Privacy Policy

GENERAL PROVISIONS

The data controller of personal data collected via the website www.wallflow.uk is LMLP group sp. z o.o., with its registered office at ul. Szczęsna 26, 02-454 Warsaw, and its correspondence address, entered into the business register under the KRS number: 0001069716, NIP 5223277764, REGON: 52696369400000, with a share capital of 5000 PLN, email address: kontakt@wallflow.pl, hereinafter referred to as the „Administrator”, who is also the Service Provider.

Personal data collected by the Administrator via the website are processed in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals regarding the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), as well as the Personal Data Protection Act of May 10, 2018.

TYPE OF PERSONAL DATA PROCESSED, PURPOSE AND SCOPE OF DATA COLLECTION

PURPOSE OF PROCESSING AND LEGAL BASIS. The Administrator processes personal data via the website www.wallflow.pl in the following cases:

• When the user uses the contact form. Personal data is processed based on Article 6(1)(f) of the GDPR as a legitimate interest of the Administrator.
• When the user subscribes to the Newsletter to receive commercial information by electronic means. Personal data is processed after the user provides separate consent, based on Article 6(1)(a) of the GDPR.

TYPE OF PERSONAL DATA PROCESSED. The Administrator processes the following categories of personal data:

• First and last name,
• Email address,
• Phone number,
• City of residence.

DATA RETENTION PERIOD. Personal data of users are stored by the Administrator:

• When the basis for processing is the performance of a contract, for as long as necessary to perform the contract, and after that period for the time corresponding to the limitation period for claims. Unless otherwise specified by law, the limitation period is six years, and for claims related to periodic services or business activities, three years.
• When the basis for processing is consent, for as long as consent is not withdrawn, and after withdrawal, for a period corresponding to the limitation period for claims that the Administrator may raise or that may be raised against him. Unless otherwise specified by law, the limitation period is six years, and for claims related to periodic services or business activities, three years.

Additional information may be collected during the use of the website, including the user’s IP address or the external IP address of the internet provider, domain name, browser type, access time, and operating system type. Navigation data may also be collected, such as information about links and references clicked or other actions taken on the website. The legal basis for such activities is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), aimed at facilitating the use of electronic services and improving their functionality.

The provision of personal data by the user is voluntary. Personal data may also be processed in an automated manner for profiling, provided that the user consents based on Article 6(1)(a) of the GDPR. The consequence of profiling will be the assignment of a profile to the person for the purpose of making decisions regarding them or analyzing or predicting their preferences, behaviors, and attitudes.

The Administrator takes particular care to protect the interests of individuals whose data is processed, ensuring that the collected data is:

• Processed lawfully,
• Collected for specified, lawful purposes and not further processed in a manner incompatible with those purposes,
• Accurate and adequate to the purposes for which it is processed and stored in a form that allows identification of the individuals concerned, no longer than necessary to achieve the processing purposes.

DISCLOSURE OF PERSONAL DATA

User personal data is shared with service providers used by the Administrator for managing the website. Depending on contractual arrangements and circumstances, service providers to whom personal data is disclosed either follow the Administrator’s instructions regarding the purposes and methods of processing (processors) or independently determine the purposes and methods of processing (controllers).

User personal data is stored exclusively within the European Economic Area (EEA).

RIGHTS TO CONTROL, ACCESS, AND CORRECT PERSONAL DATA

The individual whose data is processed has the right to access their personal data, correct it, request its deletion, restrict its processing, request data portability, object to processing, and withdraw consent at any time without affecting the legality of processing based on consent before its withdrawal.

Legal grounds for a user request:

• Access to data – Article 15 GDPR,
• Rectification of data – Article 16 GDPR,
• Deletion of data (right to be forgotten) – Article 17 GDPR,
• Restriction of processing – Article 18 GDPR,
• Data portability – Article 20 GDPR,
• Objection – Article 21 GDPR,
• Withdrawal of consent – Article 7(3) GDPR.

To exercise the rights mentioned in paragraph 2, the user can send an email to contact@wallflow.uk.

If a user submits a request under these rights, the Administrator will comply with the request or refuse it without delay, but no later than one month after receiving the request. If, due to the complexity of the request or the number of requests, the Administrator cannot comply within one month, the request will be fulfilled within the next two months, with the user informed of the delay and the reasons for it within one month of receiving the request.

In case of a violation of GDPR provisions regarding the processing of personal data, the individual has the right to file a complaint with the President of the Personal Data Protection Office.

COOKIES

The Administrator’s website uses cookies. The installation of cookies is necessary for the proper provision of services on the website. Cookies contain information necessary for the proper functioning of the website and also enable the creation of general statistics of website visits.

The types of cookies used on the website are: session and persistent cookies.

Session cookies are temporary files stored on the user’s device until they log out (leave the website). Persistent cookies are stored on the user’s device for a specified period or until the user deletes them.

The Administrator uses its own cookies to better understand how users interact with the website. Cookies collect information about how the user uses the website, the type of page the user was redirected from, and the number of visits and the duration of the visit to the website. This information does not record specific personal data but is used to generate usage statistics for the website.

The user has the right to decide on the access of cookies to their computer by selecting their preferences in the browser settings. Detailed information on the handling of cookies can be found in the browser’s software settings.

FINAL PROVISIONS

The Administrator applies technical and organizational measures to ensure the protection of processed personal data in accordance with the risks and categories of data being protected, particularly ensuring that the data is protected against unauthorized access, removal, processing in violation of applicable laws, as well as alteration, loss, damage, or destruction.

The Administrator provides appropriate technical measures to prevent unauthorized persons from obtaining and modifying personal data transmitted electronically.

In matters not regulated by this Privacy Policy, the provisions of the GDPR and other relevant Polish laws apply.

GDPR

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals regarding the processing of personal data and the free movement of such data (General Data Protection Regulation – GDPR), we inform you that:

The data controller is LMLP group sp. z o.o., with its registered office at ul. Szczęsna 26, 02-454 Warsaw, with a correspondence address at ul. Szczęsna 26, 02-454 Warsaw, registered under KRS number: 0001069716, NIP 5223277764, REGON: 52696369400000. The company’s contact details: email address: kontakt@wallflow.pl.

The Administrator conducts operations processing your personal data. Personal data will be processed for informational and marketing purposes and will not be shared with other recipients. The personal data collected by the Administrator will be processed to respond to inquiries submitted via the contact form, i.e., to take actions requested by the individual concerned, before entering into a contract (Article 6(1)(a) and (b) GDPR), and for informational and marketing purposes. Depending on the results of the correspondence, the data will either continue to be processed to fulfill the contract, or they will be deleted at the request of the individual.

Providing data is necessary to fulfill the legal obligations of the Administrator. Failure to provide data will make it impossible to effectively fulfill these obligations.

The individual whose personal data is processed has the right to access, rectify, delete, restrict processing, transfer data, object to processing, and, if processing is based on consent, withdraw consent at any time without affecting the legality of processing based on consent before its withdrawal. If the individual believes that the processing of their personal data violates data protection laws, they have the right to file a complaint with the supervisory authority, i.e., the President of the Personal Data Protection Office.

Providing personal data is voluntary.