General information
This Privacy Policy explains how RepowerYard processes personal data when you visit this website, submit an enquiry form or contact us by email about wind turbine parts, components, available assets, sourcing, brokerage or related business matters.
The data controller is Adrian Babij, who operates the independent project RepowerYard. RepowerYard is not currently a registered company. Adrian Babij determines why and how personal data is processed for the purposes described in this Policy.
You can contact the controller and exercise your privacy rights athello@repoweryard.eu. This is the contact point for privacy matters.
Personal data we may process
When you use a website enquiry form, we process the information needed to receive and answer it:
- your full name, company name and business email address;
- your phone number, if you choose to provide it;
- the content of your message and related correspondence;
- technical and commercial details such as turbine platform, part number, quantity, condition, location, documentation or photos;
- information included in later email correspondence, including your role, documents or photographs;
- lead attribution data such as the source page, listing identifier, referring page and campaign parameters;
- technical data such as IP address, browser and device information, request time, pages requested and basic server logs.
Please do not send special categories of personal data, such as health data, biometric data, political opinions, religious beliefs, trade union membership or criminal-offence data. We do not need such data to handle business enquiries.
Purposes and legal bases
Handling enquiries and correspondence
We use contact details and message content to respond, clarify requirements, provide information and prepare or discuss offers. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps or contract performance and Article 6(1)(f) GDPR for our legitimate interest in business communication.
Sourcing, verification and brokerage
We may process information needed to assess demand, verify parts or assets, coordinate with counterparties, check provenance, prepare commercial options and support transaction logistics. The legal basis is Article 6(1)(b) and Article 6(1)(f) GDPR.
Legal, accounting and tax obligations
If a transaction takes place, we may process data required for invoices, accounting, tax records and other legal obligations under Article 6(1)(c) GDPR.
Legal claims, security and maintenance
We may retain data to document communications, protect our rights or defend claims. Technical data and logs may be processed to deliver the website, diagnose errors and prevent abuse. The legal basis is Article 6(1)(f) GDPR.
Website and enquiry measurement
We use server-side conversion events to understand which listings and sources lead to a successfully submitted enquiry. These events contain operational details and campaign labels, but not form contents, names, email addresses, phone numbers or message text. The legal basis is Article 6(1)(f) GDPR.
Marketing
We do not use enquiry data to subscribe you to a newsletter or send unrelated electronic marketing. If we introduce marketing that requires consent, we will request it separately.
Voluntary provision of data
Using the form is voluntary. Full name, company name, business email and fields marked with an asterisk are required. Phone number and fields marked optional are voluntary. Without the required details and a message, we cannot receive or answer a form enquiry. You may contact us directly by email instead.
The checkbox beside the Privacy Policy confirms that you have read this information. It is not consent used as the legal basis for handling your enquiry.
Recipients of data
Recipients may include:
- Vercel Inc., providing hosting, serverless form handling, technical logs and conversion measurement;
- Brevo, whose email delivery service sends website enquiries to the RepowerYard inbox;
- Cloudflare, whose email routing service forwards mail sent to our domain;
- Google LLC, whose Gmail service is used to receive and manage business correspondence;
- the hosting provider of our n8n-based CRM automation, which receives enquiry details after a successful email submission;
- domain, DNS, security and other IT service providers;
- accounting, tax, legal or technical advisers;
- buyers, sellers, owners, refurbishers, logistics providers or counterparties where needed for a specific enquiry or transaction.
We do not sell personal data.
International data transfers
Vercel, Cloudflare and Google may process information outside the European Economic Area, including in the United States. Transfers to providers certified under the EU–US Data Privacy Framework are covered by the European Commission's adequacy decision. Other transfers, where applicable, require a valid mechanism such as Standard Contractual Clauses. Contact us for information about the safeguards applicable to your data.
See theVercel Privacy Notice,Cloudflare Privacy PolicyandGoogle Privacy Policy.
Retention periods
- Enquiries and correspondence are kept while the matter or business relationship is active and afterwards only as needed for follow-up, legal obligations or potential claims.
- Contract, invoice, accounting and tax records are kept for the period required by applicable law.
- Data needed for legal claims may be kept until relevant limitation periods expire.
- Form anti-abuse limits use a ten-minute window. Related transient server memory is cleared when its instance is recycled. Infrastructure logs follow the provider's applicable security and diagnostics retention periods.
Your rights
Subject to the GDPR, you may have the right to:
- access and receive a copy of your personal data;
- rectify inaccurate or incomplete data;
- request erasure or restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable.
To exercise your rights, contacthello@repoweryard.eu. We may ask for additional information where reasonably necessary to verify your identity or understand your request.
Automated decision-making
We do not make decisions based solely on automated processing that produce legal or similarly significant effects. We do not profile visitors for advertising or behavioural targeting.
External links
This website may link to external services. We are not responsible for third-party privacy practices and recommend reviewing their privacy notices.
Security
We use technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. Access is limited to people and providers who need it for the purposes described in this Policy.
Changes to this policy
We may update this Policy if our website, tools, providers, business processes or legal requirements change. The current version will always be available on this page.