Privacy Policy

1. Data controller

The administrator of personal data is:

Vindue Dominik Porębski
Tax ID: 7343319638
Email address: biuro@vindue.pl

For matters related to personal data protection, you can contact us at the above email address.

2. Purposes and grounds for data processing

2.1. Contact form / quick quote

We process the data provided in the form (name, email address, telephone number, message content) for the following purposes:

• respond to the inquiry,
• preparation of valuation,
• contact regarding the services offered.

Legal basis:
Article 6(1)(b) of the GDPR – actions aimed at concluding a contract.
Article 6(1)(f) of the GDPR – legitimate interest of the controller (communication with customers).

2.2. Contact by email or telephone

In the case of direct contact, data is processed solely for the purpose of correspondence or conversation and the provision of services.

Legal basis: Article 6(1)(f) of the GDPR.

2.3. Provision of services

If you decide to use a service (e.g., measurement, installation, sale), we process your data for the purpose of performing the contract.

Legal basis: Article 6(1)(b) of the GDPR.

2.4. Google Analytics 4 (GA4) and marketing

The vindue.pl website uses Google Analytics 4 to analyze website traffic and generate statistics. GA4 processes, among other things:

• IP address (anonymized),
• events on the website,
• device and browser data.

In addition, we may use analytical data to target Google Ads (remarketing) if the user has given their consent.

Legal basis:
Article 6(1)(a) of the GDPR – consent (expressed in the cookie banner).
Article 6(1)(f) of the GDPR – legitimate interests of the controller (analytics and statistics).

2.5. Cookies

This website uses cookies for the following purposes:

• technical (necessary for the website to function),
• analytical (GA4),
• marketing (Ads/remarketing after consent).

You can change your cookie settings in your browser or using the consent banner.

3. Google Analytics 4 – details

The following are used within GA4:

• IP anonymization,
• data storage for the period specified in the GA panel,
• No use of data for linking to Google services beyond the scope of consent.

Google LLC may process data in the US, but this is done on the basis of current security measures in accordance with the GDPR.

4. Data recipients

Your data may be transferred:

• companies providing hosting services,
• providers of analytical tools (Google),
• companies providing marketing services (e.g., Meta, Google Ads – only if consent is given),
• accounting office (if a contract is concluded).

The administrator does not sell personal data.

5. Data retention period

We store data for:

• max. 12 months – contact inquiries that did not result in cooperation,
• the time necessary to perform the contract and accounting obligations – in the case of customers,
• until consent is withdrawn – in the case of marketing and analytical consents.

6. Your rights

In accordance with the GDPR, you have the right to:

• access to your data,
• correction of data,
• deletion of data ("right to be forgotten"),
• processing restrictions,
• data transfer,
• objection to processing,
• withdraw consent at any time,
• file a complaint with the President of the Personal Data Protection Office.

To exercise your rights, please contact: biuro@vindue.pl

7. Voluntary provision of data

Providing data is voluntary, but necessary for:

• obtaining a quote,
• receiving a response to an inquiry,
• service provision.

8. Automated decision-making

The administrator does not use profiling or automated decision-making based on personal data.

9. Policy changes

The privacy policy may be updated to reflect changes in the law or the way the website operates.

‍

‍