PL
EN
WallFlow® (wall-flow.com) and the WallFlow® Care Programme – International version
This Privacy Policy explains how we collect and use your personal data when you use the English-language version of the WallFlow® website and shop at wall-flow.com (the „Shop”), buy a WallFlow® UV wall printer or consumables, parts and accessories, or join the optional WallFlow® Care / WallFlow® Care Plus Extended programme (the „Programme”). It applies to visitors and customers wherever they are located.
You can buy consumables, spare parts and accessories directly in the Shop. You cannot buy a UV wall printer directly in the Shop: you first contact us through the quote request form or the contact form, and we then send you an individual offer.
Capitalised terms not defined in this Policy have the meaning given in the Shop Terms and Conditions and the WallFlow® Care Programme Terms, both available at wall-flow.com.
1. Who we are and how to contact us
The controller of your personal data is LMLP GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, a limited liability company incorporated in Poland, registered office: ul. Szczęsna 26, 02-454 Warsaw, Poland, entered in the Polish National Court Register (KRS) under no. 0001069716, NIP (tax ID): 5223277764, REGON: 526963694, owner of the WallFlow® brand („we”, „us”, „our”).
For any question about how we use your personal data, to exercise your rights or to make a complaint, contact us:
- by email: kontakt@wall-flow.com;
- by post: LMLP GROUP Sp. z o.o., ul. Szczęsna 26, 02-454 Warsaw, Poland;
- using the contact form available on our website (wall-flow.com).
2. Laws that apply and how we protect your data
We are established in Poland, in the European Union. Wherever you live, we process your personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, „GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.
If you live in a country whose own data protection law also applies to us, for example the United Kingdom or Switzerland, we comply with that law as well. Section 8 explains what this means for you.
We use appropriate technical and organisational measures to keep your personal data secure. These include access controls, encrypted connections (HTTPS) and written contracts with our service providers requiring them to protect your data.
3. What we use your data for, our lawful bases and how long we keep it
The table below lists each purpose, the data we use, the lawful basis under Article 6(1) GDPR and how long we keep the data.
| Purpose | Personal data | Lawful basis (GDPR) | How long we keep it |
|---|---|---|---|
| 3.1 Answering a general enquiry sent through the contact form | Name, phone number, email, content of the enquiry | Art. 6(1)(f) legitimate interests – responding to enquiries | Until the correspondence ends, or until you successfully object |
| 3.2 Preparing and sending an individual offer for a WallFlow® printer (quote request form), including a follow-up phone call | Name, email, phone number, company registration or VAT number (optional) | Art. 6(1)(b) steps taken at your request before entering into a contract | Until the quote process ends; if you buy, as in 3.3 |
| 3.3 Entering into and performing a sales contract for a printer | Name / company name, email, phone number, delivery and billing address, VAT or tax number (business customers) | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation (tax and accounting) | Until claims under the contract are time-barred under the applicable law; accounting records for 5 years from the end of the calendar year in which the tax payment deadline expired (Polish tax law), or longer where the law of your country requires |
| 3.4 Selling consumables, parts and accessories in the Shop | Name / company name, email, phone number, delivery and billing address, VAT or tax number (business customers) | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation (tax and accounting) | As in 3.3 |
| 3.5 Sending offers and other marketing information by email | Email address given in the quote request form or contact form | Art. 6(1)(a) consent, given by ticking a checkbox (also the consent required by electronic marketing laws) | Until you withdraw consent (e.g. via the unsubscribe link in any email) |
| 3.6 WallFlow® Care Programme: registration, Inspections and Service Requests | Name / company name, contact details, Device serial number, proof of purchase, photos / videos of the fault, service history | Art. 6(1)(b) contract (Programme participation) | For the whole Protection Period and then until claims relating to the Programme are time-barred |
| 3.7 Handling complaints about goods, the Device or the Programme, including your statutory consumer rights and any warranty | Name, contact details, order / Device details, content of the complaint | Art. 6(1)(b) contract; Art. 6(1)(c) legal obligation (consumer law) | For the duration of the complaint and, where rights are exercised, until related claims are time-barred |
