Privacy protection of all people whose data we process in the course of our activities is very important to WnD Sp. z o.o. with its registered office in Rąbień.
– of visitors to our website at www.wnd-windows.com;
– of our business partners and their representatives and employees.
Personal Data Controller
The controller of your personal data is WnD Sp. z o.o. with its registered office in Rąbień, ul. Sucha 1/3, 95-070 Aleksandrów Łódzki (hereinafter: “we”, “Controller” or “WnD”).
– via email to the following email address: firstname.lastname@example.org
– via mail to the following address: WnD Sp. z o.o., ul. Sucha 1/3, 95-070 Aleksandrów Łódzki.
In matters related to processing of personal data please write to email address: email@example.com
Purposes and basis for processing of personal data
We process your data for various purposes and under various legal grounds described below:
Processing of data on our website
a. Provision of online services. We process your data to provide you online services for you to be able to access certain functionalities and content available on the website. The ground for processing of data is the fact that it is necessary for the performance of a contract and provision of online services (Article 6(1)(b) of GDPR).
b. Marketing. If you give a separate consent to receive marketing communications, we will send you specific commercial content on WnD products and services ( e.g. newsletter, information on new products, interesting promotions). The legal ground for actions taken for marketing purposes is the legitimate interest of WnD (Article 6(1)(f) of GDPR).
c. Analyses and statistics and service quality analysis Your personal data may be used for analytical and statistical purposes which include analysis of guests activity visiting a website and preferences in terms of functionalities and content offered. To analyse quality of services offered by WnD we may use your contact data to obtain information on your level of satisfaction of the quality of our services (e.g. by displaying or sending you satisfaction surveys). By processing personal data for these purposes we are able to continuously improve the quality of our services. The legal ground for processing of personal data for the above purposes is our legitimate interest (Article 6(1)(f) of GDPR).
d. Protection against claims. If justified, your personal data is processed by us to determine, bring or defend against claims (e.g. claims. resulting from improper provision of services available on our website). The legal ground for processing of personal data for the above purposes is our legitimate interest (Article 6(1)(f) of GDPR).
e. Security and efficient operation of the website. The activity of users on the website is recorded in system logs (special computer programme used for storing of chronological records containing information on events and actions related to IT system used for the provision of services by WnD). Information collected in logs is processed for technical and administrative purposes in order to ensure the security of website and IT systems processing your personal data and for analytical and statistical purposes to ensure efficient operation of the website. The legal ground for processing of personal data is our legitimate interest which is assurance of a secure and efficient website (Article 6(1)(f) of GDPR).
Processing of data for business cooperation
a. Conclusion or performance of a contract. We process your personal data to enter into or to properly perform a cooperation contract with WnD. If you are self-employed, your data is processed based on the fact that is necessary for conclusion or performance of a contract (Article 6(1)(b) of GDPR). If you are representatives, proxies or employees of an entity being a party to a contract, the legal ground for processing of your personal data (such as name, surname, contact data) is our legitimate interest being the possibility to enter into or properly perform a contract (Article 6(1)(f) of GDPR).
b. Execution of statutory obligations. We process your data in connection with the performance of our obligations under applicable law, in particular tax law and accounting law obligations. The ground for processing of data is the fact that it is necessary for compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) of GDPR).
c. Determination, brining of and defence against claims. If justified, your personal data is processed by us to determine, bring or defend against claims (e.g. claims. resulting from failure to perform or improper performance of a cooperation agreement with WnD). The legal ground for processing of personal data for the above purposes is our legitimate interest (Article 6(1)(f) of GDPR).
Processing of data in connection with maintained correspondence and phone communication
Your personal data contained in a contact form available on our website, sent in connection with traditional or email correspondence, and provided during phone conversations, is processed in order to communicate, file orders, respond or send information you inquired for (e.g. information indicated in the contact form). The legal ground for processing of personal data is our legitimate interest which is the need to ensure you the possibility to communicate efficiently with WnD in all matters that concern you (Article 6(1)(f) of GDPR). or the need to process personal data in order to enter into or perform a contract with WnD (Article 6(1)(b) of GDPR).
Cookies and similar technology
What are cookies?
