details. | Until deleted in the browser |
_ga, _ga_* | Google Analytics | Pseudonymously distinguishes visits and sessions after consent. | According to Google settings, typically up to 2 years |
_clck, _clsk and possible Microsoft cookies | Microsoft Clarity | Links page views, heatmaps and session analysis after consent. | Depends on the cookie and Microsoft settings |
Google Tag Manager loads only after your consent. GA4 and Clarity also require setup in the container.
6. Recipients and transfers outside the EEA
Data may be disclosed to hosting, email and IT providers, professional advisers and legally authorised public bodies where necessary for the relevant purpose. Once analytics is activated, Google Ireland Limited and Microsoft Ireland Operations Limited and their affiliates may receive data.
Where processing takes place outside the European Economic Area, the providers state that they rely on applicable adequacy decisions, standard contractual clauses or other safeguards permitted by law. See the privacy information provided by Google and Microsoft.
7. Retention
Enquiries and correspondence are retained for as long as necessary to handle them, manage the business relationship and comply with applicable evidence, accounting and limitation periods. Data used for marketing information is processed until consent is withdrawn. Server logs are deleted according to the hosting provider's security and retention rules.
A 14-month GA4 data-retention setting is planned before activation. Microsoft currently states that Clarity playback data is retained for 30 days and certain aggregated, labelled or selected data for up to 9 months. The confirmed account settings and current provider terms will apply.
8. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn at any time with effect for the future.
You may also lodge a complaint with the competent supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
9. Server logs and security
The server may record IP address, date and time, requested address, referrer, browser and operating-system information. These records support administration, diagnostics and security. We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration.
10. Privacy contact and changes
Privacy questions and requests can be sent to biuro@ultrapower.pl or to the postal address above. We may update this policy when website functions, providers or legal requirements change. The current version and revision date will always be published on this page.