Privacy Policy

 

Privacy Policy

FLEX WOOD

https://flexwoodsystem.com

  

  1. BASIC INFORMATION ON DATA PROCESSING

 

  1. The person responsible for processing your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is:

 

 

Piotr Dabrowski "TEX WOOD"
ul.Dvorna 17,
16-010 Wasilkow, Poland
VAT: PL9660346301

e-mail: texwood@texwood.com.pl

TEL: +48 691 221 600

 

  1. With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We will also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
  2. Please read these regulations to find out how we handle your personal data.

 

 

 

  1. PERSONAL DATA

 

  1. According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, i.e. the GDPR, “processing” is any process or series of processes carried out with or without the help of automated processes in connection with personal data, such as collection , the organization, the arrangement, the storage, the adaptation or modification, the reading, the query, the use, the disclosure by transmission, distribution or any other form of provision, the comparison or the linking, the restriction, the deletion or the Destruction.
  2. The data controller declares that he takes particular care to protect the interests of the data subjects and in particular ensures that:
  3. Process personal data lawfully, fairly and in a manner transparent to data subjects;
  4. collects personal data for specific, explicit and legitimate purposes and does not further process them in a manner incompatible with those purposes;
  5. personal data will be adequate, relevant and limited to what is necessary for the purposes for which they are processed;
  6. personal data is accurate and, if necessary, updated;
  7. store personal data only for as long as is necessary to achieve the purposes for which they are processed, in a form that allows the data subject to be identified;
  8. processes personal data in a way that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, through appropriate technical or organizational measures.
  9. The provision of personal data is voluntary, but necessary for the purposes mentioned under point III.
  10. We guarantee the security of the data you provide us with material, electronic and administrative channels. We strongly advise you to take all necessary measures to protect your data when surfing the Internet.
  11. We use standard SSL (Secure Sockets Layer) encryption on all websites through which personal data is entered.
  12. If content, tools or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used within the scope of this data protection declaration and whose headquarters are in a third country, it can be assumed that data is transferred to the countries where the third-party providers are based. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area. Data is transferred to third countries either if there is an appropriate level of data protection, user consent or other legal permission.

 

 

  • PURPOSES OF PROCESSING

 

  1. In principle, we only store your data for as long as is necessary for the respective purpose of processing.
  2. We only process users’ personal data in compliance with the relevant data protection regulations. This means that user data will only be processed if there is legal permission. This means, in particular, if the data processing is necessary for the provision of our contractual services (e.g. processing of orders) and online services, or is required by law, the consent of the user is available, as well as due to our legitimate interests (i.e. interest in analysis, optimization and economic operation and security of our online offering within the meaning of Art. 6 Para. 1 lit. f) GDPR, in particular when measuring reach, creating profiles for advertising and marketing purposes as well as collecting access data and using third-party services.)
  3. We would like to point out that the legal basis for the consent is Art. 6 Para. 1 lit. a) and Art. 7 GDPR, the legal basis for processing to fulfill our services and implement contractual measures is Art. 6 Para. 1 lit. b) GDPR , the legal basis for the processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c) GDPR, and the legal basis for the processing to protect our legitimate interests is Art. 6 Para. 1 lit. f) GDPR.
  4. When a purchase is made or other services offered by https://flexwoodsystem.com are used, the fulfillment of the contract (Art. 6 Para. 1 lit. b GDPR) forms the basis for the processing of the user data. Accordingly, the user data is processed until the order or service is completed has been provided or until the statute of limitations expires or until the claims expire.
  5. Depending on the payment method selected, we pass on the data necessary to process the payment transaction to our technical service providers who work for us as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, to the extent that this is necessary to process the payment. This serves to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, for example on their own website or via a technical integration in the ordering process. The data protection declaration of the respective payment service provider applies.
  6. Newsletter: You can register on our website to receive our newsletter. The newsletter contains news, offers and further information about FLEXWOOD's products and services. Our newsletter is sent based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. To receive the newsletter, you must enter your email address in the field provided on our website. We will then send you a notification email and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this email (double opt-in). We will therefore only send you a newsletter by email if you have previously expressly confirmed to us that we should activate the newsletter service.
  7. You can revoke your consent to the processing of your data for sending newsletters at any time with future effect. Every time you use our website, we collect access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular: IP address of the requesting device, information at the time of the request, address of the website accessed and the requesting website, information about the browser used and the operating system, online identifiers.
  8. The personal data that you provide in connection with contacting the person responsible by email, telephone or contact form will be processed primarily for the purpose of processing your request and answering your request. The legal basis for processing your personal data for this purpose is the legitimate interest of the controller - Article 6 Paragraph 1 Letter f) GDPR.
  9. Data recipients can be the following:

Accounting companies, IT solution suppliers, payment processing companies, marketing companies, telecommunications service providers, authorized government authorities.

  1. When paying using a payment method offered by Stripe, payment is processed via the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin.
  2. When paying using a payment method offered by iDEAL, payment is processed via the payment service provider iDEAL BV, Gustav Mahlerplein 33-35, Amsterdam.
  3. When paying using a payment method offered by Mollie, payment is processed via the payment service provider Mollie BV Keizersgracht 126, 1015CW Amsterdam.

 

 

 

 

 

  1. STORAGE DURATION

 

We only store your personal data for as long as we are obliged to do so based on relevant legal regulations (e.g. tax laws). After the relevant retention period has expired, we routinely delete the relevant data if it is no longer needed to fulfill the contract or initiate a contract. If the storage purpose no longer applies before a statutory retention period has expired, we will delete the relevant data immediately. If we have to delete data because you have exercised your rights to intervene, this will also be done immediately.

