Privacy Policy

 
  1. 1. General information  
  2. 2. Administrator
    1. 2.1. Contact details of the Data Protection Officer
    2. 2.2. Principles relating to the processing of personal data
    3. 2.3. Recipients of the data;
  3. 3. Lawfulness of processing and applicable law
    1. 3.1. Rights to personal data
    2. 3.2. Lawfulness of processing
  4. 4. Duration of processing personal data
    1. 4.1. Duration of processing personal data on the basis of consent
    2. 4.2. Duration of processing personal image data
    3. 4.3. Duration of processing personal data in conjunction with recruitment
  5. 5. Purposes of processing personal data  
    1. 5.1. Principal objectives
    2. 5.2. Specific objective
  6. 6. Data profiling – Google Analytics, Google Tag Manager, Google Ads
    1. 6.1 Meta Pixel
  7. 7. Cookie policy
    1. 7.1. Cookie files? What are they?
    2. 7.2. The Logi Server Engine incident record
    3. 7.3. Information collection on the users
    4. 7.4. Fastcall www. Web
  8. 8. Privacy policy of the broad range of the company activities
    1. 8.1. Privacy policy – Niebo w Mieście
    2. 8.2. Regulations governing the use of the website www.trwala-adoracja.eu as well as www.trwala-adoracja.pl together with the data processing notice.
  9. 9. Window4you, website
    1. 9.1. Regulations governing the provision of services for Window4U users
    2. 9.2. Terms and conditions for the use of the eko4u Mobile Application
    3. 9.3. Mobile Application Contact List
    4. 9.4 Photo gallery and camera in the mobile application
  10. 10. Final provisions, privacy policy change

 

1. General information

EKO-OKNA S.A., a company residing in Kornice is one of the leading producers of door and window carpentry in Europe.

In this Privacy Policy we would like to introduce you to the processing of personal data when using the website

www.ekookna.pl and www.rodo.ekookna.pl and at the same time indicate what devices we use, specifying individual mechanisms for personal data processing.

The information contained herein will also apply to other EKO-OKNA SA activities (see table of contents).

 

2. Administrator, data recipients of the data;

Administrator,

EKO-OKNA S.A. ul. Spacerowa 4, 47-480 Kornice National Court Register (KRS) number: 0000586067 is the Administrator of the personal data pursuant to the definition in the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) referred to as GDPR.

2.1. Contact details of the Data Protection Officer

If any doubts arise due to the methods of the processing of personal data it is possible to contact Data Protection Officer at the e-mail address iod@ekookna.pl or telephone number: 572 337 224.

You can contact the Administrator at the address:

EKO-OKNA S.A.

Data Protection Officer

ul. Spacerowa 4

47-470 Kornice

 

2.2. Principles relating to the processing of personal data

The Administrator is committed to ensure that the personal data processed meet:

  1. 1. The principle of Transparency of processing – all information relating to personal data processing is concise, easy to access and understandable.
  2. 2. The principle of Reliability – all data are processed in accordance with the principles of the fundamental legal order.
  3. 3. The principle of Lawfulness – personal data is processed for legal reasons in accordance with applicable law.
  4. 4. The principle of Accuracy – requires the processing of only personal data relevant and proportionate to the purpose of their processing.
  5. 5. The principle of Purpose Limitation – allows personal data processing solely for the purpose for which it was collected and in ways compatible with it.
  6. 6. The principle of Correctness – all information relating to personal data processing is concise and updated in case of incorrectness or incompleteness.
  7. 7. The principle of Restricted Storage – requires personal data storage only for the time necessary for the purposes for which they are processed.
  8. 8. The principle of Integrity and Confidentiality – requires personal data to be protected and secured against unauthorized or unlawful processing, loss, destruction or damage.
  9. 9. Liability principle – requires the obligation to demonstrate compliance with all of the aforementioned conditions.

 

2.3. Recipients of the data;

The Administrator provides personal data to the entities processing data on our behalf under the data processing entrustment agreement. Such recipients include, among others, suppliers of IT systems and IT services, marketing agencies, companies implementing marketing campaigns in the field (e-mail address, newsletter), and companies that manage databases of e-mail addresses, service subcontractors and entities authorized to obtain data on the basis of applicable law, i.e. courts, law enforcement agencies; however, these authorities are obliged to submit a request based on an appropriate legal basis.

Personal data are processed on the basis of the personal data processing agreement to the insurance companies as well as properties in accordance with the applicable law.

