Privacy policy and cookies

This document describes how we process the personal data of users of the proroof-systems.eu website and which cookies we use.

Data controller

The controller of personal data is TOMPOL-MED Ludmiła Biadaszkiewicz-Strugała, ul. Kwiatowa 17, 63-200 Jarocin, Poland, tax ID (NIP): 617 133 52 65 (hereinafter: “ProRoof”, “we”).

Purposes and legal bases of processing

  • Order fulfilment — processing necessary for the performance of the sales contract (Art. 6(1)(b) GDPR).
  • Accounting and tax obligations — issuing and storing sales documents (Art. 6(1)(c) GDPR).
  • Contact and handling of enquiries — replying to messages sent via the contact form (Art. 6(1)(f) GDPR — our legitimate interest in replying).
  • Website traffic analysis and statistics — solely on the basis of consent given in the cookie banner (Art. 6(1)(a) GDPR).

Recipients of data

Data may be shared with entities supporting the operation of the store: the hosting provider, the payment operator, the accounting office and — only if you consent to analytics cookies — providers of analytics tools (Google, Microsoft). These providers may process data outside the European Economic Area; the transfer is based on standard contractual clauses approved by the European Commission.

Retention period

  • Data related to an order – for the period required by tax and accounting regulations (Polish Tax Ordinance, Art. 86(1)).
  • Data from the contact form — until the correspondence is completed, but no longer than 12 months from the last contact.
  • Consent to analytics cookies — until withdrawn (by deleting the data in your browser) or for a maximum of 12 months.

Your rights

In connection with the processing of personal data you have the right to:

  • access your data and obtain a copy of it,
  • rectify (correct) your data,
  • erase your data,
  • restrict processing,
  • data portability,
  • object to processing based on our legitimate interest,
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
  • lodge a complaint with the President of the Personal Data Protection Office (UODO) or with the supervisory authority of your Member State.

Providing data is voluntary, but necessary to fulfil an order or reply to an enquiry. We do not take decisions producing legal effects solely on the basis of automated processing (profiling).

Cookies

The website uses two categories of cookies:

You can change your choice regarding analytics cookies at any time by clearing the site data in your browser settings — on your next visit we will show you the banner with the choice again.