Privacy policy

The controller of the personal data collected through this site is DW DOMEL ZABIELSCY Sp. z o.o., with its registered office in Łomża, Poland, selling under the GROTO brand. The registration and contact details are in the table above. On matters concerning personal data you can reach us by phone or by e-mail - we have not appointed a data protection officer, so please address correspondence to the general company address.

We collect only the data you give us yourself when you contact us about an offer. We do not buy databases, we do not gather information from other services and we do not build user profiles.

• Data from the quote enquiry form: first name or company name, phone number, e-mail address, town and the content of your message.
• The product configuration you chose, which the form attaches to the enquiry - that is information about a door rather than about you, but it reaches us together with the rest.
• Data given during a phone call or in e-mail correspondence, if that is how you contact us.
• Technical data saved together with the enquiry: IP address, information about the browser, the address of the page the form was sent from, and the address you arrived at our site from. We save it so that we can establish the circumstances of an enquiry - when and where it came from - and to limit abuse of the form.

The data from the form serves only to prepare an answer to your enquiry: choosing a solution, preparing a quote and further contact in that matter. We do not use it to send unsolicited commercial information.

• Taking steps at your request before entering into a contract, that is preparing a quote and answering an enquiry - Article 6(1)(b) GDPR.
• Our legitimate interest in conducting ongoing correspondence, protecting the form against abuse and in establishing or pursuing claims - Article 6(1)(f) GDPR. On that basis we also process the technical data saved with the enquiry.
• Compliance with legal obligations, chiefly tax and accounting ones, if a contract is concluded - Article 6(1)(c) GDPR.

Giving the data is voluntary, but without it we cannot prepare a quote or answer an enquiry - we need at least one way of getting in touch. The scope is minimal: we ask only for what is genuinely needed to prepare an answer, and fields such as the town let us point you to the nearest authorised partner.

We keep the data from an enquiry for as long as it takes to handle it, and then for the limitation period of any claims connected with the matter. If a contract is concluded, accounting documents are kept for the period required by tax and accounting law.

If an enquiry does not lead to cooperation and there is no ground to keep the data further, we delete it. You can also ask us to delete it sooner at any time.

We do not sell data and we do not share it for marketing purposes. Data may be entrusted to entities providing us with services necessary to run the site and handle correspondence.

• The provider of server and e-mail infrastructure - nazwa.pl, on whose servers the site, the file server and the database run.
• Google Ireland Limited - for visit statistics, only where you have consented to them.
• Entities providing technical support for the site, to the extent necessary to maintain it.
• Public authorities, where an obligation to disclose the data follows from the law.

Data from the forms is kept on infrastructure located in Poland and is not transferred outside the European Economic Area.

Visit statistics are the exception: if you consent to them, technical data reaches Google, which may process it outside the EEA as well. For such cases Google declares that it applies the standard contractual clauses approved by the European Commission. Without your consent no data is transferred this way.

We do not take decisions about you by automated means and we do not profile you. The configurator on the site picks product options based on what you enter into it - it does not analyse your behaviour or any personal data, and the final quote is prepared by a person.

The site uses cookies. Some of them are necessary for it to work - among other things they keep a logged-in session in the administration panel. We always set those and they require no consent, because without them the site would not work properly.

The rest serve analytics. We measure traffic with Google Analytics, so we know which pages are visited and where visitors come from. Measurement starts only after you consent - until then the tool stores nothing in your browser. You give consent in the banner on your first visit, and refusing is just as easy. You can withdraw it later by clearing the site data in your browser settings.

We embed no advertising pixels, we run no remarketing and we do not profile visitors. The legal basis for processing analytics data is your consent - Article 6(1)(a) GDPR.

The typefaces used on the site are served from our own server - the browser does not connect to external providers for them. Images are loaded from our own file server.

In connection with the processing of your data you have the rights set out in the GDPR. To exercise them it is enough to write or call - we require no form.

• The right of access to your data and to receive a copy of it.
• The right to rectification of data that is inaccurate or incomplete.
• The right to erasure of the data and to restriction of its processing.
• The right to data portability, to the extent that we process it on the basis of a contract or your request.
• The right to object to processing based on our legitimate interest.
• The right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

The connection to the site is encrypted. Access to the administration panel requires logging in, passwords are stored only as cryptographic hashes, and only the people who handle enquiries on our side have access to them.

We update the policy when the way the site works changes - for example when a new tool or a new way of contacting us appears. The current version is always available at this address, and the date of the last change is given at the top of the document.