PRIVACY POLICY

Respecting the right to privacy of persons who visit our website, we wish to declare that data obtained in this manner are processed in accordance with national and European laws and under conditions ensuring their security, i.e. the confidentiality, availability, integrity and accountability of the activities carried out. In order to ensure transparency of the data processing operations we carry out, we present below the personal data protection principles applicable within the Eternis Group, established on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: the “GDPR”).

By accepting this Privacy Policy, you consent to the Personal Data Controller and the entities from the Eternis Group processing your data included in contact forms and collected through cookies, in accordance with applicable laws and the consents you have given.

I. Who is the Controller of your personal data?

The Controller of your personal data is the operator of the website pyszne.eternis.pl, i.e. Eter Connect sp. z o.o. with its registered office in Warsaw, at Aleja Niepodległości 18, 02-653 Warsaw, entered in the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0000858523, NIP: 5223189244 (the “Company”), or one of the companies from the Eternis Group with which you establish contact through the forms available on the website (each of them being a separate controller of your data). You may contact the Group companies by e-mail at: biuro@eternis.pl and by telephone at: 720-760-760.

In matters concerning the processing of your personal data and the rights related thereto, you may contact the Data Protection Officer appointed within the Group by e-mail at: rodo@eternis.pl or in writing to the registered office address of each of the above-mentioned companies from the Eternis Group.

II. What personal data do we process?

In connection with the use of our website, we process the following personal data obtained through:

1. contact forms available on the website: your first name and surname and contact details (e-mail address and telephone number);

2. the chatbot available on the website: the content of the conversation, your first name and surname, contact details and IP address;

3. cookies: data concerning your IP address, information on how you use our website, browsing time, user location, type of operating system and language version used on the device.

In addition, the information indicated above may be combined with other personal data that you have provided to the Company, including in particular through the contact forms made available to you.

III. What is the purpose and legal basis for processing your personal data?

The Company and the companies from the Eternis Group process your personal data for the following purposes:

a) to enable you to use our website for informational purposes (legal basis: the Company’s legitimate interest consisting in ensuring access to its website, the functionality and optimisation of websites and the security of IT systems, i.e. Article 6(1)(f) GDPR);

b) to contact you after you submit a contact form: “Start work”, “Rent a vehicle”, “Start driving with …”, “Start delivering with …”, aimed at establishing cooperation with one of the companies from the Eternis Group (legal basis: steps taken prior to entering into a contract, i.e. Article 6(1)(b) GDPR);

c) to contact you through the chatbot available on our website, or to receive data provided through the chatbot with a view to starting cooperation with one of the companies from the Eternis Group (legal basis: the Controller’s legitimate interest consisting in responding to the enquiry sent, which constitutes a legitimate interest of the companies from the Eternis Group, i.e. Article 6(1)(f) GDPR, or taking steps prior to entering into a contract with one of the companies from the Eternis Group, i.e. Article 6(1)(b) GDPR);

d) to contact you through WhatsApp and Telegram messengers, which constitutes the Controller’s legitimate interest consisting in responding to the enquiry sent (Article 6(1)(f) GDPR);

e) to send commercial information for marketing purposes, including information about products or services of the companies from the Eternis Group (legal basis: the legitimate interest of the companies from the Eternis Group, Article 6(1)(f) GDPR, subject to your separate consent to the choice of a specific communication channel by ticking the relevant checkbox, in accordance with separate regulations in this respect);

f) to assert or defend against legal claims related to the operation of the website, to prevent crimes and to conduct related investigations (legal basis: the Company’s legitimate interest, i.e. Article 6(1)(f) GDPR);

g) to fulfil obligations imposed on the Company or the companies from the Eternis Group by generally applicable laws, including in particular tax and accounting regulations (legal basis: Article 6(1)(c) GDPR).

IV. Social media and messenger plugins

Our website also contains social media and messenger plugins implemented as special buttons that allow you to establish a direct connection with the server of the relevant social media platform or messenger. The pyszne.eternis.pl website uses the following plugins and widgets:

TikTok

TikTok features have been integrated with our website. When you use TikTok, the websites you visit are linked to your TikTok account and made available to other users. If you are not logged into your TikTok account, clicking the TikTok icon will display the TikTok login page, where you must enter your login details. In this way, data will also be transmitted to TikTok. We wish to point out that we have no knowledge of the content of the data transmitted or how it is used by TikTok. More information can be found in TikTok’s Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/pl. At the same time, we inform you that the use of TikTok may result in the transfer of data to countries outside the EEA (European Economic Area).

YouTube

Our website uses plugins of YouTube, which is operated by Google. If you use the YouTube plugin, a connection with YouTube servers will be established. The YouTube server receives information about which pages you have visited.

