The administrator of the website and of your personal data is Window Repair Koszalin. For matters relating to privacy and data protection, contact: kontakt@naprawakoszalin.pl.
1. Purpose and legal basis for processing
- Contact and service delivery: When you contact us by phone, e-mail or through the contact form, we process your data (name, phone number, e-mail address) solely to handle your enquiry, prepare a quote and carry out the window repair service (Art. 6(1)(b) and (f) GDPR — steps taken at your request and our legitimate interest).
- Analytics and marketing: We process data from cookies to analyse website traffic and personalise ads — only with your voluntary consent (Art. 6(1)(a) GDPR).
- Technical logs and security: To keep the website working correctly and to protect it against abuse, we record technical events, including URL redirects and attempts to reach non-existent pages (404 errors). These entries may contain the device’s IP address and are automatically deleted after 7 days (Art. 6(1)(f) GDPR — legitimate interest).
2. Services and technologies used (third-party providers)
To ensure the website works correctly, to handle enquiries and to analyse traffic, we use trusted third-party solutions:
- Hosting and server infrastructure (Vultr Holdings LLC): The website and all data processed within it (including temporary form data) are stored on a secure VPS provided by Vultr. Choosing a server location in a European data centre in Warsaw (Poland) ensures that data is not transferred outside the European Economic Area without appropriate legal safeguards, and physical access to the machines is strictly controlled.
- Network security and spam protection (Cloudflare, Inc.): The website uses the Cloudflare CDN to ensure security and to speed up the site. To protect contact forms against bots and spam we use Cloudflare Turnstile. It analyses basic technical parameters of the device and browser without compromising user privacy and without using invasive cookies.
- Content management system (WordPress): The site is based on WordPress. Data entered by users in contact forms is processed locally on the server for immediate sending and is not unlawfully stored in the site's database. Contact details on the site are technically protected against automated scanning by bots.
- Consent management (Google Consent Mode): The website uses a cookie consent management mechanism compliant with the Google Consent Mode standard. As a result, optional analytics and marketing scripts are blocked by default and run only after the user has given voluntary consent.
- E-mail correspondence (Brevo and Google Ireland Limited): Messages sent via the contact form are forwarded through an external SMTP provider – Brevo (EU) – and then delivered to the company mailbox on Gmail (Google). Incoming mail is also supported by Cloudflare's infrastructure.
- Customer reviews (Google Ireland Limited): The site displays reviews retrieved from the company's Google profile via the official API. Displaying graphic elements (e.g. reviewers' profile pictures) involves a direct connection from your browser to Google's servers and the transfer of basic technical data (including the IP address).
- Interactive maps (Google Ireland Limited): A Google map is embedded on the site. Displaying the map involves a direct connection from the user's browser to Google's servers and the automatic transfer of the IP address and browser data in order to load the map correctly.
- Analytics and advertising services (Google Ireland Limited): With the user's consent, the website uses Google Analytics (to analyse anonymised traffic and site statistics) and Google Ads (to measure the effectiveness of advertising campaigns). These scripts run only after informed consent has been given in the cookie management panel.
3. Cookies and consent management
The website uses cookies, which fall into two categories:
- Essential (technical): Required for the website to work correctly and securely (e.g. Cloudflare cookies that protect against bots:
__cf_bm,cf_clearance, or WordPress session cookies). They work automatically and cannot be disabled. - Optional (analytics and advertising): Used for statistical purposes (Google Analytics) and marketing (Google Ads). They run only after you click the "Accept" button on the cookie banner.
Changing your decision: You can withdraw or change your consent to optional cookies at any time by clicking the "Withdraw Consent" link in the footer of our website.
4. User rights
You have the right to access your data, rectify it, erase it ("the right to be forgotten"), restrict its processing, object to processing, and the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).