Privacy Policy
Last updated: 9 September 2026

This Privacy Policy sets out the principles governing the processing of personal data of users of the Clean-Ride website, in particular in connection with the use of the “Notify me” form, the pre-order form and communication with the Controller.

Personal data is processed in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and applicable national legislation.

1. Data Controller

The controller of your personal data is:

Holzernte sp. z o.o.
ul. Niewodnicka 55
15-635 Klepacze
Poland
Tax Identification Number (NIP): 9662156220

For matters relating to the processing of personal data or the exercise of your rights under the GDPR, you can contact the Controller at:

contact@cleanride-trucks.com.

2. Purposes, Scope and Legal Bases for Processing Personal Data

2.1. “Notify me” form

If you use the “Notify me” form, the Controller processes the email address you provide for the purpose of informing you about the availability of Clean-Ride.

The legal basis for the processing is your consent pursuant to Article 6(1)(a) of the GDPR.

Providing your email address is voluntary but necessary to receive the notification. Subscription may require confirmation of your email address using a double opt-in mechanism.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

2.2. Pre-order form

Personal data submitted through the pre-order form is processed for the purpose of handling your request, arranging the pre-order and taking steps at your request prior to entering into a contract and, if a contract is concluded, for its performance.

The legal basis for the processing is Article 6(1)(b) of the GDPR.

The personal data processed may include in particular:

  • your name or company name,
  • VAT number / tax identification number,
  • email address,
  • telephone number,
  • number of units ordered,
  • billing address,
  • shipping address,
  • country,
  • information provided in the message field.

Providing data marked as required is necessary for us to process your request. Providing any other information is voluntary.

Where the performance of an order gives rise to legal obligations, in particular accounting or tax obligations, the relevant personal data may also be processed pursuant to Article 6(1)(c) of the GDPR.

2.3. Contact with the Controller

If you contact the Controller by email or telephone, the personal data you provide in connection with your enquiry is processed for the purpose of responding to your enquiry and conducting further correspondence.

Depending on the nature of your enquiry, the legal basis for processing is Article 6(1)(b) of the GDPR where the communication concerns entering into or performing a contract, or Article 6(1)(f) of the GDPR, i.e. the Controller’s legitimate interest in conducting communications and responding to enquiries.

2.4. Establishment, Exercise or Defence of Legal Claims

Personal data may also be processed to the extent necessary for the establishment, exercise or defence of legal claims.

The legal basis for such processing is the Controller’s legitimate interest pursuant to Article 6(1)(f) of the GDPR.


3. Recipients of Personal Data

Personal data may be disclosed to entities supporting the Controller in operating the website, handling forms and managing communications, solely to the extent necessary for the provision of such services.

Recipients may include, in particular, providers of hosting, IT and email services, as well as:

  • MailerLite – for the operation of the “Notify me” form and email communications,
  • Basin – for the technical handling of the pre-order form,
  • entities providing accounting, legal or administrative services to the Controller.

Personal data may also be disclosed to competent public authorities where required by applicable law.

The Controller does not sell users’ personal data.


4. Transfers of Personal Data Outside the European Economic Area

In connection with the Controller’s use of external service providers, personal data may, in certain circumstances, be processed outside the European Economic Area (EEA).

Where such transfers take place, they are carried out in accordance with the GDPR and on the basis of appropriate safeguards ensuring an adequate level of data protection, including, where applicable, an adequacy decision adopted by the European Commission or Standard Contractual Clauses approved by the European Commission.


5. Data Retention

Personal data is retained for no longer than necessary for the purposes for which it was collected, taking into account applicable legal requirements.

In particular:

  • data submitted through the “Notify me” form – until you have been informed about the availability of Clean-Ride or until you withdraw your consent, whichever occurs first;
  • data relating to a pre-order and the performance of an order – for the period necessary to process the request and perform the contract and subsequently for the period required by applicable law or necessary for the establishment, exercise or defence of legal claims;
  • data relating to communication with the Controller – for the period necessary to handle the correspondence and subsequently for the period justified by the possibility of establishing, exercising or defending legal claims.

Where the Controller is legally required to retain certain data for a longer period, such data will be retained for the period required by applicable law.


6. Rights of Data Subjects

Subject to the conditions set out in the GDPR, you have the right to:

  • access your personal data and obtain a copy of it,
  • rectify inaccurate personal data,
  • request the erasure of your personal data,
  • request restriction of processing,
  • data portability, where applicable,
  • object to processing where the processing is based on the Controller’s legitimate interests,
  • withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise any of these rights, please contact the Controller at:

contact@cleanride-trucks.com

You also have the right to lodge a complaint with the competent supervisory authority. In Poland, the competent authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).


7. Data Security

The Controller applies appropriate technical and organisational measures designed to ensure a level of security appropriate to the risks associated with the processing of personal data, including protection against unauthorised access, loss, destruction, alteration or unauthorised disclosure.

8. Changes to this Privacy Policy

This Privacy Policy may be updated, in particular, in the event of changes to applicable law, the operation of the website, the scope of personal data processed or the services used by the Controller.

The current version of the Privacy Policy will be made available on the Clean-Ride website together with the date of its latest update.