Aclean Privacy Policy
Information on the Collection and Processing of Personal Data
(Aclean Privacy Policy)
Last updated: 3 May 2026
This Privacy Policy explains how information relating to users of Aclean services, including personal data and cookies, is processed in connection with the use of the Aclean website at https://aclean.pl and/or the ordering of cleaning services in Warsaw and surrounding areas.
Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.
This Policy applies to the website https://aclean.pl (the “Website”).
The website operator and controller of Aclean personal data is:
Green Hall Sp. z o.o.
ul. Hoża 86, unit 410, 00-682 Warsaw, Poland.
Operator contact email: kontakt@aclean.pl
The Operator is the Controller of personal data voluntarily provided by users through forms, chat, email, telephone and other communication channels.
Personal data may be processed in particular for:
– online chat communication,
– handling enquiries submitted through contact forms,
– preparing and delivering ordered cleaning services,
– issuing accounting documents and meeting tax obligations,
– internal reporting,
– marketing and informational activities where permitted and, where required, based on consent,
– statistics and analysis of Website use.
Information about users and their behaviour may be collected through data entered voluntarily in forms, cookies stored on end-user devices and analytical tools.
The operator of the Website and controller of Aclean personal data is:
Green Hall Sp. z o.o.
Address: ul. Hoża 86, unit 410, 00-682 Warsaw, Poland
Email: kontakt@aclean.pl
Telephone: +48 507 294 507
These contact details may be used for all matters relating to personal-data processing and the exercise of rights under the GDPR.
Aclean may process, in particular, the following categories of personal data:
Identification and contact data:
full name,
telephone number,
email address,
address of the property where services are provided (apartment, house, office, etc.).
Service-related data:
type of service ordered (general cleaning, post-renovation, office cleaning, allergy-friendly cleaning, etc.),
preferred service dates and times,
relevant conditions at the property (pets, sensitive surfaces, sensitivities to cleaning products, etc.),
service and contact history.
Billing and accounting data:
company name for B2B customers,
Polish tax ID or other tax number,
billing address,
other information required for accounting documentation.
Communication data:
correspondence sent through forms, email, chat or messaging tools,
notes from telephone conversations where necessary to deliver the service correctly.
Technical and analytical data:
IP address,
date and time of visits,
browser and operating-system information,
pages visited,
information contained in cookies and server logs.
Personal data may be obtained:
Directly from the data subject — through forms, email, chat, telephone or other communication channels.
From a contracting business or employer — where the person is identified as a contact in an agreement or order.
Automatically — through cookies, server logs and analytical tools used during visits to the Website.
Personal data may be processed for the following purposes and on the following legal bases:
Entering into and performing a contract / delivering ordered services
accepting and handling an order,
preparing an offer and agreeing the details,
arranging the cleaning team’s visit,
ongoing communication relating to the service.
Legal basis: Article 6(1)(b) GDPR — processing necessary for the performance of a contract or to take steps before entering into a contract.
Meeting legal obligations
issuing invoices and accounting documents,
maintaining tax and accounting records,
meeting archival obligations.
Legal basis: Article 6(1)(c) GDPR.
Correspondence and handling enquiries
responding to enquiries sent by form, email or chat,
handling complaints and claims.
Legal basis: Article 6(1)(f) GDPR — the Controller’s legitimate interest in maintaining appropriate communication and establishing, exercising or defending claims.
Marketing of Aclean’s own services
information about promotions, new services and special offers,
use of remarketing tools such as Meta/Facebook Pixel or Google Ads where applicable.
Legal basis:
Article 6(1)(f) GDPR where legitimate interest applies,
Article 6(1)(a) GDPR where consent is legally required.
Statistics, analysis and Website security
analysing how the Website is used,
administering the Website,
maintaining technical and information security.
Legal basis: Article 6(1)(f) GDPR.
Measures used to protect personal data may include:
SSL-encrypted transmission for website forms.
The possibility of encrypting database data, with access restricted to authorised persons on the Controller’s side.
Hashed password storage where user accounts are provided, in accordance with current security standards.
Two-factor authentication for administration where used.
Regular changes of administrative passwords.
Regular backups.
Systematic updates of CMS, plugins and other software components.
The Website is hosted on servers provided by Hostinger.
The hosting provider processes data under its agreement with the Controller and is required to maintain an appropriate level of security.
Personal data may be shared only where:
– necessary to perform a contract or order,
– required by law,
– necessary for the Controller’s legitimate interests, such as establishing or pursuing claims.
Recipients may include:
– hosting and IT service providers,
– accounting firms and tax advisers,
– banks and payment operators,
– law firms and debt-collection providers,
– marketing and analytics partners, including Google and Meta/Facebook, where their tools are used.
The Controller does not sell personal data to third parties.
If a business customer provides personal data relating to employees, board members, authorised representatives, contractors or other contact persons, that business customer is responsible for informing those people that:
a) their data has been provided to Aclean and what data was provided,
b) the source of the data is the business customer,
c) Green Hall Sp. z o.o. is the Controller and the processing rules are described in this Policy.
If a contact person requests erasure or restriction of processing, the business customer should promptly provide another contact person so that the agreement can continue to be performed.
Data associated with contracts and orders is generally kept:
– for the duration of the contract,
– and afterwards, normally for up to 10 years from the end of the calendar year in which the contract was performed, taking into account limitation periods, tax obligations and archival requirements.
