Roman Fensterbau
Sign in

Privacy Policy

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data with which you can be personally identified.

Data Collection on Our Website

Data processing on this website is carried out by the website operator. Their contact details can be found in the section "Information on the Controller" in this privacy policy.

2. Information on the Controller

The controller responsible for data processing on this website is:
GRbud György Román
Owner: György Román
ul. Ryszarda Wagnera 26/9, 52-129 Wrocław, Poland
Address in Germany: Hof 49, 96268 Mitwitz, Germany
Phone: +49 1517 2385702
E-Mail: kontakt@roman-fensterbau.com

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Your Rights Under the GDPR

Within the framework of the applicable statutory provisions, you have the following rights at any time:

  • Right of Access (Art. 15 GDPR): Right to obtain free information about your stored personal data, its origin, recipients, and purpose of processing.
  • Right to Rectification (Art. 16 GDPR): Right to demand the immediate correction of inaccurate data or completion of incomplete data.
  • Right to Erasure (Art. 17 GDPR): Right to demand the deletion of your personal data ("Right to be forgotten").
  • Right to Restriction of Processing (Art. 18 GDPR): Right to request the restriction of data processing.
  • Right to Data Portability (Art. 20 GDPR): Right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent (Art. 7 (3) GDPR): Right to revoke your consent at any time with effect for the future.
  • Right to Object (Art. 21 GDPR): Right to object to data processing based on legitimate interests (Art. 6 (1) (f) GDPR).
  • Right to Lodge a Complaint (Art. 77 GDPR): Right to file a complaint with a competent supervisory authority.

4. Data Collection on Our Website

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The processing is based on Art. 6 (1) (f) GDPR for the purpose of ensuring technically error-free operation and optimization of the website.

Enquiry Form & Contact (E-mail / Telephone)

If you send us enquiries via contact form, e-mail, or telephone, your details, including the contact data you provided, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
The legal basis is Art. 6 (1) (b) GDPR (contract performance or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in effective enquiry handling).

Customer & Guest Accounts

You can register on our website to create a customer account. Data entered during registration (e.g., name, address, e-mail) is used solely for the usage of the account and service fulfillment pursuant to Art. 6 (1) (b) GDPR.

5. Data Retention Periods (Art. 13 (2) (a) GDPR)

We process and store personal data only for as long as necessary to fulfill the operational purpose or comply with statutory retention requirements:

  • Guest Accounts / Uncompleted Checkout: Guest account data and uncompleted/abandoned order data are automatically erased after 90 days.
  • Contractual & Order Data: Stored for the duration of the active customer relationship.
  • Statutory Retention Obligations: In accordance with commercial and tax laws (e.g., German HGB/AO or Polish Tax Code), relevant accounting documents, contracts, and invoices are retained for 6 to 10 years.
  • Server Log Files: Automatically erased or anonymized after a maximum of 14 days.

6. Transfer to Installation Partners (§14)

If you order products requiring professional measurement, delivery, or installation, we transfer necessary customer data—specifically your full name, address, and telephone number—to our designated external installation partner.
This transfer takes place strictly for the purpose of scheduling appointments and carrying out installation services pursuant to Art. 6 (1) (b) GDPR (fulfillment of contract). Our installation partners are bound to handle your data confidentially and exclusively for the agreed services.

7. Named Data Processors & Transfers to Third Countries (USA)

We utilize specialized external service providers to deliver our website and services. We have concluded Data Processing Agreements (DPA pursuant to Art. 28 GDPR) with these providers:

  • Hosting & Cloud Infrastructure: Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) — Used for hosting and edge network services.
  • Web Analytics & Advertising: Google Ireland Limited (Google Ads, Analytics) and Meta Platforms Ireland Limited (Meta Pixel).

Third-Country Transfers (USA): Where personal data is processed or transferred to the USA (e.g., Vercel Inc., Google LLC, Meta Platforms Inc.), the transfer is legally grounded on the EU Commission's Adequacy Decision for the EU-U.S. Data Privacy Framework (DPF) pursuant to Art. 45 GDPR or EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR.

8. Consent Banner & Advertising / Tracking

Consent Management Tool (Consent Banner)

Our website uses a consent management banner to obtain, manage, and document legally required consent for storing cookies and implementing tracking technologies on your device.
The legal basis is Art. 6 (1) (c) GDPR (legal obligation) in conjunction with telecommunication laws (e.g., § 25 TDDDG / ePrivacy Directive).
Cookies and Tracking Technologies (e.g., Google Ads, Meta Pixel)

  1. Technically Necessary Cookies: Used on the basis of Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG.
  2. Analytical and Marketing Cookies (Ad Tracking): When running advertising campaigns (Google Ads, Meta Pixel) or analytics, data is processed exclusively on the basis of your explicit consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

You may adjust or revoke your consent at any time via the cookie settings link located in our website footer.