If you are logged into your YouTube account, YouTube allows your browsing behaviour to be linked directly to your personal profile. You can prevent this by logging out of your YouTube account. If you are not logged in, clicking the YouTube button will display the YouTube login page, where you can enter your login details. More information can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=pl.

Instagram

If you use the Instagram plugin, you establish a connection with the servers of the provider of this social media platform.

If you are logged into your Instagram account, the service allows the activity to be linked directly to your personal profile. You can prevent this by logging out of your account. If you are not logged in, clicking the Instagram button will display the login page, where you can enter your login details. More information can be found in the Privacy Policy of Meta Platforms Ireland Limited: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

Facebook

If you are logged into your Facebook account, the service allows your browsing behaviour on the portal to be linked to your personal profile. You can prevent this by logging out of your Facebook account. If you are not logged in, clicking the Facebook button will display the login page, where you can enter your login details. More information can be found in the Privacy Policy of Meta Platforms Ireland Limited: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

WhatsApp

Our website allows you to contact us through internet messengers. One of them is WhatsApp. By clicking the WhatsApp icon, you will be redirected to the operator’s website. If you are logged into your account, you can contact us. You can also download the application and create an account. Please remember that our website only enables you to access the provider’s website; we are not responsible for how this provider collects and processes personal data. More information can be found in the Privacy Policy: https://www.whatsapp.com/privacy.

Telegram

Another messenger through which you may contact us is Telegram. By clicking this icon, you will be redirected to the operator’s website. If you are logged into your account, you can contact us. You can also download the application and create an account. Please remember that our website only enables you to access the provider’s website; we are not responsible for how this provider collects and processes personal data. More information can be found in the Privacy Policy: https://telegram.org/privacy/eu.

V. To which recipients may we disclose your personal data?

Your personal data may be disclosed to authorised public authorities, companies from the Eternis Group (to the extent that these companies provide services to one another or to the extent that they relate to actions you undertake with one of the companies from the Eternis Group) and entities providing services on behalf of the Controller, on the basis of concluded agreements and in accordance with the Controller’s instructions, including in particular entities providing IT support to the Controller.

In addition, when using the “Start driving with …” tab or the chatbot on our website and selecting the provider for which you would like to perform an order, your personal data entered in the form, i.e. your first name and surname, telephone number and e-mail address, will be disclosed to the provider you have selected (i.e. Uber, Bolt, Wolt, Freenow etc.). The disclosure of your personal data to the provider constitutes our legitimate interest (Article 6(1)(f) GDPR), consisting in enabling the provider to create an account for you, which is necessary to establish cooperation with one of the Group companies and to make settlements in this respect. After the provider creates an account for you, it becomes the controller of your personal data in this respect.

VI. For how long will we process your personal data?

Your personal data will be processed until the legal basis for its processing expires, the processing purpose is achieved, or that purpose expires for another reason. Where:

a) the legal basis for processing is the legitimate interest of the Company or one of the companies from the Eternis Group, the personal data will be stored until the legitimate interest of the Company or the companies from the Eternis Group is fulfilled or until you object to the processing of your personal data. In the case of personal data provided through the chatbot or forms, if no contract is concluded with you, the data will be deleted no later than within 30 days;

b) we process data on the basis of a contract, the personal data will be processed until the expiry of the contract binding you with the Company, and then for the period required by law (tax and accounting regulations) – as a rule, 5 tax years;

c) we process personal data on the basis of your consent, the data will be processed until the consent given is withdrawn, without affecting the lawfulness of processing carried out by the Company or one of the companies from the Eternis Group on the basis of consent before its withdrawal.

The above processing periods may be extended where processing is necessary to establish and pursue possible claims or to defend against claims, and thereafter only where and to the extent required by law.

VII. Do we make automated decisions regarding your data?

No automated decisions (decisions without human involvement) will be made with respect to your personal data, including automated profiling of your data.

VIII. Cookies

We may collect your data through technologies such as cookies, which enable the identification of a browser or device.

Cookies are IT data, in particular text files, stored on the terminal device of a website user (computer, tablet, etc.) and intended for the use of the website’s pages. Cookies usually contain the name of the website from which they originate, the period for which they are stored on the terminal device and a unique number. Cookies identify the data of the computer and browser used to browse websites – for example, they make it possible to determine whether a given computer has already visited the website. Data obtained from cookies are not in any way combined with users’ personal data, i.e. they do not affect the operation of terminal devices and do not cause configuration changes in the software installed on those devices.

