Privacy Policy

Last updated: 26 March 2026

Applies to: VoltAlert mobile application (Android and iOS) and website voltalert.pl

1. Data Controller

The controller of your personal data is:

Samael Sp. z o.o.
VAT: PL9930654255
Email: biuro@samael.pl

We process data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.

2. Data we collect

From registered users:

• Email address — account identifier and service communication channel.
• Password — stored exclusively in encrypted form (bcrypt). We have no access to passwords in plain text.
• Preferences — user-selected: currency, language, alert threshold, dark mode, notifications.
• Push notification token — only if the user enables notifications in the mobile app. The token is used for three categories of messages:
  • system (operational — price alerts, update info, security warnings);
  • individual (messages from the Operator addressed directly to a specific User);
  • bulk marketing — only for Users who have given separate, voluntary consent (Profile → Marketing notifications). Withholding consent does not affect receipt of system or individual messages. See §11 of the Terms for details.
• Marketing notifications consent (boolean, defaults to false) — stored in the marketing_push_enabled field; opt-in and opt-out exclusively in the app.

Voluntarily — only in the Lead module (Company Directory):

• Name, phone number, contact email, installation parameters — only when the user independently fills in and submits a contact form to a selected company from the Directory.

Outside the Lead form, we do not collect names, phone numbers, addresses or any other identifying data.

3. Purpose and legal basis

• Service provision (Art. 6(1)(b) GDPR) — login, data display, alerts.
• Security and diagnostics (Art. 6(1)(f) GDPR) — fraud prevention, performance monitoring.
• Lead transfer (Art. 6(1)(a) GDPR) — only on the basis of the user's explicit consent.
• Advertiser management (Art. 6(1)(b) and (c) GDPR) — contract execution, tax obligations.

4. What we do NOT do with data

• We do not sell personal data to any third parties.
• We do not share data with data brokers, ad networks or other parties without user consent.
• We do not display behavioural or targeted advertising on the platform.
• We do not send marketing emails without consent.
• We do not profile users for commercial purposes.
• We do not transfer contact data to advertisers without a one-time, voluntary, informed consent expressed in the Lead form.

5. Data shared with advertisers (Lead)

The Company Directory module allows users to voluntarily submit contact data to a selected company to receive a quote.

• Before submission, the user sees the list of companies to which their data will be sent.
• Data is transferred only after the user actively checks a consent checkbox and clicks the button.
• Consent is one-time and applies only to that specific inquiry.
• Users may request deletion of their data at any time: biuro@samael.pl.

Advertisers are independent data controllers for the data received and are obliged to process it solely for the purpose of preparing a quote, not to share it further, and to delete it after contact ends.

6. Advertiser data

Under a commercial agreement, we process: company name, VAT number, address, email and phone of the contact person. Accounting documents are retained for 5 years (statutory tax obligation).

7. Market data (ENTSO-E)

Price data in VoltAlert comes from the ENTSO-E Transparency Platform — the public European energy market reporting system. This data contains no user personal information. ENTSO-E bears no responsibility for the way data is presented or used by VoltAlert.

8. Diagnostic data

The app may collect anonymous technical data (device type, OS version, error logs) solely to improve service quality. This data does not allow user identification.

9. Data security

• Password encryption (bcrypt) — passwords are never stored in plain text.
• Encrypted communication (HTTPS/TLS 1.2+).
• Row Level Security (RLS) in the database — each user has access only to their own data.
• Regular software and infrastructure updates.
• Access control — personal data is accessible only to authorised staff.

10. User rights

Under GDPR you have the following rights: access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent, and the right to lodge a complaint with the supervisory authority (President of UODO, ul. Stawki 2, 00-193 Warsaw, Poland). To exercise your rights: biuro@samael.pl.

11. Account and data deletion

You may delete your account at any time: in the app (Profile → Delete account) or at voltalert.pl/delete-account.html. Deletion permanently and irreversibly removes login data, settings, alert history and push token.

12. Cookies and localStorage

The website does not use marketing or analytical cookies. We use only browser localStorage to store interface settings (language, theme, currency) and login session. This data is not transmitted to external servers.

13. Sharing and redistribution of platform data

14. Children and minors

VoltAlert presents only numerical energy market data. We do not apply age restrictions, but the nature of the service means it is primarily useful to adults. We do not knowingly collect data from persons under 16 years of age.

15. Policy changes

We reserve the right to update this policy. We will notify users of material changes by updating the date and sending an email to registered users.

16. Contact

Samael Sp. z o.o.
Email: biuro@samael.pl