 

3. Lawfulness of processing and applicable law

3.1 Rights to access data

Pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council the data subject has the following rights:

  1. 1. The right of rectification – the Administrator is obliged without undue delay to provide the rectification of inaccurate personal data.
  2. 2. The right to delete data (known as the right to be forgotten) – the Administrator is obliged to immediately delete the data of the data subject on demand of that person.
  3. 3. The right to restriction of processing – the Administrator restricts processing at the request of the data subject in the cases in accordance with Art. 18 of GDPR.
  4. 4. The right to transfer – the data subject has the right to transfer personal data to another administrator in accordance with Art. 20 of the GDPR.
  5. 5. The right of objection – the data subject has the right to object to the processing of data by the Administrator in accordance with Art. 21 of the GDPR.

If the data subject considers that the above rights under the Regulation (EU) 2016/679 have been violated, they have the right to lodge a complaint with the President of the Office for Personal Data Protection in an electronic form (interactive form) or traditionally (alternative form) in accordance with the procedures, which have been described on the website of the Office (uodo.gov.pl).

 

3.2. Lawfulness of processing

The Administrator is required to process personal data in line with applicable laws and legal grounds relating to the processing of personal data pursuant to Art. 6 of the GDPR determining the lawfulness of processing to the extent that one of the following conditions is met:

  1. a.i.1. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
  2. a.i.2. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
  3. a.i.3. processing is necessary for compliance with a legal obligation to which the controller is subject;
  4. a.i.4. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
  5. a.i.5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  6. a.i.6. processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, apart from (…).

 

4. Duration of processing personal data

4.1. Duration of processing personal data on the basis of the consent

If permission is the basis for data processing, the data is processed until the permission is revoked and after the permission is revoked, the data is processed time equivalent to the statute of limitations on the claims that EKO-OKNA S.A may assert and the claims that may be raised against them.

 

4.2. Duration of processing personal image data

The monitoring recordings (image) will be processed by the administrator only for the purposes for which they were collected and stored for a period not exceeding 3 months from the date of recording, (if the recorded images constitute evidence in legal proceedings, the storage period is extended until the final termination of proceedings).

Personal data from monitoring devices are stored on the company's servers supervised by the IT department.

 

4.3 Duration of processing personal data in conjunction with recruitment

Personal data in conjunction with recruitment shall be kept for a period of 12 months from submitting the documents(CV).

Personal image data related to the marketing process (using the image of photos, on the website, social networks, promotional materials) shall be stored for a duration of 6 months from the termination of the employment relationship.

 

5. Purposes of processing personal data

5.1 Principal objectives

  1. 1. Conducting marketing activities, in particular:
    1. - sending printed communication materials (catalogs, leaflets, brochures, etc.);

    2. - sending invitations, thanks, wishes, etc. as well as advertising gadgets.

    3. - sending advertising gadgets.

    Legal basis: Regulation 2016/679 (EU) of the European Parliament and of the Council of 27 April 2016 and the Act of 10 May 2018 on the Protection of Personal Data.

  2. 2. Performing and providing services by electronic means, in particular by electronic mail:
    1. - sending advertising messages, the so-called newsletters containing promotional offers,information about new products, changes to the product offer, etc.

    Legal basis: Act of 18 July 2002 on Providing Services by Electronic Means.

  3. 3. Conducting commercial and marketing activities using the telephone numbers and e-mail addresses made available for use in the Internet:
    1. - telephone contact with legal and natural persons in matters related to the commencement of potential cooperation, gathering information on the quality of products being manufactured, demand for advertising materials, etc.

    2. - publication of address data of customer retail outlets on the website of EKO-OKNA S.A.

    Legal basis: Act of 16 July 2004 Telecommunications Law, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, art. 6 sec. 1 letter.

5.2 Specific objectives

The Administrator described the specific goals in the document – Processing Activity Register.

 

6. Data profiling – Google Analytics, Google Tag Manager, Google Ads

We would like to inform you that on the website of Eko-Okna S.A., we use the “Google Analytics” tool developed by Google LLC with its registered office at: 1600 Amphitheatre Parkway, Mountain View, CA, 94043, United States. The tool is used for collection of website data and doing the analysis.

For more information, go to https://policies.google.com/privacy?hl=pl

The Administrator uses the Google Ads tool for profiling for direct marketing purposes, i.e. to create a company's offer in terms of the “profile” of a specific user.

The other tools mentioned above are used only for statistical and analytical purposes as well as to enable more effective access by the customer to services and products offered by Eko-Okna SA

The user can control the information collected by Google tools through the “Ads settings” subpage, the “My activity” tab in the Google Account settings, by installing Google Analytics blocking add-ons or through the “incognito mode” available for web browsers – https://policies.google.com/technologies/partner-sites

We would like to inform you that your personal data is profiled by the Administrator using dedicated tools in order to perform marketing activities. That is, using automated processing of your personal data, an assessment and analysis of selected factors regarding you occurs. Consequently, your personal profile is created on the basis of which the transmitted content is adjusted to your individual preferences, attitudes and behaviour, according to your area of interest. We would like to inform you that your data is not processed for automated decision-making which could affect your rights.