The following types of cookies are used as part of our website:

• Strictly necessary cookies: used for the operation of our website and cannot be disabled by us. They are triggered in response to actions taken by the user that are equivalent to a request for services, such as setting privacy preferences or completing a form. These cookies do not store any information enabling user identification.
• Preference cookies: these cookies enable the website to remember information that changes the appearance or functioning of the website, e.g. the preferred language or the region where the user is located.
• Statistical cookies: these help us understand how users behave on the website and how often they visit it.
• Marketing cookies: used to track user traffic on our website. The purpose of these cookies is to display personalised advertisements to users.
• Unclassified cookies: cookies that are in the process of being classified together with the providers of individual cookies.

The retention periods for individual cookies are as follows:

Strictly necessary cookies

Analytical and marketing cookies

Through the above cookies, we may collect the following information:

1. the identifier of cookies installed on the terminal device and their retention period;

2. information on the use of our website, i.e. data on browsing time, user location and device type, IP address, operating system and its version used on the device, and the web browser used by the user.

The cookies indicated above are stored on your device for the period specified in their parameters or until you delete them in the manner described below.

Information on how to remove software from the user’s terminal device and change cookie settings can be found in the user’s web browser. As a rule, a web browser (software used to browse websites) allows cookies to be stored on the user’s terminal device by default. Information on how to disable cookies can be found on the website of the relevant browser:

• Opera browser: https://help.opera.com/pl/latest/web-preferences/#cookies
• Firefox browser: https://support.mozilla.org/pl/kb/wzmocniona-ochrona-przed-sledzeniem-firefox-desktop?redirectlocale=pl&redirectslug=W%C5%82%C4%85czanie+i+wy%C5%82%C4%85czanie+obs%C5%82ugi+ciasteczek
• Google Chrome browser: Clear cache and cookies – Computer – Google Account Help
• Internet Explorer 10 browser: https://support.microsoft.com/pl-pl/hub/4338813/windows-help?os=windows-10
• Microsoft Edge browser: edge://settings/content/cookies
• Safari browser: https://support.apple.com/pl-pl/HT201265

You may change your cookie settings at any time. In particular, these settings may be changed so as to block the automatic handling of cookies in the web browser settings or to inform you each time cookies are placed on the website user’s device. In addition, you may opt out of cookies that profile you based on your interests in order to present you with personalised advertisements.

IX. What rights do you have in connection with our processing of your personal data?

The Company and the companies from the Eternis Group enable you to exercise the following rights:

a) access to data – you are entitled to obtain access to your personal data and obtain a copy of it. In addition, you have the right to obtain information concerning, in particular, the purpose of processing, categories of processed data, information about recipients, the planned period for storing your data and the rights available to you;

b) erasure of data – if your personal data is no longer necessary for the purpose for which it was collected, or if you object to the processing of data and at the same time there are no overriding legitimate grounds on our part, and also if you consider that we process your data unlawfully, you have the right to request its erasure in whole or in part. However, this right does not apply to data to the extent that it is necessary to pursue, establish or defend our claims or to comply with our legal obligation to process or store it under applicable law;

c) restriction of processing – if, in your opinion, we hold incorrect data about you, process it without grounds, or you do not want us to delete it because you will need it to establish, pursue or defend claims, and also during the period preceding your objection to the processing of data, you have the right to request that we restrict the processing of data solely to its storage or to the performance of other actions agreed with you. Despite your exercise of the above right, we may process your data where this is necessary to establish, pursue or defend claims available to us;

d) data portability – you have the right to receive your personal data in a structured, commonly used and machine-readable format and then request that this data be transmitted to another controller, if we process your data on the basis of your consent or a contract concluded with you and if the data is processed by automated means;

e) objection to the processing of personal data – on grounds relating to your particular situation, you may at any time object to our processing of your personal data if we process it on the basis of our legitimate interest. After you submit an objection, we will no longer be able to process personal data on the above-mentioned processing grounds unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or grounds for the establishment, pursuit or defence of claims;

f) lodging a complaint with the supervisory authority – if you consider that we process your personal data unlawfully, you have the right to lodge a complaint with the national supervisory authority, which is the President of the Personal Data Protection Office, with its registered office in Warsaw.

If you wish to exercise the rights indicated above, please send your request to the e-mail address: rodo@eternis.pl or by post to the address of the relevant company from the Eternis Group. At the same time, we inform you that the rights indicated above are not absolute and will not apply in every case of our processing of your personal data.

We also inform you that before exercising the above rights, we are required to verify the person making the request as the data subject to whom the personal data covered by the request relates.

X. Changes to the Privacy Policy

We are entitled to amend this Privacy Policy. Any changes to this document will be announced promptly on this page. We will gladly answer any additional questions regarding this document or the website in general.

Last updated: 22 June 2026