Privacy policy

1. Who controls your data?

The controller is Wiexpol Sp. z o.o., Kolonia Osiek 8, 87-340 Osiek, Poland. For privacy matters contact biuro@wiexpol.pl, call +48 56 49 302 52 or write to our postal address. We have not appointed a Data Protection Officer.

2. Data, purposes and legal bases

• Contact and enquiries: names, company details, email addresses, phone numbers and information you provide in correspondence. We use these to respond and discuss business, based on our legitimate interest in communication (GDPR Article 6(1)(f)). Enquiries about a contract to which you would be a party may be processed to take steps at your request before entering that contract (Article 6(1)(b)).
• Business relationships: if an enquiry becomes an order, we process data to perform the contract (Article 6(1)(b)), meet legal obligations such as tax and accounting duties (Article 6(1)(c)), and establish, pursue or defend claims (Article 6(1)(f)). Business contact persons' details are processed in our legitimate interest in managing the relationship.
• Site operation and security: server logs may record IP addresses, request times, visited URLs, browser information and errors. These support delivery, diagnostics, abuse prevention and security, based on our legitimate interest (Article 6(1)(f)).
• Optional analytics: once Google Analytics is enabled, information about visits, devices and website usage is collected only with your consent (Article 6(1)(a)).
• Advertising measurement: with additional consent, we link Google ad-click identifiers to website events, including acceptance of an enquiry for sending, to evaluate campaigns. The basis is consent (GDPR Article 6(1)(a)). We do not send message contents, attachments or the form email address to Google.

Providing enquiry data is voluntary, but we may be unable to respond without contact details and information about your request. Neither analytics nor advertising measurement consent is required to use the site. Advertising measurement requires a separate choice; earlier analytics-only consent does not enable it.

3. How the enquiry form works

When you click “Send enquiry”, your details are sent over an encrypted connection to the website server and then to our handlowy@wiexpol.pl mailbox. Your reply email, subject and message are required; company or name and an attachment are optional. The attachment is sent with the message and is not published on the website. The form module removes its temporary copy after handling the send attempt. The mail plugin may also keep messages in its sending log according to its settings. The form module does not archive messages in the WordPress database. It uses technical hashes and counters valid for up to 61 minutes to limit spam and duplicate submissions. Expired entries are removed during WordPress temporary-cache cleanup. Form contents are not sent to Google Analytics. With analytics consent, we measure acceptance of an enquiry for sending, the form type and page language. This does not confirm email delivery. The form also works without analytics consent.

4. Recipients and international processing

We use home.pl for website/domain infrastructure and Microsoft 365 for business email. Authorised staff and hosting, email and IT providers may access data necessary for their duties. Order-related data may also be shared with accounting, legal and delivery providers, and with authorities entitled to receive it.

With your consent to active analytics, Google Ireland Limited and entities involved in Google Analytics receive analytics data. With additional advertising measurement consent, ad-click and website-event information is also used in linked Google Ads to attribute enquiries to ads and evaluate campaigns. Google and Microsoft services may involve processing outside the European Economic Area, including the USA. Providers use mechanisms such as adequacy decisions and standard contractual clauses. See Google's transfer safeguards and Microsoft's data protection terms. You can also contact us for information about safeguards for your data.

5. Retention

• Correspondence is kept for the time needed to resolve the matter and conduct discussions. Relevant records of cooperation or potential claims may be kept for the applicable limitation period.
• Order records are also retained for periods required by tax and accounting rules.
• Technical logs are retained as needed for diagnostics and security, depending on the hosting service's deletion cycle. Records required to investigate an incident may be kept until the incident and related claims are resolved.
• Privacy preferences remain valid for 180 days. We ask again after expiry. Introducing a new purpose does not expand an earlier consent.
• With active Google Analytics, user- and event-level data retention is 2 months. Aggregate reports may be retained longer. Browser cookie retention is described below. Withdrawing consent stops future measurement; for previously collected data you can exercise the rights in section 7.

6. Cookies and browser storage

Optional analytics and advertising measurement require prior consent. “Reject optional” lets you use the website without Analytics. “Customize” lets you choose. Closing settings or browsing does not grant consent.

Privacy preferences — essential

A localStorage key starting with wx26_privacy_v1 stores your choices, their version and expiry time. It is scoped to this website installation and is not used for tracking. It is valid for 180 days, replaced when you save a new choice and removed on your next visit after expiry.

WordPress technical functions

Session storage may contain wpEmojiSettingsSupports, a browser character-support check. This is not visit analytics. Session storage ends with the browsing session. Administrator sign-in uses separate technical WordPress cookies.

Google Analytics — optional

After consent, wx26_ga and wx26_ga_… cookies may distinguish browsers and sessions. We set a lifetime of up to 180 days. Analytics covers information such as visited pages, device type and approximate region. Analytics consent alone does not enable advertising measurement. We do not enable Google Signals or ad personalisation. Analytics is currently disabled.

Advertising measurement — optional

Requires Analytics consent and separate advertising measurement consent. Click identifiers such as gclid, gbraid and wbraid help link enquiries to ads. Google cookies in the _gcl_… family may be used, typically for up to 90 days. See Google’s cookie list. This consent does not enable ad personalisation or remarketing.

Change privacy settings. The same link is in the footer. Withdrawing consent is as accessible as granting it: withdrawing analytics consent removes this installation's Analytics cookies and stops further measurement. Advertising measurement can be disabled separately; we then remove its accessible cookies on our domain. Other domains' cookies can be removed through browser settings. Clearing site data in your browser causes the settings prompt to reappear.

Inter fonts and images are served from our server. Map links open Google's external site only when clicked; that provider's terms then apply.

7. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on our legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Contact biuro@wiexpol.pl to exercise your rights. You may complain to the Polish data protection authority, the President of UODO, or the competent supervisory authority: uodo.gov.pl.

8. Automated decisions and updates

We do not use website data for solely automated decisions, including profiling, that produce legal or similarly significant effects on you. We update this policy when website functions or processing change. The current version is available through the footer.