Privacy Policy
The trust of the people whose personal data we process and compliance with legal provisions on the protection of personal data are very important to us.
We would like to inform you about our rules for collecting, processing, securing, transferring and using personal data and who you can contact in matters relating to personal data.
In accordance with the requirements of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as “Regulation”, we would like to inform you:
Personal data administrator
The administrator of personal data, hereinafter referred to as the “Administrator”, is the Company
PROFIL sp. z o. o.
The personal data administrator is responsible for the safe use of personal data in accordance with the purposes for which they were collected and in accordance with applicable law.
Contact the administrator
Administrator contact details:
– Phone +48 / 94 / 374-72-14
– E-Mail address biuro@okna-profil.pl
– Postal address:
PROFIL sp. z o. o.
78-400 Szczecinek
Przemysłowa 6A
General Provisions
We only use the personal information collected for the specific, legitimate purposes for which the information was collected. The scope of personal data, the purpose of their processing, the legal basis for this processing, the processing period and the categories of data recipients arise from the legal requirements of the administrator and from the nature and scope of the activities carried out by the data subject.
Purpose of data processing by the administrator, legal basis for processing and period for which personal data will be stored:
Purpose of data processing: Carrying out measures at the request of the data subject before concluding a contract (e.g. creating an offer).
Legal basis for processing: Article 6 Paragraph 1 Letter b) Regulations (“Contract Implementation”)
Storage period: The data will be stored for the period necessary for the fulfillment, termination or termination of the contract and for the period after which any claims become statute-barred.
Purpose of data processing: Conclusion of contract and fulfillment of contract (including ensuring appropriate service quality)
Legal basis for processing: Article 6 Paragraph 1 Letter b) Regulations (“Contract Implementation”)
Storage period: The data will be stored for the period necessary for the fulfillment, termination or termination of the contract and billing and for the period after which any claims expire.
Purpose of data processing: Carrying out direct marketing (sending messages to carefully selected, individual customers, in individual contact, in order to receive a direct reaction)
Legal basis for processing: Article 6 paragraph 1 letter f) regulations (“legitimate interests of the administrator”)
Storage period: The data will be stored for the duration of the legitimate interest of the administrator and for the period after which any claims expire.
In the event of an effective objection by the data subject to the use of his personal data, the Administrator will no longer process these data for direct marketing purposes.
Purpose of data processing: Marketing
Legal basis for processing: Article 6 Paragraph 1 Letter a) Regulations (“Consent of the data subject”)
Storage period: The data will be stored until the data subject revokes their consent to further processing of their data for marketing purposes.
Purpose of data processing: Issuance, collection and storage of invoices and accounting documents as well as keeping accounting books
Legal basis for processing: Article 6 Paragraph 1 Letter c) of the Regulation (“Fulfillment of a legal obligation”) in conjunction with Article 74 Section 2 of the Accounting Act and in conjunction with Article 86 § 1 of the Tax Code Act.
Storage period: The data will be stored for the period during which the regulations require the retention of business books and accounting documents (i.e. for 5 years, counting from the beginning of the year following the financial year to which the data relate) and for the period Any tax debts will then expire.
Purpose of data processing: Carrying out service activities
Legal basis for processing: Article 6 paragraph 1 letter b) of the regulation (“performance of a contract”) or Article 6 paragraph 1 letter c) of the regulation (“fulfillment of a legal obligation”)
Storage period: The data will be stored for a period of 1 year after the warranty expires or the complaint has been settled and then until any claims become statute-barred.
Purpose of data processing: Responding to complaints within the time and form provided by law
Legal basis for processing: Article 6 Paragraph 1 Letter c) of the Regulation (“Fulfillment of a legal obligation”)
Storage period: The data will be stored for a period of 1 year after the warranty expires or the complaint has been settled and then until any claims become statute-barred.
Purpose of data processing: expression of the customer’s opinion
Legal basis for processing: Article 6 Paragraph 1 Letter a) Regulations (“Consent of the data subject”)
Storage period: The data will be stored until the data subject revokes their consent to further processing of their data for this purpose.