Purpose of using collected data:

  • marketing of Eko-Okna S.A. products and services based on created personal profiles (behavioural advertising)
  • remarketing and behavioural targeting
  • analysis of the effectiveness of marketing activities to be carried out (advertising campaigns)
  • automatic personalisation of the marketing content supplied
  • emission of advertisements to targeted audiences

We would like to inform you that we use third-party tools in order to perform the analysis of your profile. The objectives pursued by the entities are strictly defined by the Administrator. You are informed that we may transfer your personal data to an entity that carries out automated marketing messages on our behalf.

You have the right to object to profiling.

"profiling" - means any form of automated processing of personal data which involves the use of personal data to evaluate certain personal factors of an individual, in particular to analyse or forecast aspects relating to that individual's performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

"tool" - a hardware or software tool through which your personal data is collected

 

6.1 Meta Pixel

Meta Pixel is a short code placed on a website that allows the effectiveness of advertisements to be measured by analysing the actions taken by users on the site.

Applications of Meta Pixel:

  • Displaying ads to the right audience. Find new customers or people who have visited a specific page or taken a desired action on the website.

  • Increasing sales. Set up automatic bidding to reach people who are more likely to take the action that matters to you, such as making a purchase.

  • Measuring ad results. Understand the effectiveness of your ad by analyzing what happens as a result of it being shown to an audience.

Once set up, Meta Pixel will register every time someone takes an action on your site. Examples of actions include adding a product to a cart or making a purchase. Meta Pixel captures these actions (also known as events), which can be viewed on the Meta Pixel page in the Event Manager. Here, you can see the actions taken by customers and use options to re-engage them through future Facebook ads.

If you use Pixel to share events with Meta Company, we recommend using the Conversion API. The Conversion API works with your Pixel to help improve the performance and measurement of your Facebook ad campaigns. Learn more about the Conversion API.

According to the requirements of the Meta Business Tools Terms, companies (or partners acting on their behalf) cannot place a Pixel MetaMeta Pixel code associated with their Event Manager or advertising account on websites they do not own, without obtaining written permission. From May 5, 2021, we will show verified domain owners the recent custom conversions and event data received from the Meta Pixel placed on their website. While verified domain owners will see all of these events, the only events they can use for advertising optimization and reporting will be events to which they have access from the Event Manager account they own. If you do not want your Meta Pixel or custom conversion data to be visible to the domain owner, you can remove the Pixel from your website or remove the custom conversion before the specified date.

Important: Changes made to iOS 14.5 require apps in the App Store identified as "tracking" to display an Apple AppTrackingTransparency prompt to users on devices with iOS 14.5 or later. These changes affect how events from tools like Meta Pixel are received and processed by Meta Platforms, Inc. If you are optimizing, targeting, or reporting web events through Meta Pixel or any of our other business tools, you may take action to update your event configuration and adapt to planned changes.

 

7. Cookie policy

7.1 Cookies

Cookies are small files, saved and stored on the user's local computer or other device while visiting websites on the Internet.

“Cookies” are IT data, in particular text files, which are stored in the Website User's device when navigating the Website’s pages. Cookies are used to save certain user settings or preferences in order to optimize your use of the websites. They also enable the collection of statistical data to identify the usage modes of website users. This makes it possible to later improve the structure and content of the website.

Eko-Okna SA processes the data contained in “cookies” when visitors use the website www.ekookna.pl (or www.ekookna.com) for the following purposes:

  • remembering data from completed contact and recruitment forms
  • keeping anonymous statistics concerning the usage of the website
  • adjusting the content of the website to the user's preferences
  • remembering the user's choice regarding consent (or not) to the processing of user's personal data.

“Cookies” are stored for a defined time, which is determined by a parameter contained in the “cookie” file. The user can enable or disable cookies in the settings of the web browser he uses. He can also remove (delete) cookies from its device on an ongoing basis using the “user data cleaning” option (cache, cookies, history, etc.), which is provided by each of the web browsers. Using “incognito mode” in web browsing programs also blocks cookies from being saved on the user's device.

Default settings of browsers allow for saving cookies to the user's device. The user may set the web browser to block the automatic acceptance of “cookies” or to obtain information each time that a file is sent to the user's device. The detailed information on the possibility and the ways as for handling cookies are available in the settings of the web browser.

For “cookies”, the Administrator has provided for a 14-month period of data storage, i.e. information related to cookies and user IDs. In the absence of registered access to the service, after the above time, user-specific cookies will be deleted from the Google Analytics database. Each new activity (entering any page of the website) will re-save the information and renew the 14-month data storage period. The deletion of data will not affect aggregate reports generated in the GA by the Administrator for information purposes.