A cookie is a small text file installed on a user’s device when a user browses through our website. Cookies collect information to make the use a website easier – e.g. by remembering user’s visits on a website and what the user does, e.g. what language they select.
What cookies do we collect?
– user input cookies (session identifier) for the time of session duration;
– authentication cookies used for services that require authentication for the time of session duration;
– user centric security cookie e.g. used to detect authentication abuse;
– multimedia player session cookie (e.g. flash cookie) for the time of session duration;
– user interface customization cookie for the time of session duration or a bit longer;
– cookie used to monitor website traffic i.e. data analytics, including Google Analytics cookie used by Google to analyse how the User uses the Website, to create statistics and reports on Website functioning). Google does not use data to identify the User and does not combine such information in order to make the identification possible. Detailed information on the scope and rules of this service-related data collection can be found at: https://www.google.com/intl/pl/policies/privacy/partners.
Sources of personal data
If we do not collect data directly from you, we may obtain it:
– from our trade partners you entered into agreements regarding WnD products;
– from your employers or entities you work with.
The need to provide data
You are not required to provide your personal data in any contact forms on our website, however such data is necessary to handle your inquiry.
We make every effort to indicate which personal data is obligatory, and which is optional. We indicate such information as appropriate on our website (e.g. using an asterisk beside specific boxes of a contact form).
Information provided in correspondence or to perform a contract
In the event of providing services, maintaining correspondence or signing of contracts you provide your personal data on a voluntary basis.
What if you do not provide your personal data
If personal data is required to provide services, enter into or perform a contract, and to maintain relevant correspondence and you refuse to provide such required data we may not be able to provide such a service, enter into or perform a contract or maintain correspondence.
Data storage periods
The period for which we store your personal data may vary depending on the type of provided service and processing purpose.
As a rule we process your personal data for the time of provision of services, contract duration or order completion, until you withdraw your consent or effectively object to processing of personal data, if we process data in connection with our legitimate interests.
In WnD we prepared and implemented relevant personal data processing policies which include the need to store your personal data for certain time. Our data storage policy considers data processing time-limits under the applicable tax and accounting laws and regulations, dates of prescription of claims or our legitimate interests resulting from the need to archive any correspondence.
For detailed information on time-limits for processing certain categories of personal data, please contact us as described in Contact section.
Recipients of data
Your personal data can be disclosed and transferred to our trade partners in order to serve your request, suppliers responsible for technical operation of IT systems, marketing agencies supporting us in our brand promotional actions and entities providing legal, accounting, maintenance, mail or analytical and advisory services.
For information on trade partners belonging to WnD distribution chain, please contact us at the address you will find in Contact tab.
Since we process your personal data you have the right of access, to rectification, to erasure, to restriction of processing, and to portability of data.
If we process your personal data in connection with our legitimate interests and for marketing purposes, you also have the right to object to such processing.
If you give a separate consent to processing of personal data for a specific purpose, you may withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
If you suspect any irregularities in processing of personal data you have the right to lodge a complaint with a supervisory authority dealing with the protection of personal data.
Transfer of data outside EEA
The level of personal data protection outside the European Economic Area (EEA) differs from what is provided in the law of the European Union. Therefore, WnD transfer personal data outside EEA only if it is necessary and providing adequate level of protection by:
– cooperating with entities processing personal data in states with respect to which a relevant decision of the European Commission was issued;
– use of standard contractual clauses issued by the European Commission;
– use of binding corporate rules approved by a competent supervisory authority;
– if data is transferred to USA – cooperation with members of Privacy Shield approved by the decision of the European Commission.
You may access information and copies of relevant protection measures used in connection with transfer of personal data outside EEA. For this purpose, please contact us as indicated in contact section.
Security of personal data
Security of your personal data is of utmost importance to WnD. For this purpose we analyse risk on an ongoing basis to ensure that personal data is processed in a way that only authorised persons have access to data in a scope necessary to perform their tasks. Furthermore, we make sure that all personal data operations are registered and made only by authorised employees and co-workers of WnD, and that IT systems used for processing of data guaranteed data accessibility, integrity and confidentiality.
We also make every effort to ensure that all our subcontractors and partners guarantee the use of relevant security measures every time they process personal data for WnD.