Privacy policy
Version dated: 24.08.2026
1. Data controller
The controller of your personal data is PPHU GALI Michał Galios, based in Kalety (Silesia, Poland), VAT no. 5751479721. Data contact: biuro@gali-group.pl.
2. What data we collect
Data provided in the enquiry form: name, e-mail address, phone number, delivery country and the message together with the window configuration. We also record the IP address and browser information for security and abuse prevention.
3. Purpose and legal basis
We process data to prepare and present an offer and to contact you (Art. 6(1)(b) GDPR — steps prior to entering a contract), to fulfil the order and tax obligations (points b and c), and to defend against claims (point f — legitimate interest).
4. How long we keep data
Enquiries with no further contact are deleted no later than 24 months. Data relating to a concluded contract is kept for the period required by tax law and the limitation period for claims.
5. Who we share data with
Providers necessary to fulfil the order: the joinery manufacturer (order specification), transport companies, our e-mail provider, accountancy office and hosting provider. These entities process data under data-processing agreements.
6. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, port it, and object to processing based on legitimate interest. You may withdraw consent at any time — this does not affect the lawfulness of processing before withdrawal. You may lodge a complaint with the President of the Personal Data Protection Office.
7. Cookies
The site uses only files necessary for it to work, including remembering your chosen language. The configurator stores your project in browser storage (localStorage) so it survives a refresh — that data stays on your device and you can remove it by clearing browser data.
8. Voluntary provision of data
Providing data is voluntary but necessary to prepare an offer and make contact. Without it we cannot respond to your enquiry.