 

7.2 The Logi Server Engine log event

The “server logs”, which contain, for example, information about the Internet connection used to display the website, such as IP address, date and time of connection, amount of data transferred and data on downloaded files are collected and stored by the personal data Administrator each time the website is visited by any user. These data are anonymized and are only used to ensure the continuity (e.g. analysis of the operating mode of IT systems) and the security of the website (e.g. allow to detect irregularities in the system or unauthorized access attempts).

 

7.3 Information collection on the users

Eko-Okna SA uses Google Analytics, Universal Analytics provided by Google Inc. (head office address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) These services help the personal data Administrator to analyze website traffic. The collected data is processed in an aggregated and anonymized manner which means that it is impossible to identify the user. These data are aggregate and anonymous, i.e. they do not contain the unique identifiers of the visitors to the website. The tool is based on a special “JavaScript” code placed on the website, which collects important data about the user when the user enters the website and sends it to Google Analytics.

By using the above services, the administrator collects data such as:

  • sources and number of hits on the website,
  • unique advertising identifier of the user,
  • user behavior on the website (e.g. session length, opened subpages),
  • information on devices and browsers used by website visitors,
  • IP and domain,
  • locational information, e,
  • demographics, i.e. age and gender.

More information about the principles on which the GA service collects and processes personal data can be found at:www.google.com/intl/pl/policies/privacy/partners and https://www.support.google.com/analytics/answer/6004245

Google Analytics also supports an optional browser add-on that, when installed and activated, disables GA measurements on all pages viewed by the user – https://tools.google.com/dlpage/gaoptout/

The administrator uses the Google Maps service provided by Google Inc. (head office address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The above service allows displaying interactive maps directly on the website as well as using the map function. If the user has activated the appropriate Google function, he may receive information about the current location of the user (GPS signal from the user's device or information determining the user's approximate location). If the recipient is simultaneously logged in to his account in the Google system, the above data is directly associated with this account. Google stores the above data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of the website. The recipient has the right to object to the creation of such user profiles, nevertheless he shall contact Google to exercise this right.

The administrator uses a tool called “Google Tag Manager” provided by Google Inc. (head office address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This solution allows, among other things, to quickly and easily update tracking codes and related code snippets, or “tags” on your site. The administrator uses the above-mentioned tools, for example, for counting the completion of predetermined “tasks” on the website – e.g. sending a form, downloading a file or using a search engine. The data obtained in this way does not allow for the identification of specific persons, but only allows for a more detailed analysis of traffic and recognition of user behavior on the website.

Google Inc. received a certificate confirming that it processes data in accordance with the requirements of the “EU-US Privacy Shield” – https://www.privacyshield.gov/participant.

The administrator uses the Facebook plugins. Facebook is operated by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland). The appropriate code fragment placed in the page information allows you to link the Facebook profile of Eko-Okna S.A. with entries to the website redirected from the Facebook page. Thanks to plug-in integration, the service provider receives information that the user’s browser has displayed the right website, even if the user does not have a profile with the given service provider or is not currently logged in to him. Such information (together with the Service Recipient’s IP address) is sent by the browser directly to the server of the given service provider and stored there. If the user logs in to the service offered by Facebook, the service provider will be able to directly assign this visit to the user’s profile on the given social networking site. For the purpose and scope of data collection and further processing and use of data by the service provider, please see the Privacy notices from Facebook.

Collection and recording of personal data is carried out solely for reporting purposes. Data processing takes place in electronic form using an ICT system. After the secure connection is made, the session key is used to encrypt all transmitted data secured with SSL.

The Controller uses the “Google Ads” tool to profile website users as well as the anonymous data obtained in this way (e.g. opening specific subpages, filling in the contact form, etc.) for remarketing purposes. This solution allows you to establish closer contact with users who visited the Eko-Okna S.A. website by displaying advertisements for them that are more precisely selected in terms of content, while browsing other websites or using the Google search engine. This helps the Controller to encourage the recipients of advertisements to purchase the offered products more frequently. The user may disable the collection of personalized data. More information on personalizing ads and their settings can be found at – https://policies.google.com/technologies/partner-sites

 

7.4 Fastcall www. Web

The Controller uses the “fastcall” system form provided by the 3way company (ul. Chałubińskiego 8, 00-613 Warszawa, Poland). Using the form is completely voluntary and optional. The contact information provided (first name and surname / company name, telephone number) will be used by the telecommunications system to establish a telecommunications connection between the relevant business unit of the Controller and the customer number.