| 3.8 Website analytics, remarketing, targeted advertising and CRM (Google Analytics, Google Ads, Meta Pixel, HubSpot), including profiling for marketing | IP address, device / browser identifiers, approximate location, pages visited and products viewed, form data passed to the CRM | Art. 6(1)(a) consent (cookies); Art. 6(1)(f) legitimate interests (managing customer relationships in the CRM) | Until you withdraw consent or object, or the purpose is achieved |
| 3.9 Buying on instalments or under a lease through a finance partner (where available in your country) | Name / company name, contact details, data the finance partner needs to assess creditworthiness | Art. 6(1)(b) steps before entering into a finance contract | Only for the time needed to pass the application to the partner; the partner then acts as an independent controller |
| 3.10 Online payments | Name, email, transaction data passed to our payment provider | Art. 6(1)(b) contract | As in 3.3 |
| 3.11 Sending service emails about your order, delivery, quote or Programme (e.g. order confirmation, shipping status, Inspection dates) | Name, email address, order / Programme details | Art. 6(1)(b) contract | As long as needed to perform the contract, then as in 3.3 |
| 3.12 Handling your data protection requests and complaints (section 6) | Name, contact details, content of the request or complaint, our reply | Art. 6(1)(c) legal obligation (data protection law) | Until claims relating to the request or complaint are time-barred |
| 3.13 Running our social media profiles (Facebook, Instagram) and replying to comments and messages | Profile name, public profile data, content of comments and messages, statistics provided by the platform | Art. 6(1)(f) legitimate interests – promoting our brand and keeping in touch with our community. For page statistics we are joint controller with Meta Platforms Ireland Limited | Until you object, or the profile or your content is removed |
| 3.14 Establishing, exercising or defending legal claims | Name / company name, contact details, order / Programme details, VAT or tax number | Art. 6(1)(f) legitimate interests | Until the relevant limitation period ends |
| 3.15 Running the Shop securely (server logs) | IP address, server date and time, browser and operating system information | Art. 6(1)(f) legitimate interests – security and proper functioning of the Shop | 90 days |
Do you have to give us your data? Giving data in the contact and quote forms is voluntary, but we cannot reply or send an offer without it. Giving data needed for a contract (3.3, 3.4, 3.6) is a condition of entering into it.
Follow-up phone call (3.2). We normally call everyone who requests a quote, to confirm that the offer sent by email has arrived and to present it. This call is part of handling your request, not a separate marketing call.
Marketing consent (3.5). We do not run a separate newsletter sign-up form. You can consent by ticking a box in the quote request form or the contact form, which reads: „By ticking this box, you give us the green light to send you offers and other interesting marketing information by email. You stay in full control – you can unsubscribe from our messages at any time. You’ll find more details in our friendly privacy policy.” Ticking the box is entirely optional and is not a condition of receiving a reply or an offer.
Profiling (3.8). With your consent we may build a marketing profile based on your activity. This profiling has no legal effect on you and does not similarly significantly affect you. We do not make decisions about you based solely on automated processing.
4. Who we share your data with
We share personal data only with the following recipients, and only as far as needed for the purposes in section 3:
- the hosting provider for wall-flow.com;
- HubSpot Ireland Limited (HubSpot, Inc. group) – CRM and marketing automation;
- Google Ireland Limited (Google LLC group) – Google Analytics and Google Ads;
- Meta Platforms Ireland Limited (Meta Platforms, Inc. group) – Meta Pixel and our Facebook and Instagram profiles;
- PayU S.A. (Poland) and other providers we use to process online payments;
- logistics operators, couriers, freight forwarders and customs agents delivering Devices and goods to your country;
- finance or leasing partners – only for customers who ask to buy on instalments or under a lease;
- subcontractors and technicians carrying out Inspections and repairs under the WallFlow® Care Programme, including local service partners in your country;
- our accounting firm;
- our legal advisers, where needed to handle disputes or claims.
We may also disclose personal data to public authorities, courts, tax or customs authorities where the law, a court order or an administrative decision requires it.
5. International transfers
We store and process your personal data mainly in the European Economic Area (EEA). In two situations it is transferred outside the EEA.
Service providers in the United States. Some of our providers (Google, Meta, HubSpot) belong to groups headquartered in the US. Transfers to US recipients certified under the EU-US Data Privacy Framework rely on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023. Where a recipient is not certified, we use the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914.
