Data controller
OKNOVE Sp. z o.o.
ul. Sportowa 36a, 32-040 Świątniki Górne
KRS 0001263493 | NIP 9442303311
tel. +48 695 320 090, +48 518 024 719
Privacy policy
This document explains what personal data we collect through oknove.com.pl, why we process it, who we share it with and what rights you have. It is based on the GDPR (EU 2016/679).
Who the data controller is
The controller is OKNOVE Sp. z o.o., ul. Sportowa 36a, 32-040 Świątniki Górne, Poland, entered in the register of entrepreneurs of the National Court Register under KRS 0001263493, VAT ID (NIP) 9442303311.
For any matter concerning personal data write to biuro@oknove.com.pl or call +48 695 320 090 or +48 518 024 719.
We have appointed a data protection officer. On any matter concerning the processing of your personal data and the exercise of your rights you may contact them directly at iod@oknove.com.pl.
What data we collect
- Quote request form — your name, phone number, e-mail address, the product area you are interested in (windows, doors, roller shutters, garage doors) and your message. Name and phone number are required; the remaining fields are optional.
- Comments on blog posts — the comment itself, the name you sign it with, your e-mail address, your IP address and browser signature. The last two help us detect spam.
- Server logs — IP address, date and time of the request, the page visited, browser and operating system. These are recorded automatically by the server software and serve diagnostics and security.
- Cookies — described in a separate section below.
We do not offer user registration or customer accounts, so we collect no profile data and no passwords.
Why we process your data and on what legal basis
- Answering your enquiry and preparing a quote — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
- Entering into and performing a contract for the sale and installation of joinery — Article 6(1)(b) GDPR.
- Issuing and keeping accounting records — Article 6(1)(c) GDPR (a legal obligation under tax and accounting law).
- Establishing, pursuing and defending claims — Article 6(1)(f) GDPR (our legitimate interest).
- Keeping the website secure and working correctly — Article 6(1)(f) GDPR.
- Publishing your comment under a post — Article 6(1)(a) GDPR (consent given by submitting the comment).
- Traffic statistics and analysis — Article 6(1)(a) GDPR (consent given in the cookie banner).
How long we keep your data
- Enquiries that did not lead to a contract — up to 12 months from the last contact.
- Contract-related data — for the duration of the contract and then until claims become time-barred (as a rule 6 years).
- Accounting documents — 5 years counted from the end of the tax year in which the tax obligation arose.
- Comments — until you or we delete them.
- Server logs — up to 12 months.
- Data processed on the basis of consent — until that consent is withdrawn.
Who we share your data with
We do not sell your data and we do not share it with third parties for their own marketing. We entrust it only to organisations performing specific tasks for us, under data processing agreements:
- the provider hosting the website and our mailboxes,
- the provider of the outgoing mail service (the SMTP server that delivers messages from the form),
- our accountants and, where necessary, our legal advisers,
- installation subcontractors and transport companies, to the extent needed to fulfil an order,
- the joinery manufacturer Eko-Okna S.A., to the extent needed to prepare a quote and fulfil an order,
- the provider of analytics tools — only once you have consented to analytics cookies.
Data may also be disclosed to public authorities where they request it on a statutory basis.
Do we transfer data outside the European Economic Area
The typefaces and icons used on this site are hosted on our own server and Gravatar avatars are switched off, so simply visiting the site creates no connection to servers outside the EEA.
If you consent to analytics cookies, data about your visit will reach Google Ireland Limited and in some cases Google LLC in the United States. Such a transfer relies on the European Commission adequacy decision (EU–US Data Privacy Framework) and on standard contractual clauses. Without your consent, analytics is not started at all.
Your rights
In connection with the processing of your data you have the right to:
- access your data and obtain a copy of it,
- have inaccurate data corrected and incomplete data completed,
- have your data erased (the “right to be forgotten”),
- restrict processing,
- data portability — to have your data transferred to another controller,
- object to processing based on our legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
Is providing your data mandatory
Providing your data is voluntary. Without your name and phone number, however, we cannot answer your enquiry or prepare a quote, and without the details required for accounting documents we cannot perform the contract.
Automated decisions and profiling
We do not take decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you.
Cookies and managing your consent
Cookies are small text files saved by your browser. On your first visit you will see a banner where you choose which categories you accept. Until you decide, only strictly necessary cookies are used — analytics and advertising stay blocked (Google Consent Mode v2 with the default set to denied).
- Necessary — required for the site to work: remembering your cookie choice, your language version and session security. They cannot be switched off and do not require consent.
- Analytics — help us understand how visitors use the site so we can improve it. Off by default.
- Advertising — used to personalise advertising and measure its effectiveness. Off by default.
You can change or withdraw your consent at any time by clicking the cookie management icon shown in the corner of the page. You can also delete cookies in your browser settings — bear in mind that switching some of them off may affect how the site works.
Embedded content from other websites
Posts on this site may include embedded content, such as videos or maps. It behaves exactly as if you had visited the website it comes from: those providers may collect data about you, use their own cookies and monitor your interaction with the embedded material — including when you have an account with them and are logged in.
Security
The connection to the site is encrypted. Access to data is limited to people who need it to carry out their duties and who are bound by confidentiality. We keep backups and update the software running the site.
Changes to this policy
We may update this policy when the law or the way the site works changes. The current version is always available at this address.
Last updated: 6 września 2026.