Purpose of data processing: detection and prevention of misuse
Legal basis for processing: Article 6 Paragraph 1 Letter c) of the Regulation (“Fulfillment of a legal obligation”)
Storage period: The data is stored for the duration of the contract, then for the period after which the claims under the contract expire. In the event that the Administrator makes claims or notifies the relevant authorities – for the duration of such proceedings and „for 5 years from the beginning of the year following the financial year in which operations, transactions and procedures are finally completed, repaid, have been settled or settled „Expired”
Purpose of data processing: Establishing, defending and pursuing claims brought by or against the Administrator (including the sale of claims to another company)
Legal basis for processing: Article 6 Paragraph 1 Letter f) of the Regulation (“legitimate interest of the administrator”) in conjunction with Article 74 Section 2 of the Accounting Act
Storage period: The data is stored for the period:
After that, the claims from the contract expire,
in the event that the Administrator is pursuing claims in a civil case or is covered by a criminal or tax case, accounting records (which may contain personal data)
must be retained “for 5 years from the beginning of the year following the financial year in which processes, transactions and procedures were finally completed, repaid, settled or expired”.
for the period during which the administrator may suffer legal consequences from failure to fulfill the obligation, e.g. B. an administrative penalty.
Data recipient
In order to fulfill the contract and ensure proper operation, the Administrator uses the services of external companies collaborating with him (e.g. post offices, couriers, payment processors). Personal data will only be transferred to external bodies if and to the extent that this is necessary to achieve the purpose of processing. The personal data provided may only be used by external bodies to fulfill the task assigned by the administrator.
Personal data may be transmitted to the following recipients who cooperate with the Administrator:
Companies that carry out postal, courier and similar activities (e.g. courier brokers) – to the extent that this is necessary to process delivery and correspondence,
Companies that process payments by payment card or electronic payments – to the extent that this is necessary for the Processing of these payments is necessary,
Lessor/lender – to the extent that this is necessary to process the leasing payment or payment in the installment payment system,
Selected companies that act on behalf of the administrator in the processing of accounting, tax, Advisory, legal and debt collection matters (including companies that purchase receivables) – to the extent necessary to achieve a specific processing purpose,
Companies that provide technical support services to the Administrator and suppliers of IT solutions that provide the Administrator enable business transactions (e.g. software providers, email and hosting providers) – the administrator only makes personal data available to a trustworthy supplier on his behalf in individual cases and to the extent necessary to achieve a specific processing purpose,
Provider of solutions for expressing/publishing customer opinions – to the extent that this is necessary to express an opinion.
Data transfer outside the European Economic Area
Personal data will not be transferred outside the European Economic Area
Rights of the person whose data is processed by the Administrator
The processing of personal data does not require consent, among other things, if the processing is necessary to fulfill the contract or to carry out measures before entering into the contract, results from the legal obligation of the administrator or is necessary to implement the legitimate interest of the administrator. If consent is required to process personal data for a specific purpose (e.g. consent to the use of cookies), the Administrator will ask for such consent. The consent given can be revoked at any time.
If consent is revoked, the data will no longer be processed to the extent to which the consent was affected. However, the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
In accordance with the principles set out in the Regulation, the data subject also has the right to request from the administrator access to the personal data concerning him or her, rectification, deletion (“forgetting”) or restriction of their processing, as well as the right to object to the processing. and the right to data portability.
If personal data is processed for direct marketing purposes, you can object at any time to the processing of this data for marketing purposes, including profiling, to the extent that the processing is related to direct marketing.
To exercise the above rights, a request must be made to the Administrator by email, letter or by hand-delivering the request to the Administrator’s office. The administrator’s contact details can be found at the beginning. To ensure that the person submitting the application is authorized to submit it, the Administrator may request additional information confirming the identity of the applicant.
The provisions of the Regulation determine the extent to which each of these rights may be exercised. This depends in particular on the legal basis and purpose of processing personal data by the administrator. The above rights can be exercised free of charge no more than once every 6 months. According to Article 12 of the Regulation, the administrator may charge a fee if the data subject’s requests are manifestly unjustified or excessive, in particular because they are repetitive.
