Personal data processing policy in accordance with GDPR

by BUDVAR Centrum Spółka z ograniczoną odpowiedzialnością

acting as the personal data administrator

BUDVAR Centrum Spółka z ograniczoną odpowiedzialnością based in Warsaw (00-124 Warszawa), at rondo Organizacji Narodów Zjednoczonych 1, 12th floor, is the Administrator of your personal data pursuant to the regulations, which means that we are responsible for using your personal data in a safe way, in accordance with the agreement and applicable regulations.
GDPR – Regulation of the European Parliament and of the Council (EU) no. 2016/679 of 27 April 2016
on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
The legal basis indicated in art. 6 para. 1 c) of GDPR and art. 6 para. 1 f) of GDPR will henceforth be referred to as “our legally justified interest”,
The legal basis indicated in art. 6 para. 1 b) of GDPR and art. 6 para. 1 f) of GDPR will henceforth be referred to as “executing the agreement”,
Aim and basis of our use of your personal data
We use your personal data acquired when concluding an agreement and during its validity
for the following purposes:
1)concluding and executing the Agreement between us, including:
a)contract with a commercial representative in order to present a commercial offer and confirm the terms of the order before concluding an agreement at the request of the person whom the data concerns, from the time when you provide your data until the date the Agreement is signed (no longer than 12 months),
b)contact during the validity period of the Agreement, in order to confirm delivery of the goods you have ordered, install the window joinery, verify the installation teams, present current technical data (while the Agreement lasts),
c)ransmit information about changes to the price list, general terms and conditions (GTC), provisions of the agreement (while the Agreement lasts),
d)respond to complaints and claims within the time and in the manner stipulated by the legislation and GTC,
The common legal basis for points a-d is execution of the agreement.
e)issuing and storing invoices and accounting documents during the time required by law (legal basis: the legal duty indicated in art. 6 para. 1 b) of GDPR ),
f)archiving notices/correspondence/forms in paper and electronic form (including scans); while the agreement lasts, and after its expiry – for the period when claims are being considered or other tasks carried out in connection with the legislation (legal basis: our legally justified interest).
2)discovering and preventing abuses – while the agreement is in force (legal basis: execution of the agreement), and then for the period until claims arising from the agreement expire, and in the event that we consider claims or inform the appropriate authorities – while such procedures last (legal basis: our legally justified interest).
3)creating lists, analyses and statistics for our internal requirements; this includes in particular reporting, market research, planning the development of services, development work in IT systems, creating statistical models (e.g. concerning revenue protection) – while the agreement lasts, and then for no longer than the period until claims arising from the agreement expire (legal basis: our legally justified interest).
4)establishing, defending and seeking claims, which includes providing personal data to legal practices and debt collection agencies in order to seek claims, the sale of our liabilities from the agreement to another entity – for the period until claims arising from the agreement expire (legal basis: our legally justified interest).
Data which we should be given
Most of the data which we collect from you is data necessary to conclude and execute an agreement. Without acquiring this data we would not be able to realise the agreement. In the case of current customers, we have been in possession of this data since we signed the agreement with you and there is no need to provide it again.
To conclude an agreement we require that you give us the data on the agreement/order form (if you do not, we will not conclude the agreement). we may additionally request optional data which does not affect the conclusion of the agreement (but if we do not obtain it we will be unable to, for example, call a contact number, which could lengthen the time taken to execute the agreement).
When concluding the agreement, or while it is in force, you can order additional services or goods. If this requires your data being used in a way other than that described in this document, we will supplement the information and provide it to you before obtaining the data. Within the remaining scope, the information about data processing contained in this document will remain unchanged.
Entities to which we provide your data
We provide your data to:
1)entities processing data on our behalf, participating in our activities, i.e.:
a)operating our teleinformation systems or providing us with teleinformation tools,
b)our agents, advertising agencies and other entities participating in the sale of our services,
c)entities providing us with advisory, consultancy, audit, legal aid, tax or accounting services, research agencies working for us;
d)subcontractors providing window joinery services,
2)other data administrators processing data on their own behalf, i.e.:
a)entities providing payment services (banks, payment institutions) – in order to identify payments, provide you with refunds, or to ensure the functioning of Payment Orders or other ways of automatically collecting payment for goods sold;
b)entities providing postal or courier services;
c)entities acquiring liabilities, in the event that you fail to pay for goods bought from us,
d)entities cooperating with us in legal, tax and accounting matters – within the scope in which they become data administrators.
Data acquired from other sources
In the event that you make a payment through a bank or payment institution, we will come into possession of information about which account and with which bank you made the payment. We will process this data in order to check that you have made the payment properly, and if necessary to make a refund (basis: execution of the agreement), in order to establish, seek and defend claims and to create statistics and analyses (basis: our legally justified interest).
Passing on data beyond the European Economic Area (EEA)
We do not plan to provide your data beyond the EEA.
Automated decision-making processes, including profiling,
Your data is not subject to automated decision-making processes, including profiling,
Your entitlements
You may submit an application to the data protection inspector, at the email address given below, for:
1)access to data – within the scope stipulated in art. 15 of GDPR,
2)correcting data – within the scope stipulated in art. 16 of GDPR,
3)removing data being processed without justification – within the scope stipulated in art. 17 of GDPR,
4)limiting processing (stopping the operation with data or not deleting data – depending on the application submitted) – within the scope stipulated in art. 18 of GDPR,
5)transferring data to another data administrator – within the scope stipulated in art. 20 of GDPR.
You can execute the rights mentioned above by submitting an application in writing to the address given for correspondence.
To be sure that you are entitled to submit the application, we may ask you to give additional information allowing us to verify you.
The scope of each of these rights and the situations in which they can be executed result from legislation. Which rights you can execute will depend, for example, on the legal basis of our use of your data and the purpose of processing it.
The right to object
Regardless of the rights mentioned above, you are entitled to object at any moment to our processing your data for the requirements of direct marketing. After receiving a request in this matter, we are obliged to stop processing your data for this purpose.
You may also, in various circumstances, object at any moment to our processing your personal data if the basis for using the data is our legally justified interest. In such a situation, after considering your request we will no longer be able to process the personal data covered by the objection on that basis, unless we demonstrate
that there exist:
1)important, legally justified grounds for processing the data which the law considers override your interests, rights or freedoms, or
2)grounds to establish, seek or defend claims.
In the event that our use of your data is not necessary to execute the agreement or a legal obligation, or does not constitute our legally justified interests, we may request that you provide consent to the specific ways in which we use your personal data. Such consent may enable us to provide the data to other entities for the requirements of their promotional activities, for example. Your consent may be withdrawn at any moment(this will not affect the legality of the use of your data before such consent was withdrawn).
If you consider that our processing of your personal data is against the law, you are entitled to submit a complaint to the appropriate supervisory body.
Our contact details
BUDVAR Centrum Sp. z o.o.
ul. Przemysłowa 36
98-220 Zduńska Wola
Email address for matters connected with personal data protection:
Details of the use and protection of your personal data, your rights and terms of use are also available at