 

8. Privacy policy of the broad range of the company activities

8.1 Privacy Policy – Niebo w Mieście

Dear Sir or Madam,

Respecting your rights under Regulation 2016/679 (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (referred to as the “GDPR” or “General Data Protection Regulation”) and Act of 18 July 2002 on Providing Services by Electronic Means, Act of 16 July 2004 Telecommunications Law and the Act of 10 May 2018 on the Protection of Personal Data, please read the following information.

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The Controller of your personal data is: Eko-Okna S.A., with its registered office in Kornice. You can contact us by writing to the following address: Kornice, ul. Spacerowa 4, 47-480 Pietrowice Wielkie, Poland. You can also contact the Controller via the Data Protection Officer appointed by him, by writing to the above-mentioned address in Kornice or to the e-mail address: iod@ekookna.pl, in any matter regarding the processing of your personal data.

TO WHOM MAY YOUR DATA BE TRANSFERRED?

The data obtained as MAC address of the device, telephone number, device name, device model, information about the pages viewed may only be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court).

WHAT ARE YOUR RIGHTS WITH RESPECT TO YOUR PERSONAL DATA AND THE DURATION OF THEIR PROCESSING?

You have the right to request from the administrator access to personal data, rectification, deletion or processing restrictions, data transfer as well as the right to object to processing and use other rights listed in detail in the GDPR. Any requests in this respect should be made directly to the mailing address or electronic address indicated above.

If you believe that your rights guaranteed by the provisions of the above Regulation have been violated, you also have the right to lodge a complaint with the Inspector General for Personal Data Protection in an electronic or traditional form in accordance with the procedures described on the website of the Office for Personal Data Protection (uodo.gov).

Personal data will be stored for a period of 12 months from the date of connection or an unsuccessful connection attempt, and on the expiry of this period, the data will be deleted except for those that have been secured in accordance with separate provisions.

 

Legal basis: Act of 16 July 2004 on Telecommunications law, art. 180A, par.1.

 

WHAT ARE THE OBJECTIVES, LEGAL BASIS AND SOURCES OF PROCESSING OF YOUR PERSONAL DATA?

Data in the form of the device's MAC address, telephone number, device name, device model, information about the pages viewed are collected for purposes related to:

  1. 1. IT security of the shared internet network:

Legal basis: REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016, Art. 6, par. f (processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party...) and the Act of 10 May 2018 on the protection of personal data.

Personal data as defined by the law (e.g. IP address) concerning the persons visiting the website of Eko-Okna S.A., collected using the above-mentioned “Google Analytics” tool is used primarily to analyze network traffic (for statistical purposes).
 

INFORMATION ABOUT THE POSSIBILITY TO WITHDRAW THE CONSENT TO PERSONAL DATA PROCESSING

You can consent to the use of cookies for network traffic analysis after entering the Eko-Okna S.A. website. You also have the right to contact the Data Protection Officer in order to withdraw your consent to the processing of this data.

The data controller does not intend to provide your data to any third parties or transnational organizations.

You can give (or withdraw) your consent to the processing of personal data by using the electronic form available via the website rodo.ekookna.pl

 

8.2 Regulations for the use of the website www.trwala-adoracja.eu and www.trwala-adoracja.pl

along with the notice of Personal data processing

Dear Sir or Madam,

Due to your rights under the Regulation of the European Parliament and of the (EU) Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data as well as on the free movement of such data and the repeal of Directive 95/46/EC (referred to as “GDPR” (General Data Protection Regulation) or “RODO” and “ORODO” in Polish), please take the time to read the information below.

GENERAL INFORMATION

By using the website www.trwala-adoracja.pl and www.trwala-adoracja.eu you will be able to voluntarily declare your participation in the adoration of the Blessed Sacrament taking place in the company chapel of EKO-OKNA S.A. Additionally, you will be able to receive further information about the planned adoration.

 

Those who would like to participate in the planning process of the Permanent Adoration, but are not interested in online registration, will be able to voluntarily provide their personal data via specially prepared leaflets so the Coordinators of Permanent Adoration can contact them later.

The “Permanent Adoration” application will also remind you of the dates for which the declaration of participation was submitted via e-mail and/or text messages (to be specified how the application works). The aforementioned coordinators will also invite you to join the Adoration.

Registration is voluntary and is not subject to any obligations and arrangements as to the personal data provided. Registration of your personal data in the traditional form or through the application is intended to enable the planning of the adoration that will take place in the Chapel. You will be able to cancel the application at any time by deactivating your account (see below). It will also be possible to submit a declaration of withdrawal of consent for the processing of personal data. The declaration can be submitted by e-mail to the address iod@ekookna.pl or by phone during a conversation with the Permanent Adoration Coordinator.

