Privacy Policy

1. General Information

This Privacy Policy explains how RepowerYard processes personal data when you visit this website, submit an enquiry form or contact us by email about wind turbine parts, components, available assets, sourcing, brokerage or related business matters.

RepowerYard is currently an independent project operated by its founder and is not a registered company. The individual operating RepowerYard determines why and how personal data is processed and is the data controller for the processing described in this Policy.

You can contact the controller and exercise your privacy rights at hello@repoweryard.eu. This is the dedicated contact point for privacy matters.

2. Personal Data We May Process

When you use a website enquiry form, we process the information needed to receive and answer it:

• your full name, company name and business email address, which are required in the form;
• your phone number, if you choose to provide it;
• the content of your message and related correspondence;
• technical and commercial details relevant to your inquiry, such as turbine platform, part number, component type, quantity, condition, location, documentation, photos or asset information;
• information included in later email correspondence, which may include your role, documents or photographs;
• lead attribution data submitted with an enquiry, such as the source page, listing identifier, referring page and campaign parameters included in the page address;
• technical data such as IP address, browser and device information, request and submission time, pages requested and basic server logs.

Please do not send us special categories of personal data, such as health data, biometric data, political opinions, religious beliefs, trade union membership, criminal offense data or other sensitive information. We do not need such data to handle business inquiries.

3. Purposes and Legal Bases

We process personal data for the following purposes:

Handling inquiries and correspondence

We use contact details and message content to respond to inquiries, clarify requirements, provide information, continue business communication and prepare or discuss offers. The legal basis is Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or contract performance, and Article 6(1)(f) GDPR where processing is necessary for our legitimate interest in business communication.

Sourcing, verification and brokerage

Where relevant to an inquiry, we may process information needed to assess demand, verify available parts or assets, coordinate with counterparties, check provenance, prepare commercial options and support transaction logistics. The legal basis is Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

Legal, accounting and tax obligations

If a transaction takes place, we may process data required for invoices, accounting, tax records and other legal obligations. The legal basis is Article 6(1)(c) GDPR.

Establishing, exercising or defending legal claims

We may retain data where necessary to document business communications, protect our rights, recover payments or defend against claims. The legal basis is Article 6(1)(f) GDPR.

Website security and maintenance

Technical data and server logs may be processed to deliver the website, diagnose errors, prevent automated or excessive submissions and maintain security. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and reliable website.

Website and enquiry measurement

We use privacy-focused website analytics and non-personal conversion events to understand which pages and listings are useful and which sources lead to a successfully submitted enquiry. Form contents, names, email addresses, phone numbers and message text are not sent to the analytics service. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in measuring and improving the website and enquiry process.

Marketing

We do not use website enquiry data to subscribe you to a newsletter or send unrelated electronic marketing. If we introduce marketing that requires consent, we will request it separately through a clear, optional opt-in. Service messages and replies concerning your enquiry are not marketing subscriptions.

4. Voluntary Provision of Data

Using the website form is voluntary. Full name, company name, business email address and the fields marked with an asterisk are required to submit the form. Phone number and fields marked as optional are voluntary. You may instead contact us directly by email.

The checkbox beside the Privacy Policy confirms that you have read this information. It is not consent used as the legal basis for handling your enquiry.

5. Recipients of Data

We disclose personal data only where needed for the purposes described in this Policy. Recipients may include:

• Vercel Inc., which provides website hosting, privacy-focused web analytics, serverless form handling and technical logs;
• Google LLC, whose Gmail service is currently used to receive and manage business correspondence;
• domain, DNS, security and IT service providers;
• accounting, tax, legal or technical advisers;
• buyers, sellers, asset owners, refurbishers, logistics providers or other business counterparties where this is necessary to handle a specific inquiry or transaction.

We do not sell personal data.

6. International Data Transfers

Vercel and Google are providers based in the United States and may process information in the United States or other countries outside the European Economic Area. Such processing is subject to the safeguards and lawful transfer mechanisms made available by the relevant provider, which may include an applicable adequacy decision, the EU-US Data Privacy Framework or Standard Contractual Clauses.

More information is available in the Vercel Privacy Notice and the Google Privacy Policy.

7. Retention Periods

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected. The following criteria apply:

• Enquiry and email correspondence is kept while the matter or business relationship is active and afterwards only for as long as reasonably needed for follow-up, legal obligations or potential claims. It is then deleted or anonymised.
• Data connected with contracts, invoices, accounting or tax records is kept for the period required by applicable law.
• Data needed to establish, exercise or defend legal claims may be kept until the relevant limitation periods expire.
• Temporary anti-abuse records used by the enquiry form expire after approximately 10 minutes. Hosting and infrastructure logs are retained for the shorter, plan-dependent periods applied by the provider for security and diagnostics.

8. Your Rights

Subject to the conditions set out in the GDPR, you may have the right to:

• access your personal data;
• receive a copy of your personal data;
• rectify inaccurate or incomplete data;
• request erasure of data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability, where applicable.

To exercise your rights, contact us at hello@repoweryard.eu. We may ask for additional information if reasonably necessary to verify your identity or understand your request.

9. Supervisory Authority

If you believe that your personal data is processed unlawfully, you have the right to lodge a complaint with a competent supervisory authority.

In Poland, the supervisory authority is the President of the Personal Data Protection Office:

Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland
https://uodo.gov.pl/p/kontakt

10. Cookies and Similar Technologies

This website uses Vercel Web Analytics to measure aggregated visits and page performance. Vercel Web Analytics does not use cookies, does not create cross-site profiles and is not used for advertising or remarketing. Page addresses are sent without query strings or fragments, reducing the risk that campaign or other URL parameters appear in analytics reports.

A successful enquiry may also generate a conversion event containing only non-personal operational fields such as the listing identifier, enquiry type, source section and campaign label. Form contents, names, email addresses, phone numbers and message text are excluded from analytics events.

The website does not use Google Analytics, advertising pixels or a third-party consent-management platform. Campaign parameters already present in a page address may be carried between internal links and included with an enquiry so its source can be understood; they are not stored in cookies or browser storage by this website.

The website uses self-hosted fonts and does not contact Google Fonts when a page is opened. Because no non-essential cookies or browser storage are currently used, the website does not display a cookie consent banner. If this changes, non-essential technologies will not be activated before any consent required by law has been obtained, and this Policy will be updated.

11. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. We do not conduct profiling for advertising or behavioral targeting purposes.

12. External Links

This website may contain links to external websites or services. We are not responsible for the privacy practices of third parties. We recommend reviewing their privacy notices before using those services.

13. Security

We use appropriate technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure. Access to data is limited to persons and service providers who need it for the purposes described in this Policy.

14. Changes to This Policy

We may update this Privacy Policy if our website, tools, service providers, business processes or legal requirements change. The current version will be available on this website.