Privacy Policy

Introduction

Oknoplast Sp. z o.o., headquartered in Ochmanów, places great importance on protecting the privacy of all individuals whose data we process in connection with our business activities.

In this document (“Privacy Policy”), we would like to present the most important information related to the processing of personal data of individuals who contact us and visit the website operated at www.oknoplastgroup.com.

We make every effort to ensure that the information provided to you complies with the transparency requirements set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). We will refer to this legal act as “GDPR” throughout this document. If you have any concerns regarding the format or clarity of the Privacy Policy, we encourage you to contact us and share your feedback.

Personal Data Controller

The controller of your personal data is Oknoplast Sp. z o.o., headquartered in Ochmanów, Ochmanów 117, 32-003 Podłęże (hereinafter: “we,” “Controller,” or “Oknoplast”).

Contact

You can contact us:

electronically via email: biuro@oknoplast.com.pl

by traditional mail sent to our address: Oknoplast Sp. z o.o., Ochmanów 117, 32-003 Podłęże.

For matters related to the processing of personal data, please contact us at: privacy@oknoplast.com.pl

What personal data do we process?

In connection with your use of our website, we collect data necessary to provide specific services offered, as well as information about your activity on the website.

For example:

If you use the contact form, we collect information such as your name, contact details provided, and the content of your inquiry.

If you navigate through our website, we collect information stored in cookies or system logs, time spent on the site, and interactions with the content posted on the website.

Purposes and legal basis for processing personal data

We process your personal data for various purposes and on different legal bases, which we describe below:

Security and efficient operation of the website. User activity on the website is recorded in system logs (a special computer program used to store a chronological record of events and actions related to the IT system used by Oknoplast to provide services). The information collected in the logs is processed for technical and administrative purposes related to ensuring the security of the website and IT systems processing your personal data, as well as for analytical and statistical purposes to ensure the efficient operation of the website. The legal basis for processing personal data is our legitimate interest in providing you with a secure and efficient online service (Art. 6(1)(f) GDPR).

Correspondence and phone calls. Your personal data provided in the contact form available on the website is processed for the purpose of communication, placing orders, concluding contracts, responding to inquiries, or sending information you have requested (e.g., information indicated in the contact form). The legal basis for processing personal data is our legitimate interest in enabling effective communication with Oknoplast on matters of interest to you (Art. 6(1)(f) GDPR), or the necessity of processing personal data to conclude or perform a contract with Oknoplast (Art. 6(1)(b) GDPR).

Marketing. Your personal data may be used for marketing purposes. Based on cookies, if you have given your consent, we may tailor content to your preferences and expectations. Using this technology, we profile our users—analyzing and assessing what content may interest you and displaying relevant ads on our website. The legal basis for marketing activities is Oknoplast’s legitimate interest (Art. 6(1)(f) GDPR).

Analytics, statistics, and service quality assessment. Your personal data is used for analytical and statistical purposes, including analyzing the activity of website visitors and preferences regarding offered functionalities and content. To assess the quality of services offered by Oknoplast, we may use your contact details to gather feedback on your satisfaction (e.g., by displaying or sending satisfaction surveys). Processing personal data for these purposes allows us to continuously improve our services and pursue our legitimate interest (Art. 6(1)(f) GDPR).

Defense against claims. In justified cases, your personal data is processed to establish, pursue, or defend against claims (e.g., claims arising from improper provision of services available through the website). The legal basis for processing personal data for these purposes is our legitimate interest (Art. 6(1)(f) GDPR).

Managing social media profiles. We process the personal data of users who visit our social media profiles (e.g., Facebook, YouTube, Instagram, Twitter). Your personal data (e.g., name or social media nickname) is collected and used solely in connection with managing Oknoplast’s company page or profile. The data is used to inform users about our activities, respond to your comments, use communication features offered by the social media platform to engage with your activity, and promote various events, services, or products on the platform. The legal basis for processing your personal data is our legitimate interest in promoting our brand and conducting appropriate communication on social media (Art. 6(1)(f) GDPR).