Registration and deactivation will be possible via the following websites: www.trwala-adoracja.pl or www.trwala-adoracja.eu. To set up a new account, log on to the above website and select “To create a new account, click here”. Deactivation of the account will be done via the link “Edit profile” and at the bottom of the page select “To deactivate the account click here”.

In the absence of consent to the processing of personal data, it is still possible to participate in Permanent Adoration, in accordance with the agreed schedule.

 

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The Controller of your personal data is: Eko-Okna S.A., with its registered office in Kornice. You can contact us by writing to the following address: Kornice, ul. Spacerowa 4, 47-480 Pietrowice Wielkie, Poland. You can also contact the Controller through the Data Protection Officer appointed by him, in the person of Roman Kurzydem, by writing to the above-mentioned address in Kornice or to the e-mail address: iod@ekookna.pl,, tel. 572 337 224 in every case regarding the processing of your personal data.

 

WHAT ARE THE OBJECTIVES, LEGAL BASIS AND SOURCES OF PROCESSING YOUR PERSONAL DATA?

The collected personal data (name, city, age range, e-mail, telephone number) will be processed by Eko-Okna S.A. for purposes related to the implementation of the following activities:

  • Enrollment of your personal data

(Register of participation in adoration, i.e. declaration of participation, change of the date of participation, cancellation of the date of Adoration, maintaining the continuity of Adoration. Calling and sending e-mails with a proposed date of adoration. )

The date of adoration will be confirmed by e-mail, text message or by phone by the Coordinators of Permanent Adoration. Additionally, the Coordinators will invite you to Adoration via e-mail or by phone

  • Statistical data used only by the Controller

EKO-OKNA S.A. ensures that it will process the above-mentioned personal data only for the purposes for which they have been collected.

Legal basis: REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016, Art. 6 paragraph 1 section a data subject has given a separate consent to the disclosure of his/her personal data for one or more specific purposes

 

TO WHOM MAY YOUR DATA BE TRANSFERRED

Personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court, Labor Inspectorate) and insurance companies for both persons and property.

 

TIME, PLACE OF KEEPING THE REGISTER, WITHDRAWAL OF CONSENT TO PROCESSING OF PERSONAL DATA

EKO-OKNA S.A. informs that the processing of personal data will continue until the consent to the processing of personal data is withdrawn.

The above data is stored on the Controller's servers supervised by the IT department.

The declaration of withdrawal of consent to the processing of personal data may be submitted by:

  •  a written statement submitted to the Controller or during a telephone conversation with the Coordinator of Permanent Adoration.
  • Deactivation of the account on the website www.trwala-adoracja.pl, and www.trwala-adoracja.eu (see General Information)

Personal data will be processed until the withdrawal of your consent to the processing of personal data, however no later than within 14 days from the last correspondence. After this period the data shall be deleted.

The consent withdrawal shall not affect the legitimacy of processing performed on the basis in conformity before such withdrawal.

The processing time of your personal data may be extended in the event of ongoing proceedings before the State Authority. When the data constitute evidence in these proceedings – the date of its storage is extended until the final completion of the proceedings. .

 

WHAT ARE YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA?

You have the right to request access to data, its rectification, erasure or restriction of processing. If you believe that your rights guaranteed by the provisions of the above Regulation are violated, you have the right to lodge a complaint with the Inspector General for Personal Data Protection in electronic or traditional form in accordance with the procedures described on the website of the Office for Personal Data Protection (uodo.gov).

At the same time, EKO-OKNA S.A., as the Personal Data Controller, ensures that it has implemented all necessary technical and organizational security measures to ensure the protection of the data.

 

9. Window4U, web side

9.1 Regulations for the provision of services for users of the Window4U configurator

1. GENERAL PROVISION

1. 1. These regulations define the rules of using the Window4U Configurator and the terms of provision of EKO-OKNA S.A. services for the benefit of the User.

2. The technical condition for using the Window4U Configurator is to have a device with Internet access, equipped with a web browser and an e-mail account.

2. DEFINITIONS

1. “Window4U configurator” means online offer service.

2. Operator: EKO-OKNA S.A., a company residing in Kornice Tax identification number (NIP) 6391813241, Statistical identification number (REGON) 277925708.

3. Personal data administrator: EKO-OKNA S.A., a company residing in Kornice Tax identification number (NIP) 6391813241, Statistical identification number (REGON) 277925708.

4. User – a dealer, a natural person who is over 18 years of age and has full legal capacity, a legal person or an organizational unit without legal personality, but who may acquire rights and incur liabilities on the User's behalf, who in accordance with the Regulations has created an Account.

