Privacy Policy

1. Personal Data Controller

The Controller of your personal data is:

FAU – Jacek Krajewski
27R Cieślewskich Street
03-017 Warsaw, Poland
VAT No.: 952-186-28-26

You may contact us:

• by post: 27R Cieślewskich Street, 03-017 Warsaw, Poland,
• by telephone: +48 601 222 373
• by e-mail: info@ww2vw.com

2. Categories of Personal Data

Depending on the services you use, we may process the following personal data:

• first and last name,
• company name,
• VAT number or other tax identification number, where applicable,
• company registration details, where applicable,
• billing address,
• shipping address,
• e-mail address,
• telephone number,
• order history,
• quotation history,
• invoice information,
• shipping information,
• customer account login information,
• encrypted password information.

Providing personal data is voluntary. However, some information is necessary to create a customer account, prepare a quotation, process an order, issue an invoice, arrange shipping or respond to an inquiry. Required fields are marked accordingly.

We do not store customers’ bank account numbers in our customer database. However, payment information, including the payer’s bank account number, may be visible in the Controller’s bank transaction history and processed by the bank in accordance with applicable banking, accounting and tax regulations.

3. Purposes and Legal Basis of Processing

Your personal data may be processed for the following purposes:

• creating and maintaining a customer account,
• preparing quotations,
• processing and fulfilling orders,
• issuing invoices and accounting documents,
• processing and confirming payments,
• arranging shipment and delivery,
• communicating regarding quotations, orders and deliveries,
• providing customer support before and after the sale,
• handling warranty claims, complaints and returns,
• ensuring the security and proper operation of the website,
• preventing fraud and misuse,
• establishing, pursuing or defending legal claims,
• sending newsletters and marketing information where consent has been given,
• fulfilling legal, tax and accounting obligations.

The legal bases for processing personal data are:

• Article 6(1)(b) GDPR – processing necessary to take steps at the customer’s request before entering into a contract and to perform a contract,
• Article 6(1)(c) GDPR – processing necessary to comply with legal obligations, including tax and accounting obligations,
• Article 6(1)(f) GDPR – the legitimate interests of the Controller, including website security, fraud prevention, customer account management and the establishment or defence of legal claims,
• Article 6(1)(a) GDPR – consent, where consent is required, including for newsletters or optional marketing cookies.

4. Customer Accounts

Customers may create an account on our website to simplify the ordering process and access information related to their purchases.

A customer account may contain:

• personal and company details,
• billing and shipping addresses,
• quotations,
• orders and order status,
• invoices and related documents,
• shipping and delivery information,
• account preferences.

The customer’s e-mail address may be used as the account login and for account management, security notifications and password reset messages.

Passwords are not stored in plain text. They are stored only in encrypted, hashed form and cannot be read by the Controller.

5. Recipients of Personal Data

Personal data may be disclosed only where necessary to:

• employees and persons authorised by the Controller,
• website hosting providers,
• IT service providers and website administrators,
• backup and server service providers,
• e-mail service providers,
• payment service providers and banks,
• courier, freight forwarding and postal companies,
• customs agencies and customs authorities, where applicable,
• accounting and tax service providers,
• legal advisers, where necessary,
• public authorities where required by law.

We do not sell or rent personal data to third parties.

6. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected.

• Customer account data is stored until the account is deleted or the customer requests its deletion, unless longer retention is required by law.
• Order, quotation and delivery data is stored for the period necessary to perform the contract and handle warranty, complaint or legal claims.
• Invoices and accounting documents are stored for the period required by applicable tax and accounting regulations.
• Contact form and e-mail inquiries are stored until the inquiry has been resolved and for a reasonable period thereafter where necessary to document the communication.
• Technical and security logs are stored only for the period necessary to ensure website security and diagnose technical problems.

After the applicable retention period expires, personal data will be deleted or anonymised, unless further storage is required by law.

7. Rights of Data Subjects

You have the right to:

• access your personal data,
• obtain a copy of your personal data,
• correct inaccurate or incomplete data,
• request deletion of your personal data,
• request restriction of processing,
• object to processing based on legitimate interests,
• withdraw consent at any time where processing is based on consent,
• request data portability, where applicable,
• lodge a complaint with the President of the Polish Personal Data Protection Office.

Polish Personal Data Protection Office
Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland

To exercise your rights, please contact us at
info@ww2vw.com

8. Technical Data and Server Logs

When you use our website, certain technical information may be collected automatically, including:

• IP address,
• date and time of access,
• requested pages and files,
• browser type and version,
• operating system,
• device information,
• referring website,
• information concerning errors and website operation.

This data is processed to ensure website security, maintain technical functionality, prevent misuse, diagnose errors and compile anonymous statistics.

9. Cookies

Our website uses cookies and similar technologies to ensure its proper operation and improve the user experience.

Cookies may be used for:

• maintaining customer login sessions,
• shopping cart functionality,
• remembering user preferences,
• website security,
• website analytics,
• measuring advertising effectiveness.

Cookies that are strictly necessary for the operation of the website may be used without additional consent. Optional analytical and marketing cookies are used only after the user has given consent, where required by law.

Users may manage or withdraw their cookie consent through the cookie settings available on the website. Cookies may also be managed through the settings of the user’s web browser.

10. Website and Account Security

We implement appropriate technical and organisational measures to protect personal data, including:

• SSL/TLS encrypted connections,
• hashed password storage,
• restricted access to personal data,
• regular software and security updates,
• server and security monitoring,
• periodic backups,
• access controls for authorised personnel.

Customers are responsible for keeping their account password confidential and should inform us immediately if they suspect unauthorised use of their account.

11. Google Analytics

If enabled on our website, we use Google Analytics 4 to understand how visitors use the website and to improve its performance.

Google Analytics may process information including:

• IP address, subject to available privacy settings,
• device and browser information,
• visited pages,
• session duration,
• website interactions,
• approximate location derived from technical data.

Google Analytics is activated only where permitted by applicable law and, where required, after the user has consented to analytical cookies.

12. Meta Pixel

If enabled on our website, we use Meta Pixel to measure the effectiveness of advertising campaigns on Facebook and Instagram and to understand interactions with our website.

Meta may process information about visits and actions performed on our website in accordance with its own privacy policy. Meta Pixel is activated only where permitted by law and, where required, after the user has consented to marketing cookies.

13. Social Media

Our website may contain links to our profiles on Facebook and Instagram. Clicking such a link opens the relevant external platform.

Personal data processed on Facebook and Instagram is subject to the privacy rules of Meta Platforms. We may also act as a joint controller with Meta for limited statistical information relating to visits to our social media pages.

14. Transfers Outside the European Economic Area

Some service providers, including Google or Meta, may process data outside the European Economic Area.

Where such transfers occur, they are made using appropriate legal safeguards, such as an adequacy decision, the EU-US Data Privacy Framework where applicable, or standard contractual clauses approved by the European Commission.

15. Changes to This Privacy Policy

We may update this Privacy Policy when required by changes in law, website functionality, service providers or the way personal data is processed.

The current version of this Privacy Policy will always be available on
www.ww2vw.com

Last updated: July 2026