Privacy Policy of the oknaledo.pl website

Find out how LEDO Sp. z o.o. protects your personal data on the oknaledo.pl website.

1. General provisions

The administrator of personal data is LEDO Spółka z ograniczoną odpowiedzialnością with its registered office in Nawojowa, ul. Krynicka 15, 33-335 Nawojowa, entered in the National Court Register, NIP: 7343628397, e-mail address: sekretaria@oknaledo.pl (hereinafter: Administrator).

This Privacy Policy sets out the rules for the processing of personal data of users of the oknaledo.pl website (hereinafter: Website).

Personal data is processed in accordance with applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Personal Data Protection Act of May 10, 2018.

2. Scope of data collected

The following data may be collected when using the Website:
- first and last name,
- email address,
- phone number,
- content of messages sent via contact forms,
- data provided in attachments to forms (e.g., files, documents, photos),
- data concerning the use of the Website (IP address, device identifiers, browser and operating system data).

3. Purposes and legal basis for data processing

Personal data may be processed for the following purposes:

1. Contact and handling of inquiries – pursuant to Article 6(1)(b) of the GDPR (necessity to take action prior to entering into a contract) and Article 6(1)(f) of the GDPR (legitimate interest of the Controller in responding).

2. Conclusion and performance of a contract – in the case of data sent in connection with an offer or order (Article 6(1)(b) of the GDPR).

3. Marketing and analytics – including the use of analytical and advertising tools (Google Analytics, Google Ads, Meta Ads Manager), pursuant to Article 6(1)(a) of the GDPR (user consent) and Article 6(1)(f) of the GDPR (the Administrator's legitimate interest in promoting its business).

4. Record keeping and archiving – pursuant to Article 6(1)(c) of the GDPR (legal obligation).

4. Data recipients

1. Personal data may be transferred to:

- entities providing hosting and IT services to the Administrator,
- providers of marketing and analytical tools (Google LLC, Meta Platforms Ireland Ltd.),
- companies providing legal services,
- consulting and accounting services, public authorities - in cases required by law.

2. The data will not be sold or made available to unauthorized entities.

5. Transfer of data outside the EEA

Data may be transferred outside the European Economic Area in connection with the use of Google and Meta services. These entities apply the compliance mechanisms provided for in the GDPR, in particular the standard contractual clauses approved by the European Commission.

6. Cookies and tracking technologies

1. The website uses cookies to ensure proper functioning, as well as for analytical and marketing purposes.

2. Cookies may be used, among other things, to:
- tailor the content of the website to the user's preferences,
- keep visitor statistics,
- display personalized ads on the Google and Meta networks.

3. The legal basis for the use of cookies for marketing and analytical purposes is the user's consent (Article 6(1)(a) of the GDPR). The user can change the cookie settings in their browser at any time or through the consent panel (the so-called cookie banner) available on the Website.

7. Data retention period

Personal data will be stored:

- in the case of data provided in forms - for the period necessary to respond to and handle the inquiry,
- in the case of concluding a contract - for the period of its implementation and the time required by law (e.g., tax and accounting regulations),
- in the case of marketing activities – until consent is withdrawn or an objection is raised.

8. Rights of data subjects

The user has the right to:

- access their data,
- rectify their data,
- erase their data ("right to be forgotten"),
- restrict processing,
- transfer their data,
- object to the processing of their data,
- withdraw consent to data processing at any time (without affecting the lawfulness of processing prior to its withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office.

9. Data security

The administrator uses appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure. Data sent via forms (including attachments) is protected by SSL encryption and security measures implemented by the hosting provider.

10. Changes to the Privacy Policy

The Administrator reserves the right to amend this Privacy Policy in the event of introducing new functionalities to the Website, changes in the law or technologies used. The current version of the Privacy Policy will always be published on the Website.
📌 Contact regarding personal data protection:
LEDO Sp. z o.o.
ul. Krynicka 15, 33-335 Nawojowa
e-mail: sekretaria@oknaledo.pl