In brief: we use the details submitted through our forms only to handle your enquiry and continue the conversation. We do not carry out profiling or automated decision-making. Optional analytics, marketing and external content remain disabled until you accept them.
1. Data controller
The controller of your personal data is WJ Meble Sp. z o.o., ul. Kwiatowa 7, 56-320 Krośnice, Poland.
- email: wj.meble.biuro@gmail.com
- telephone: +48 884 779 079
You can use these contact details to ask about processing or exercise your rights.
2. Data we process and its source
We process information you provide through the general or B2B contact form: your name, email address, telephone number, company name, customer or business type, enquiry subject and message, interested product category and estimated order range. Some fields are optional, as indicated on each form.
Limited technical data are also created when you use the website, as explained under “Analytics and cookies”. We receive data directly from you or automatically from your browser when it requests the website.
3. Purposes and legal bases
Handling enquiries and preparing cooperation
We process data to receive and answer your message, explain available options and, where requested, take steps before entering into a contract (Article 6(1)(b) GDPR). For enquiries made by company representatives and general business correspondence, we also rely on our legitimate interest in communicating and developing business relationships (Article 6(1)(f) GDPR).
Security and legal claims
We may process necessary data to protect forms from abuse, secure the website, and establish, pursue or defend claims, based on our legitimate interests (Article 6(1)(f) GDPR). Where the law requires us to retain information, Article 6(1)(c) GDPR applies.
The form checkbox is not marketing consent
Ticking it confirms that you have read this policy. It is not consent under Article 6(1)(a) GDPR and does not permit marketing. We will not send newsletters or commercial communications without a separate, appropriate legal basis.
Providing data is voluntary, but fields marked as required are necessary to submit and handle the form. Without them, we cannot reply through the form. You may contact us by telephone or email instead.
4. Recipients and transfers outside the EEA
Data may be accessed only by authorised persons and providers supporting us with hosting, website maintenance, email, IT, legal or accounting services, to the extent necessary for their work. We may also disclose data to public authorities where required by law.
Some email or map providers may process data outside the European Economic Area. Such transfers are based on a GDPR mechanism, particularly an adequacy decision (for example, the EU–US Data Privacy Framework) or Standard Contractual Clauses. Contact us if you would like information about the safeguards used.
5. How long we retain data
- Enquiries: for as long as necessary to answer and conduct correspondence; if cooperation follows, for its duration and any period required by law.
- Claims: after correspondence ends, data may be retained until the relevant statutory limitation period expires where necessary to establish, pursue or defend claims.
- Website statistics: for no longer than 400 days; older records are deleted automatically.
- Technical and security data: for the period justified by website security and in line with the hosting provider's retention rules.
6. Your rights
Subject to the conditions in the GDPR, you have the right to:
- access your data and receive a copy,
- correct inaccurate data,
- request erasure or restriction of processing,
- data portability where processing is automated and based on a contract,
- object, on grounds relating to your particular situation, to processing based on our legitimate interests.
- withdraw consent to optional technologies at any time; this does not affect the lawfulness of processing carried out before withdrawal.
To exercise these rights, email wj.meble.biuro@gmail.com. We may ask for information necessary to verify the requester's identity.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw. Details are available at uodo.gov.pl.
7. Visit statistics and cookies
After you accept the analytics category, we keep basic first-party statistics to understand how the website develops. We record the visit date and time, requested path, language version, device category and, where available, the referring domain. To estimate visitor numbers, a daily pseudonymous identifier is created from the IP address and browser information using a one-way cryptographic function. The analytics database does not store the raw IP address or the full browser header. The legal basis is your consent under Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law.
Current statistics use no additional cookies, localStorage or third-party trackers. We also respect browser Do Not Track and Global Privacy Control signals. We may introduce Google Analytics or advertising tools such as Meta Pixel in the future. They will only be enabled after the appropriate consent, and this policy and the provider list will be updated before launch.
Cookies currently used
- session — an essential session cookie that protects forms against forged requests and allows status messages to be displayed after submission; it normally expires when the browser session ends.
- wj_cookie_consent — remembers selected consent categories so that we do not ask on every page; it expires after 180 days.
Both are necessary to provide requested functions and privacy controls and are not used for advertising or profiling. Other categories — analytics, marketing and external media — are disabled by default. You can change or withdraw consent at any time using “Cookie settings” in the footer. Refusal does not limit access to the website's basic content.
8. Map and external services
The home page contains an OpenStreetMap map. It is loaded only after you accept “External media” or use the “Load map” button. When it loads, the browser connects to OpenStreetMap Foundation servers and sends technical data such as the IP address and request details, and the provider may use its own cookies. See the OpenStreetMap Foundation privacy policy.
The “Get directions” link opens Google Maps. Data are sent to Google only after you click the link, and Google processes them independently under its own privacy policy.
9. Security, automated decisions and policy changes
We apply appropriate organisational and technical safeguards, including encrypted connections, access restrictions and data minimisation. We do not use personal data for profiling or decisions producing legal effects that are made solely by automated means.
We may update this policy when website functions, providers, services or the law change. The current version and its latest revision date are always published on this page.