Necessity of providing data

In the case of contact forms provided on the website, providing your personal data is required by Oknoplast in order to handle your inquiry. Without it, we will not be able to respond to you.

We also make efforts to inform you which personal data is mandatory and which can be provided optionally. This information is provided through appropriate markings on the website (e.g., asterisks next to specific fields in the contact form).

Data retention periods

The period for which we retain your personal data depends on the type of service provided and the purpose of processing.

As a rule, we process your personal data for the duration of service provision, the term of the contract, or the fulfillment of an order, until the withdrawal of consent or the submission of a valid objection to data processing when processing is based on our legitimate interests.

We retain correspondence for a period of 3 months to one year, unless we enter into a cooperation agreement with you.

You can check the cookie retention period in our Cookie Policy

The processing period may be extended by the statute of limitations if the processing of personal data is necessary for the establishment, exercise, or defense of potential claims by Oknoplast.

At Oknoplast, we have developed and implemented detailed policies regarding the processing of personal data, which take into account the necessity of retaining your personal data for a specific period. Our data retention policy considers processing periods resulting from applicable tax and accounting regulations, limitation periods for claims, or our legitimate interests related to the need to archive correspondence.

For detailed information on the retention periods for specific categories of personal data, please contact us as described in the “Contact” section.

Data recipients

Your personal data may be disclosed and transferred to external entities, including in particular providers responsible for the technical maintenance of IT systems, marketing agencies supporting us in promoting our brand, and entities providing legal, accounting, training, service, postal, analytical, and advisory services.

If you use the contact form, your personal data may also be transferred to entities affiliated with the Controller, including in particular other companies within the Oknoplast capital group, such as WnD sp. z o.o., or companies acting on our behalf in your country of residence.

Your rights

In connection with our processing of personal data, you have the right to access your data and request its rectification, deletion, restriction of processing, as well as the right to data portability.

If we process your personal data based on our legitimate interests or for marketing purposes, you also have the right to object to such processing.

If you have given separate consent for the processing of personal data for a specific purpose, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw consent for the collection of cookies by the Controller (other than those necessary) as described in the Cookie Policy.

If you suspect any irregularities in the processing of personal data, you have the right to lodge a complaint with the supervisory authority responsible for data protection. Currently, this authority is the President of the Personal Data Protection Office (more information is available at: https://uodo.gov.pl/).

Cookies and similar technologies

Our websites use cookies. You can read more about cookies and the rules for using them in our Cookie Policy.

Transfer of data outside the EEA

The level of personal data protection outside the European Economic Area (EEA) differs from that provided by EU law. Oknoplast generally does not transfer data outside the EEA. Oknoplast transfers personal data outside the EEA only when necessary due to the nature of the cooperation and with appropriate safeguards, primarily through:

cooperation with entities processing personal data in countries for which the European Commission has issued an adequacy decision;

use of standard contractual clauses issued by the European Commission;

other legally justified methods permitted by law, including the GDPR.

You may obtain information and a copy of the appropriate safeguards used in connection with the transfer of personal data outside the EEA at any time. To do so, please contact us as indicated above in the “Contact” section.

Personal data security

Oknoplast places great importance on the security of your personal data. We continuously conduct risk analyses to ensure that personal data is processed in a way that guarantees access only to authorized persons and only to the extent necessary for their tasks. We also ensure that all operations on personal data are recorded and carried out only by authorized Oknoplast employees and associates, and that the IT systems used for data processing ensure availability, integrity, and confidentiality.

We also take all necessary steps to ensure that all our subcontractors and cooperating entities provide appropriate security measures whenever they process personal data on behalf of Oknoplast.

Changes to the Privacy Policy

The Privacy Policy is regularly reviewed and updated as necessary. We will inform you of any changes to its content on our website www.oknoplastgroup.com.