Accounting records are kept for the period required under tax law, normally at least 5 years.
Marketing data is generally retained for no longer than 3 years from the most recent activity or until consent is withdrawn where consent is the legal basis.
Server logs (IP address, domain and timestamp) may be retained indefinitely in aggregated, anonymous statistical form.
When tools such as Google Analytics, Google Ads or Meta/Facebook Pixel are used, certain technical data — for example IP addresses, cookies or device identifiers — may be processed on servers outside the European Economic Area, including in the United States.
Such transfers are carried out using appropriate safeguards recognised by the GDPR, including standard contractual clauses where applicable.
Further information about safeguards can be obtained by contacting the Controller.
Data subjects may have the following rights:
Right of access — to obtain confirmation as to whether their data is being processed, access that data and obtain a copy.
Right to rectification — to correct inaccurate data or complete incomplete data.
Right to erasure (“the right to be forgotten”) — where the legal conditions are met, for example where the data is no longer necessary for the purposes for which it was collected.
Right to restriction of processing — in the situations provided for by the GDPR.
Right to data portability — where processing is based on contract or consent and carried out by automated means.
Right to object:
to processing based on the Controller’s legitimate interests,
in particular to direct marketing and related profiling.
Right to withdraw consent — where processing is based on consent; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warsaw, Poland.
Requests relating to these rights can be submitted using the contact details in Section 2.
The Website collects information voluntarily entered by users in forms, including personal data where provided.
The Website may record connection parameters such as timestamps and IP addresses.
In some cases, the Website may record information that makes it easier to associate form data with the user’s email address; in such a case, the email address may appear within the URL of the page containing the form.
Information submitted through a form is processed according to the purpose of that form, such as handling an enquiry, preparing an offer or registering a service request.
Information about user activity on the Website may be logged.
Technical data such as IP address, domain, request time and URL may be used to administer the Website, maintain security and prepare aggregated statistics.
Aggregated statistics are anonymous and do not allow specific individuals to be identified. Logs are not disclosed to entities that are not involved in administering the Website.
Google Analytics
The Website may use Google Analytics provided by Google LLC. This service uses cookies to collect anonymous, aggregated statistics about use of the Website, including visit numbers, pages viewed and time spent on the Website.
Facebook / Meta Pixel
The Website may use Meta/Facebook tracking tools. Where the user is logged in to a Meta service, Meta may be able to associate a visit with the user’s account. Meta acts as a separate controller for processing carried out for its own purposes, including advertising.
YouTube
The Website may contain embedded video content from YouTube (Google LLC). Playing such content may involve YouTube cookies and may allow a visit to be associated with a logged-in YouTube/Google account. YouTube/Google acts as a separate controller for these operations.
Instagram
The Website may use Instagram social plugins or embedded content (Meta Platforms). Interaction with those elements may allow Instagram/Meta to associate the activity with a logged-in account. Instagram/Meta acts as a separate controller in this respect.
TikTok
The Website may use TikTok analytics or marketing tools, including pixels or embedded video. Those tools may process activity information for statistics, analytics and personalised advertising on TikTok. TikTok acts as a separate controller for its own processing.
LinkedIn (e.g. LinkedIn Insight Tag)
The Website may use LinkedIn marketing and analytics tools to measure campaign effectiveness and display advertising to LinkedIn users who have visited the Website. LinkedIn acts as a separate controller for information collected through its tools.
Other marketing and analytics tools
The Controller may use similar tools from other providers in the future for traffic analysis, optimisation or marketing, while observing GDPR requirements and updating this Policy where materially necessary.
Managing personalisation and advertising
Users can manage advertising and privacy settings within their accounts on relevant platforms and through browser cookie settings and the cookie-management panel available on the Website.
The Website uses cookies.
Cookies are small text files stored on the user’s device to support use of the Website.
Cookies may be placed and accessed by the Operator and, for some cookies, by partners such as Google or Meta/Facebook.
They may be used to:
maintain user sessions where login functionality exists,
remember selected user settings,
create anonymous visit statistics,
support marketing functions, including remarketing.
The Website may use:
session cookies — which remain until logout or browser closure,
persistent cookies — which remain for the period defined in the cookie settings or until deleted by the user.
Users can change cookie settings in their browser, including:
– blocking automatic cookie handling,
– deleting existing cookies,
– enabling notifications when cookies are stored.
Information on cookie controls is available in browser settings and help sections for browsers such as Chrome, Firefox, Safari, Edge and Opera, as well as on Android and iOS devices.
Restricting cookies may affect some Website functionality.
The Controller does not make decisions producing legal effects for users solely by automated processing within the meaning of Article 22 GDPR.
Limited profiling may be used for marketing purposes, such as selecting advertising, but such profiling does not produce the legal effects referred to above. Users have the right to object to such processing.
Providing personal data is voluntary. However, information necessary to enter into or perform an agreement with Aclean may be required in order to provide the service. Refusal to provide required data may prevent an agreement from being concluded or performed.
Where a person has been identified as a contact by a business customer and requests erasure or restriction, the business customer should provide another contact where necessary for performance of the agreement.
The Website may contain links to third-party websites.
The Controller is not responsible for the privacy practices of those websites. Users should review the privacy policy of each external website they visit.
This Privacy Policy may be updated, including where laws change or the operation of the Website changes.
The current version will remain available on aclean.pl together with its effective date.