Privacy Policy

Last updated: 04 October 2025

FIRMA HANDLOWO-USŁUGOWA PRIMOKNO JACEK WLAŹLAK
Registered office: Obrońców Zbaraża 3, 64-100 Leszno
REGON: 411569733
Email: [email protected] | Phone: +48 697 221 197

Scope
This Policy explains how we collect and process personal data of website visitors, inquiry/quote requesters, customers (B2C and B2B), and supplier/partner contacts, in connection with the supply of windows, doors, accessories, nationwide delivery, and local installation (within ~100 km of Leszno).

What data we collect
a) Identification & contact: name, company, role, address, email, phone.
b) Project & order data: property address, measurements/specs, product selections, delivery preferences, installation dates, order history.
c) Billing & transaction data: invoice details, payment method info (tokenized/last 4 digits via processor), amounts, VAT data.
d) Communications: emails, forms, messages, call notes, support/reclamation records.
e) Website data: cookies/identifiers, IP address, device/browser info, pages viewed, campaign parameters (e.g., UTM).
f) Media (optional): photos/documentation of openings/installation areas you provide for quotes or service.

How we collect data
• Directly from you (forms, email, phone, in-person consultation/measurement).
• From your company (B2B contact details).
• Automatically via our website (cookies, analytics).
• From service partners involved in fulfilling your order (e.g., delivery/installation providers).

Purposes & legal bases (GDPR)
a) Provide quotes, accept and fulfill orders, schedule delivery/installation, handle after-sales support
— Art. 6(1)(b) performance of a contract or steps prior to contract.
b) Invoicing, tax/compliance, record-keeping
— Art. 6(1)(c) legal obligation.
c) Customer service, reclamations, quality assurance
— Art. 6(1)(b) and 6(1)(f) legitimate interests (efficient service, dispute resolution).
d) Website operation, security, analytics (usage statistics, performance)
— Art. 6(1)(f) legitimate interests; for non-essential cookies, Art. 6(1)(a) consent.
e) Marketing communications (news, offers)
— Art. 6(1)(a) consent; you may withdraw at any time.
f) Supplier/partner management (including manufacturers and logistics)
— Art. 6(1)(b) and 6(1)(f).

Recipients of data
We may share data with:
• Manufacturing partners (to produce your custom products).
• Delivery and installation partners (to deliver and install at your address).
• IT/hosting, CRM, email, analytics, and payment service providers (as processors).
• Accountants, legal advisors, and insurers (when necessary).
• Authorities where required by law.
We require processors to protect data under GDPR-compliant agreements.

International transfers
Some providers may process data outside the EEA. Where this occurs, we use appropriate safeguards (e.g., adequacy decisions, standard contractual clauses, supplementary measures). Details available on request.

Retention periods
• Quote/inquiry data: up to 12–24 months after last contact if no purchase.
• Contract/order data: for the contract term plus statutory limitation periods (typically 6 years, tax records minimum 5 years—confirm with Polish law).
• Warranty/support records: for the warranty period plus a reasonable buffer.
• Marketing data: until you withdraw consent or after a defined inactivity period.
• Cookies/analytics: per cookie type (see Cookie section).

Your rights (GDPR)
You have the right to: access, rectify, erase, restrict processing, data portability, and object (including to processing based on legitimate interests and to direct marketing). When processing is based on consent, you may withdraw consent at any time.
To exercise rights, contact: [email protected].
You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO): ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

Cookies & analytics
We use necessary cookies for site functionality and may use optional cookies (e.g., analytics, marketing) with your consent. You can manage preferences via our cookie banner or your browser settings. Analytics help us understand usage and improve the site; data is aggregated/anonymized where possible. See our Cookie Notice for details (cookie names, providers, lifetimes).

Marketing communications
With your consent, we may send updates and offers by email/phone/SMS. You can opt out at any time via the “unsubscribe” link or by contacting us. Opting out doesn’t affect essential service messages (e.g., order/delivery updates).

Security
We apply technical and organizational measures appropriate to risk, including access controls, encryption in transit, secure backups, staff confidentiality, and processor due diligence. No system is 100% secure, but we work to protect your data continuously.

Children
Our services are intended for adults. We do not knowingly collect data from children under 16. If you believe a child has provided data, contact us to remove it.

Automated decision-making
We do not use automated decision-making that produces legal or similarly significant effects about you. If this changes, we will inform you and provide information on logic and consequences.

Social media & external links
Our site may include links to external sites or profiles. Their privacy practices are governed by their own policies.

Changes to this Policy
We may update this Policy from time to time. The current version with the “Last updated” date is posted on our website. Substantive changes may be communicated by email or banner where appropriate.

Contact
For privacy questions, requests, or complaints:
Email: [email protected]

Phone: +48 697 221 197