The data subject has the right to lodge a complaint with the supervisory authority, i.e. H. to the President of the Office for Personal Data Protection.
Obligation or lack of obligation to provide personal data
The use of the administrator’s services and the provision of personal data are on a voluntary basis. However, the data subject is obliged to provide it in connection with:
Conclusion of a contract with the Administrator – in this case, the provision of personal data is a condition of the contract and the data subject is obliged to provide the necessary data if he or she wishes to enter into a contract with the Administrator. The extent of the data required to conclude the contract will be communicated to the person concerned. Failure to provide the data means that a contract cannot be concluded.
Fulfillment of the Administrator’s legal obligations – in this case, the provision of personal data is a legal condition arising from the provisions that impose the Administrator’s obligations to process personal data (e.g. related to the obligation to issue, collect and storage of invoices and accounting documents, etc.). keep bookkeeping). Failure to provide this data will prevent the Administrator from fulfilling the stated obligations, which will result in the inability to conclude the contract.
Use of data for advertising purposes
8.1 Cookies (Cookies)
The administrator’s websites use cookies, i.e. H. Text files stored on the user’s device. These files enable analysis of the use of the website and the identification of the user’s web browser. You can block the installation of cookies by using the appropriate browser settings – this can lead to functional restrictions on the website.
The Administrator may process the data contained in cookies to anonymously analyze visitors’ activities and study their behavior (e.g. opening certain pages) in order to show them advertising tailored to their expected interests, even if they Visit other websites that are partners of the advertising network of Google Inc. and Facebook Ireland Ltd. and to improve the administration of the Administrator’s websites.
8.2 How can you block the storage of cookies?
To block the saving of cookies, the user should activate the settings in the web browser that only accept the saving of cookies if he agrees.
To accept the use of administrator cookies and at the same time block the use of third-party cookies, select the “Block cookies from third-party websites” option in the browser settings.
8.3 Competitions, market research and opinion surveys
Separate terms apply to each competition and advertising campaign. In order to participate, the User is asked to provide the personal data listed in these Terms and to express their consent, including the use of telecommunications devices (telephone number, email) by the organizer of the competition, market research or opinion polls. Email address) so that the administrator can conduct direct marketing. The personal data provided is processed to carry out the competition, to notify you of the prize and for the purposes of market research or user opinion research.
The answers given in market research or opinion surveys are neither made available to third parties nor published.
Web analytics
The administrator uses the web analysis service Google Analytics provided by Google. Google Analytics analyzes user behavior on the website using cookies. The information generated by cookies about the user’s use of this website (including their IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports for websites that use Google Analytics and to provide other services. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.
By using the website, the user agrees to the processing of their data by Google in the manner and for the purpose described above.
The website is analyzed by Google Analytics with the “_anonymizeIp()” extension and therefore IP addresses are only processed in shortened form, so that it is not possible to assign the address directly to a specific user.
The user can deactivate cookies by making the appropriate browser settings. This may limit the functionality of the website and you may not be able to use all of its functions.
You can revoke your consent to the collection and storage of personal data at any time with future effect.
In order to prevent the data generated by the cookie file and related to your use of the website (including your IP address) from being transmitted to Google and the processing of this data by Google, it is sufficient to download and install the blocking plugins available in the browser at the following address: https://tools.google.com/dlpage/gaoptout?hl=en
Server log files
The web browser provides data about the user’s activities on the administrator’s websites, which is stored in server log files. The data records stored in this way contain the following data: date and time of download, name of the page accessed, amount of data downloaded, as well as information about the product version of the web browser used, IP address, URL of the link page (address of the page from which the user was redirected ), .
The server log file records are analyzed for the purposes of troubleshooting, server performance management, DDoS protection and offer customization.
Automated decision making and profiling
Personal data will not be used for automated decision-making that has legal implications for the data subject, including profiling.
Final provisions
The Administrator’s websites may contain links (references) to other websites. Such websites are operated independently of the Administrator and are in no way monitored by the Administrator. The administrator recommends that after moving to other websites, you read their own privacy policies. The administrator is not responsible for the rules of handling data on these websites.