 

 

  1. YOUR RIGHTS WHEN COLLECTING PERSONAL INFORMATION

 

  1. The applicable data protection law grants you comprehensive data subject rights vis-à-vis the person responsible regarding the processing of your personal data, which we will inform you about below:
  2. Right to confirmation (Article 15 GDPR). You have the right to request confirmation from us as to whether we are processing personal data concerning you. Appropriate inquiries should be directed to us. If you make the relevant request electronically, we must provide the information in a common electronic format unless you specify otherwise.
  3. Right to information (Article 15 GDPR). If we process personal data concerning you, you have the right to receive free information from us at any time about the personal data stored about you and a copy of this data. You can also request information about the following information from us:

- the processing purposes;

- the categories of personal data being processed;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

- if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria for determining that period;

- the existence of a right to rectification or deletion of personal data concerning you or to restriction of processing by us or a right to object to such processing;

- the existence of a right to lodge a complaint with a supervisory authority;

- if the personal data is not collected from you, all available information about the origin of the data;

- the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and - at least in these cases - meaningful information about the logic involved as well as the scope and intended effects of such processing for you.

You can contact us at any time to exercise the information rights mentioned above. If you make the relevant request electronically, we must provide the information in a common electronic format unless you specify otherwise.

  1. Right to rectification (Article 16 GDPR). You have the right to request the immediate correction of incorrect personal data concerning you and, taking into account the purposes of the processing, the completion of incomplete personal data - including by means of a supplementary statement. Appropriate inquiries should be directed to us.
  2. Right to deletion (right to be forgotten) (Art. 17 GDPR). You can request that the personal data concerning you be deleted immediately if one of the following reasons applies:

- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

- You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 a) GDPR or Article 9 Paragraph 2 a) GDPR and there is no other legal basis for the processing;

- You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR:

- the personal data was processed unlawfully:

- the deletion of the personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject or

- the personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

 

If one of the reasons mentioned above applies and you would like us to delete your personal data, you can contact us at any time.

  1. Right to restriction of processing (Article 18 GDPR). You have the right to request that we restrict processing if one of the following conditions applies:

- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;

- the processing is unlawful, you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;

- we no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims or

- You have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR and it is not yet clear whether our legitimate reasons outweigh yours.

 

If one of the aforementioned reasons applies and you would therefore like to request that the processing of your data be restricted, you can contact us at any time. If we have restricted processing, we may only use this personal data - apart from storing it - with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

  1. Right to data portability (Article 20 GDPR). You have the right to receive the personal data relating to you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to third parties without hindrance from us, provided that the processing is based on consent in accordance with Art. 6 Para. 1 a) GDPR or Art. 9 Para. 2 a) GDPR or on a contract in accordance with Art. 6 Paragraph 1 b) GDPR and the processing is carried out using automated procedures. You also have the right to request that the personal data be transmitted directly from us to third parties, to the extent that this is technically feasible and provided that this does not affect the rights and freedoms of other people.

These rights do not apply if the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority vested in us.

To assert your right to data portability, you can contact us at any time.

  1. Right to object (Art. 21 GDPR), you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 Para. 1 e) or f) GDPR to file an objection.

In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct advertising, you can object to this at any time. We will then no longer process your data for this purpose.

In addition, you have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you that is carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 Para. 1 GDPR, unless such processing is necessary to fulfill a task carried out in the public interest.

To assert your right to object, you can contact us at any time.

  1. Right to revoke your data protection consent (Art. 7 Para. 1 Sentence 1 GDPR). You have the right to revoke your consent to the processing of data at any time with future effect. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent.
  2. Right to complain (Art. 77 GDPR)

You have the right to lodge complaints with the responsible supervisory authority at any time.

 

  1. COOKIES

 

  1. We use cookies on our website. Cookies are small files that are stored on your device and store certain settings and data for exchange with our system via your browser. Basically, there are two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your device for a longer period of time or indefinitely. This storage helps us to design our website and our offers accordingly for you and makes it easier for you to use it, for example by saving certain entries from you so that you do not have to repeat them constantly.
  2. If you agree to the use of cookies, the legal basis for processing is the declared consent in accordance with Section 6 Paragraph 1 Sentence 1 Letter a) GDPR.
  3. Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests (e.g. in the commercial operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations, both in accordance with Section 6 Paragraph 1 Sentence 1 lit. f) GDPR.
  4. You can adjust your cookie settings at any time. You can set your internet browser so that the storage of cookies on your device is generally prevented or you are asked each time whether you agree to the setting of cookies. Once cookies have been set, you can delete them at any time. You can find out how this works in detail in the help function of your browser. There are special explanations for the Internet browsers Safari, Firefox, Microsoft Internet Explorer and Google Chrome.
  5. Google Analytics 4
  6. Google Analytics is a web analysis service provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Google Analytics uses cookies to enable analysis of the use of the website https://flexwoodsystem.com and its subpages. The information generated by the cookies is usually transferred to a Google server in the USA and stored there. Your IP address will generally be shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area before it is transferred to the USA; In exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The cookies stored by Google Analytics are deleted after 14 months at the latest. Further information about data protection and the terms of use for Google Analytics can be found at: https://www.google.com/analytics/terms/de.html and https://policies.google.com/privacy?hl=de.
  7. To deactivate Google Analytics, use the following link to download and install a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de
  8. The legal basis for using the web analysis service Google Analytics is Article 6 Paragraph 1 Letter f) GDPR.
  9. All third-party cookies: Google Analytics 4, Google Ads, Meta Pixel, Pinterest.

 

  • FINAL PROVISIONS

 

  1. The person responsible may change the data protection declaration in the future. Each time information about such a change will be posted on the online store website. With each change, a new version of the privacy policy with a new date will be displayed.
  2. This version of the data protection declaration is valid from September 14, 2023.