Privacy Policy

1. Who is responsible for your data

SOLIDE Walerian Majewski, ul. Sportowa 35, 84-240 Reda, Poland, VAT ID PL5832832914, is the controller of personal data processed to operate HydrogenReady. Contact us about privacy or your rights at walerian@hydrogenready.com or at the postal address above.

This policy covers hydrogenready.com and its application, including accounts, company profiles, products, services, projects, Newsroom, Market Pulse and Market Opportunities. The marketplace is B2B, but business contact details may still be personal data.

2. Data and sources

We receive data you provide: name, email, account and authentication information, organisation membership and role, business contact details, profile and listing content, uploaded files, favourites, enquiries and support correspondence. Social sign-in, when available and selected, supplies the identity and profile information authorised with Google or GitHub. Passkeys use a public-key credential; we do not receive the biometric data used by your device to unlock it.

Our infrastructure processes IP addresses, browser and device information, requested addresses, timestamps and diagnostic or security records. Optional analytics may process online identifiers, page views, interactions and approximate location.

An organisation administrator may invite you or supply your professional contact details. Editorial content and market research may include names, professional roles and business contact information from company websites, press releases, public registers and linked sources. Contact us to ask about the source of information relating to you. Please avoid sending sensitive personal data or private information about other people unless necessary and lawful.

3. Why we process data

We use account, profile, listing and requested service data to provide the service and take steps you request before a contract: Article 6(1)(b) GDPR where you are the contracting individual. For employees or representatives acting for an organisation, our basis is Article 6(1)(f): our legitimate interest in operating the organisation’s account and communicating with its representatives.

For enquiries, support, moderation, preventing abuse, security, service diagnostics and defending claims, we rely on Article 6(1)(f), balancing our interests in a reliable business platform against your rights. A contractual enquiry from you personally may instead fall under Article 6(1)(b). Tax, accounting and legally required disclosures rely on Article 6(1)(c).

Optional analytics and tracking rely on consent under Article 6(1)(a) and applicable rules on device storage. Any future newsletter subscription or optional electronic marketing will require the appropriate separate permission; opening an account is not a newsletter subscription.

Our legitimate interest in providing industry information supports proportionate editorial use of publicly available professional information. Public availability does not remove your rights. Market indicators assess markets, not your creditworthiness or eligibility.

Providing optional information is voluntary. Without required account or service fields we cannot create an account or fulfil the corresponding request. You can read public content without an account or optional tracking consent.

4. Public profiles and business contacts

Information submitted for a public company profile, listing, project or article can be viewed worldwide, indexed by search engines and shared by visitors. Do not publish private contact details unless you intend this. Account credentials and internal organisation membership records are not public listing fields.

When you contact a listed company, that company processes the information it receives for its own purposes and under its own privacy notice. We do not control its subsequent handling of your enquiry. Links to external news, tenders, events and social networks lead to services governed by their own policies.

5. Cookies and analytics

Essential cookies and similar storage support login, security, language and your preferences. The login session is configured for up to 30 days, subject to renewal or earlier sign-out. The hr_tracking_consent cookie remembers your choice for 180 days. Other necessary storage can end with the session or when the preference is cleared.

Google Tag Manager loads optional tags only after you accept optional tracking. Where Google Analytics is enabled through that container, it measures website use; its cookies and retention depend on the active tag configuration. We do not treat merely visiting the website as consent.

Use “Cookie settings” at the bottom of the page to accept or reject optional tracking at any time. Rejecting after acceptance reloads the page to stop loading those tags. You can also delete existing cookies in your browser; withdrawal does not erase data already lawfully collected. Blocking essential cookies may prevent login or other requested functions.

6. Service providers and disclosure

Hosting, delivery, storage and technical logs use Vercel infrastructure; the platform’s database uses Prisma services. Our contact mailbox is hosted with LH/theCamels. Providers of technical maintenance may access information as needed to support the service, subject to appropriate access restrictions and contractual safeguards.

Google receives data when its consented analytics tools or chosen sign-in service are used. AI features use external model services including OpenAI, directly or through Vercel AI Gateway. When a paid service is offered through Stripe, the checkout identifies the payment provider; it receives the details required to process payment. This does not mean every visitor uses these services.

We may disclose necessary information to professional advisers, competent authorities when required by law, or parties involved in establishing or defending claims. We do not sell your personal data.

7. AI-assisted features

Using an available AI assistant sends the submitted text and relevant conversation context to the model provider to generate a response. Editorial research and translation can send selected public source material and draft content for analysis. Do not enter passwords, payment details or confidential personal information in AI inputs.

AI output may be incorrect. Contact us to correct personal information in published material. These features are not designed to make solely automated decisions about individuals with legal or similarly significant effects. Processing needed for an AI service you request follows the service basis in section 3; editorial processing follows the editorial basis. Provider-side security logging or retention may also apply: use of an AI feature does not imply zero retention.

8. International processing

Public content is accessible internationally, and infrastructure or provider support may involve processing outside the European Economic Area, including the United States. Transfers requiring GDPR safeguards must use an applicable adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses and supplementary measures where needed. Contact us for information about the applicable transfer arrangements and a copy of relevant safeguards, with confidential details redacted where necessary.

9. How long we retain information

Account and service records are retained while needed to operate your account and provide the service; after closure, only information needed for legal duties, unresolved issues or claims should remain. Correspondence is retained while handling the enquiry and any related follow-up or dispute. Public editorial material may remain in the archive while relevant to its informational purpose, subject to your rights.

Accounting documents, if generated, follow statutory retention periods. Security logs and backups follow the infrastructure’s retention and recovery cycles; deletion from a live service may not immediately remove backup copies. Optional analytics follows the configured provider retention. We assess retention by purpose, legal obligations, limitation periods and the need to investigate incidents rather than promise one deletion period for all data. You may request details about the period applicable to your information.

10. Your choices and rights

Subject to the conditions of the GDPR, you can request access, correction, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time.

Withdraw consent at any time, without affecting earlier lawful processing. Contact walerian@hydrogenready.com for rights requests. We may need proportionate information to verify your identity. We normally respond within one month; if the law permits an extension, we will explain it within that month.

You may complain to the President of the Personal Data Protection Office in Poland (Prezes UODO, https://uodo.gov.pl) or another competent supervisory authority, including where you habitually reside or work. You do not have to contact us first.

11. Updates

The date and version above identify this edition. We will revise this notice when relevant services or processing change and provide additional notice or obtain consent when required. A future feature described conditionally here is not automatically enabled, and this policy is not a blanket consent to new processing.