Delivering goods and services to your country. If you live outside the EEA, we pass the data needed to deliver your order or provide the Programme to couriers, customs agents and service partners in your country. Where the European Commission has recognised your country as providing adequate protection (for example the United Kingdom, Switzerland, Canada, Japan, South Korea or Israel), we rely on that decision. Otherwise we use standard contractual clauses or, where that is not possible, the transfer is necessary to perform our contract with you (Art. 49(1)(b) GDPR).
You can ask us for a copy of the relevant safeguards using the details in section 1.
6. Your rights and how to complain
You have the right to:
- access your personal data and receive a copy (the first copy is free; we may charge a reasonable fee for further copies);
- rectification of inaccurate or incomplete data;
- erasure in the cases set out in the GDPR, e.g. when the data is no longer needed or you have withdrawn consent;
- restriction of processing in certain situations;
- data portability for data processed on the basis of consent or a contract;
- object to processing based on our legitimate interests, and to object at any time to direct marketing, including profiling for marketing – we will then stop;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise your rights, contact us using the details in section 1. We will respond within one month of receiving your request. We may extend this by up to two further months for complex or numerous requests, and we will tell you if we do. We may ask you to confirm your identity first.
Complaints. If you are unhappy with how we use your data, please contact us first – we will try to resolve the matter quickly. You also have the right to lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or the authority in the EU/EEA country where you live or work. If you live outside the EU/EEA, see section 8.
7. Cookies
The Shop uses cookies and similar technologies placed on your device and read by our systems and by third parties whose services we use (Google, Meta, HubSpot). We use both session and persistent cookies.
| Category | What it does | Your choice |
|---|---|---|
| Strictly necessary | Makes the Shop work (basket, checkout, security, remembering your cookie choices) | Always on; no consent needed |
| Analytics | Statistics on how visitors use the Shop (Google Analytics) | Only with your consent |
| Marketing | Remarketing and targeted ads (Meta Pixel, Google Ads), marketing automation (HubSpot) | Only with your consent |
We place optional cookies only after you agree in the cookie banner. You can change or withdraw your choice at any time in the cookie settings panel on our website. Details of each cookie, its provider and lifetime are shown in that panel. Blocking cookies in your browser may affect how the Shop works.
8. Information for customers in specific countries
United Kingdom
When we process personal data of individuals in the UK, we also comply with the UK GDPR, the Data Protection Act 2018 (as amended by the Data (Use and Access) Act 2025) and the Privacy and Electronic Communications Regulations 2003 (PECR). The purposes and lawful bases in section 3 apply in the same way; where a legal obligation arises under Polish or EU law, we rely under the UK GDPR on our legitimate interest in complying with it.
The UK recognises EEA countries, including Poland, as providing adequate protection, so your data can be transferred to us without further safeguards. Transfers to the US rely on the UK Extension to the EU-US Data Privacy Framework or on the UK International Data Transfer Agreement or Addendum.
You can make a data protection complaint directly to us using the details in section 1. We will acknowledge it within 30 days and deal with it without undue delay. You can also complain to the UK regulator, the Information Commission (ICO): ico.org.uk, helpline 0303 123 1113.
Switzerland
When we process personal data of individuals in Switzerland, we also comply with the Swiss Federal Act on Data Protection (FADP). Switzerland recognises EU countries, including Poland, as providing adequate protection. Transfers to the US rely on the Swiss-US Data Privacy Framework or on standard contractual clauses. You can complain to the Federal Data Protection and Information Commissioner (FDPIC): edoeb.admin.ch.
Other countries
Customers in Norway, Iceland and Liechtenstein are covered by the GDPR in the same way as EU customers. If you live in another country and its law gives you rights beyond those described in this Policy, we will respect them. Contact us using the details in section 1, and you may also contact the data protection authority in your country.
9. Children, changes and final provisions
Our Shop and products are intended for adults and businesses. We do not knowingly collect personal data from children under 16.
We may update this Policy, in particular if the law, our activities or the tools we use change. The current version is always published at wall-flow.com. Where a change is significant, we will also let you know by email or through a notice in the Shop.
Matters not covered by this Policy are governed by the GDPR, Polish data protection law and, where applicable, the data protection law of your country.
This Policy is effective from 1 October 2026.
LMLP GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ – owner of the WallFlow® brand (KRS 0001069716, NIP 5223277764, REGON 526963694, ul. Szczęsna 26, 02-454 Warsaw, Poland)