5. Window4U Configurator – an internet configurator run by the Operator at the internet address www.window4u.euwhich is used for the presentation, promotion and advertising of the Goods offered by the Operator. “Account” means an account activated for the User by the Operator, constituting a collection of User's data and information about his activities and handling of affairs within the Window4U Configurator.

6. Regulation – this regulation.

7. Contractor – an entrepreneur cooperating with the User under a cooperation agreement.

8. Contract – the contract to provide services in Window4U Configurator concluded for an indefinite duration between the User and the Operator under the Regulations, the subject of which is the provision of Services within the scope and under the terms set out in the Regulations.

3. GENERAL CONDITIONS ON USING THE WINDOW4U CONFIGURATOR

1. The Users can use the Window4U Configurator free of charge.

2. The information available on the configurator website www.window4u.eudoes not constitute an offer within the meaning of the Civil Code and merely an invitation to enter into a contract (pursuant to Art. 71 of the Civil Code).

3. The operator shall not be a seller or a party to transactions made by Users. The operator informs about the goods using the Window4U Configurator and allows you to contact the Contractor in order to conclude a sales contract between the User and the Contractor.

4. The Operator reserves the right to change the prices of offered goods, to introduce new products to the offer, to perform or cancel promotional actions or to introduce changes thereto.

5. The Operator shall not be liable:

a) for the delivery of the Goods in connection with the order placed by the User via the Window4U Configurator or as part of the User's commercial offer,

b) under the warranty, guarantee and consumer rights related to the Goods and the sale transaction,

c) under non-performance or improper performance of obligations by the User.

6. The proprietary copyrights to the components of the Window4U Configurator (Website logos, content, compositions) and industrial property rights, including protection rights to trademarks placed on the website, belong to the Operator or third parties, and the Operator has the right to use them for information purposes related to the Window4U configurator.

7. The operator shall carry out the necessary technical during the night time period, if possible.

8. It is forbidden to access the Window4U Configurator and its content in an automated manner, unless the Operator agrees. In particular, it is forbidden to use bots, indexing robots and other automated tools enabling the use of the website without the User's interference.

9. The user may not to copy, distribute, reproduce or modify any content, including data contained in the Window4U Configurator.

10. The user is obligated not to post any content which, when exposed to the public, may be deemed to violate good manners.

4. REGISTRATION, CONCLUSION OF THE CONTRACT, LOGGING

1. Registration in the Window4U Configurator takes place after prior approval of the Regulations and entering the User's data into the form, in particular company data, name, e-mail address, telephone number and password. The entered data shall correspond to the actual state, i.e. they should be true, up-to-date and complete.

2. After completing the registration form, the User will receive to the address indicated by him in the registration process, an e-mail confirming registration and other information required by law, which the user should enter to complete the registration process.

3. Conclusion of a Contract between the User and the Operator for the provision of services under the terms of the Regulations takes place upon completion of the registration process in accordance with point 3.

4. Within the conclusion of the contract referred to in point 4 the operator creates and provides the User with an Account on Window4U allowing the use of the configurator in accordance with these regulations.

5. It is forbidden to use other people's accounts and make accounts available to third parties.

5. PERSONAL DATA; PRIVACY PROTECTION

1. Users' personal data are processed in accordance with the law, including the Act of 10 May 2018, Journal of Laws No. Pos. 1000 on the protection of personal data, Regulation (EU) 2016/679 of the European Parliament and of the Council hereinafter referred to as the GDPR and the Act of 18 July 2002 on the provision of services by electronic means. Users' personal data shall be processed for providing services to these Users by the Operator.

2. The operator applies the available technical and organizational measures that ensure the protection of the data being processed, including programming security (including data encryption systems). The Operator protects data against their disclosure to unauthorized persons, disclosure, loss and destruction, unauthorized modification of the indicated data, as well as against their processing in violation of the applicable law.

3. The operator provides Users with the exercise of rights under the Personal Data Protection Act, including the right to access and correct their own personal data, and the right to control the processing of their own personal data on the terms described in the Act. We hereby inform that the Users have the right to control the processing of their own personal data, in particular, as specified in the Personal Data Protection Act – the right to reasonably request that your data cease to be processed due to the specific state of affairs or the right to object that your data be processed. The Users also have the right to rectification, elimination, limitation and portability of the data.

4. The operator shall not use the IP addresses of the users' computers directly for server administration purposes. A Google Analytics account is assigned to the Window4U website, but the collection of statistical data is carried out by Google, the operator has access only to the developed version of this data.

6. CLAIMS

1. Filing a complaint should include a description of the event causing the complaint.

2. Complaints will be identified within 14 business days from the date of receipt of a fully and correctly completed claim.

3. The Operator reserves that complaints regarding the quality or defects of the Goods purchased from Users, or the improper performance or non-performance of the sales contract, including the process of delivery and assembly of the Goods, shall be addressed directly to the User.

7. TERMINATION OF A CONTRACT

1. The subject contract for the provision of services by the Operator is concluded for an indefinite period with the possibility of termination by the User with immediate effect. The operator has the right to terminate the above-mentioned contract in the event of a gross violation of the law or the provisions of these regulations by the User, or terminate with a 7-day notice period.

2. The statement on termination of the Contract may be submitted by the User in writing to the Operator's address or by e-mail to the address poczta@ekookna.pl.

8. FINAL PROVISION

1. The Organizer reserves the right to introduce changes in these Regulations.  

2. Amendments to the Regulations enter into force on the date specified by the Operator, but not less than 7 days from the date of publication of the changes and from the date of sending the relevant notification of changes to the Users.

3. If the User does not accept changes in the Regulations, he shall have the right to terminate the Agreement, and further use of the configurator is impossible, in accordance with section 7 subsection 1.

4. Matters not covered by the terms and conditions shall be governed by the Civil Code, the provisions of the Act on personal data protection, electronic services and Anti-Trust and Consumer Protection Act and other relevant provisions of Polish law.

5. Disputes arising under this Agreement shall be settled by the competent court in the place of the Operator’s registered office.

These Rules of Procedure shall enter into force on 30.10.2019.

9. FINAL PROVISIONS, AMENDMENTS TO THE RULES OF PROCEDURE

The Rules of procedure enter into force on 20.05.2018, with further amendments and corrections, see chapter 9 of these Rules.

 

9.2 Terms and conditions for the use of the eko4u Mobile Application

To download the terms and conditions, click here

 

9.3 Mobile Application Contact List

The user's contact list is accessed as follows:

  1. 1. The user invites another person (his employee) to cooperate within the application by sending him an invitation - the number can be entered manually or selected from the list of contacts. As a result, the application sends an invitation SMS to the given number.
  2. 2. The user completes the contact details of the customer where the assembly works will be carried out - name, surname, telephone number. He can enter them manually or select them from the list of contacts. These data will be made available via the application to employees performing the work.

Both fields are optional..

9.4 Photo gallery and camera in the mobile application

  1. 1. The user can use the phone's camera to scan the QR code and complete the invitation to the application.
  2. 2. The user can use a camera to document the progress of work or its final state for the purposes of work reports for the employer.
  3. 3. The user, using the photo gallery, can upload / save / preview / share the photos documenting the progress of work.

 

10. Final provisions, privacy policy

The Controller reserves the right to make changes to this Privacy Policy.

Rights arising from the provisions of the GDPR Directive

The right to rectification of personal data.

 

Pursuant to Article 16 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), abbreviated to “GDPR”, each individual has the right to request his/her Personal Data Controllers to immediately rectify his/her personal data.

To begin the process of rectification of your personal data stored in the IT systems of Eko-Okna S.A., please enter your e-mail address and click Send.

 

The right to erasure of personal data (‘the right to be forgotten’)

 

Pursuant to Article 17 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), abbreviated to “GDPR”, each individual has the right to request his/her Personal Data Controllers to immediately erase his/her personal data.

To start the process of erasure of your personal data stored in the IT systems of Eko-Okna S.A., please enter your e-mail address and click Send.

 

The right to restriction of processing of personal data

 

Pursuant to Article 18 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), abbreviated to “GDPR”, each individual has the right to request his/her Personal Data Controllers to restrict the processing of his/her personal data.

To start the process of restricting the processing of your personal data stored in the IT systems of Eko-Okna S.A., please enter your e-mail address and click Send.

 

The right to personal data portability

 

Pursuant to Article 20 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), abbreviated to “GDPR”, each individual has the right to request his/her Personal Data Controllers to port (move) his/her personal data to another data processing system.

To start the process of porting your personal data stored in the IT systems of Eko-Okna S.A., please enter your e-mail address and click Send.

 

The right to object

 

Pursuant to Article 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), abbreviated to “GDPR”, each individual has the right to request his/her Personal Data Administrator to discontinue further processing of his/her personal data.

To start the process of objection to the processing of your personal data stored in the IT systems of Eko-Okna S.A., please enter your e-mail address and click Send.

 

Consent for personal data processing

 

Having regard to our current and future cooperation, and respecting your rights under Regulation 2016/679 (EU) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regards to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (referred to as the "GDPR" or "General Data Protection Regulation"), and the Act of 18 July 2002 on Providing Services by Electronic Means, the Act of 16 July 2004 Telecommunications Law and the Act of 10 May 2018 on the Protection of Personal Data, please read the following information.

 

Customer information

Personal data processing information

Recruitment personal data processing information

Contact the Data Protection Officer

Content of the GDPR Regulation