Privacy Policy

This privacy policy sets out the manner in which VIN-KON S.A. processes the personal data of users of the vinkon.pl website (hereinafter referred to as the “Website”), including persons visiting the Website, persons using contact forms, persons submitting commercial inquiries, representatives of contractors, potential contractors, suppliers, recipients and business partners.

The privacy policy also concerns the use of cookies and similar technologies on the Website, including files necessary for the operation of the website, files used to remember age confirmation, as well as analytical, functional or marketing files.

The Website is informational, promotional, contact-oriented and image-building in nature. The Website is not an online store; it is not possible to make online payments or conclude sales agreements through it.

The Website may contain content available to all users and content available only after meeting additional conditions, in particular after confirming that the user is of legal age.

The controller of personal data is VIN-KON S.A., with its registered office in Konin, ul. Dąbrowskiego 35, 62-500 Konin, entered in the register of entrepreneurs of the National Court Register under KRS number 0000137693, NIP 6650001036, REGON 310288490, hereinafter referred to as the “Company” or the “Controller”.

The Controller may be contacted:
a) in writing: VIN-KON S.A., ul. Dąbrowskiego 35, 62-500 Konin;
b) by email: vinkon@vinkon.pl;
c) by telephone: +48 63 2429311;
d) via the contact form available on the Website.

This Privacy Policy applies to the processing of personal data in connection with the use of the Website, in particular in connection with:
a) browsing publicly available content;
b) using content available after age confirmation;
c) using the contact form;
d) submitting commercial, quotation, product or organizational inquiries;
e) corresponding with the Company;
f) subscribing to the newsletter;
g) handling submissions, inquiries, complaints or claims concerning the operation of the Website;
h) ensuring the security of the Website;
i) conducting statistics, analytics and marketing activities, if the user has given the required consent or there is another appropriate legal basis.

This Policy does not apply to websites, services or tools of third parties to which links provided on the Website may lead. After accessing an external website, the user should read the privacy policy applicable to that website.

The Website is not intended for the online sale of products. Through the Website, the user cannot conclude a sales agreement, place a binding order, make a payment or create a customer account.

If a user submits via the Website an inquiry concerning products, availability, commercial cooperation, distribution, logistics, product documentation or other matters related to the Company’s operations, such inquiry is of a contact and informational nature. It does not constitute an order and does not automatically lead to the conclusion of an agreement.

Any commercial cooperation, sale, delivery, negotiations, price arrangements, payment terms, transaction documentation and order fulfillment take place outside the Website, on the basis of individual communication with the Company, separate offers, agreements, confirmations or other commercial documents.

Depending on how the Website is used, the Administrator may process data of various categories of users.

An individual user is a natural person using the Website for informational, contact, educational or other purposes not directly related to representing an entrepreneur or institution.

An institutional user is an entrepreneur, legal person, organizational unit or natural person acting on behalf of such an entity, in particular a contractor, potential contractor, distributor, wholesaler, shop, representative of a retail chain, representative of the food service industry, supplier, recipient, business partner or person interested in commercial cooperation with the Company.

A contact person is a natural person contacting the Company on their own behalf or on behalf of another entity, in particular as an employee, associate, proxy, member of a body, sales representative or person responsible for purchasing, sales, logistics, quality, marketing or another area of cooperation.

During ordinary use of the Website, i.e. without completing forms or sending messages, the Administrator may process technical data transmitted automatically by the user’s browser or device. In particular, this may include:
a) the device’s IP address;
b) the date and time of accessing the website;
c) the address of the subpage visited;
d) information about the web browser;
e) information about the operating system;
f) the address of the website from which the user accessed the Website;
g) information about errors and technical events;
h) identifiers of cookies or similar technologies.

This data is processed to ensure the proper functioning of the Website, maintain security, diagnose errors, protect against abuse, conduct basic statistics and administer the Website.

The legal basis for processing this data is the legitimate interest of the Controller consisting in ensuring the operation, security, stability and proper administration of the Website.

If a user uses the contact form, sends an e-mail, contacts the Company by telephone or otherwise submits an inquiry to the Company, the Controller may process the data necessary to handle this communication, in particular:
a) first name and surname;
b) e-mail address;
c) telephone number;
d) name of the company or institution;
e) position or function, if provided;
f) message content;
g) data contained in attachments, if sent;
h) correspondence history.

This data is processed for the purpose of handling the inquiry, providing a response, conducting correspondence, providing information about products, activities or cooperation, identifying the contact person, as well as defending against claims or pursuing claims, if necessary.

The legal basis for processing the data is the legitimate interest of the Controller consisting in communicating with persons contacting the Company, handling inquiries and documenting the course of contact. If the contact is aimed at concluding an agreement outside the Website, the legal basis for processing may also be taking steps prior to entering into an agreement or performing an agreement. If the data is processed in connection with obligations arising from legal provisions, the legal basis for processing is compliance with a legal obligation incumbent on the Controller.

In the case of inquiries submitted by institutional users, potential contractors, suppliers, recipients, distributors or other entities interested in cooperation, the Controller may process in particular:
a) contact person’s data;
b) data of the represented entity;
c) business e-mail address;
d) business telephone number;
e) position or function;
f) entity registration data, including NIP, REGON or KRS;
g) registered office address, correspondence address or place of business;
h) information about the type of business activity;
i) information about interest in specific products, packaging, quantities, logistics or commercial terms;
j) information concerning required documents, permits or authorizations, if relevant to the cooperation in question;
k) history of contacts and commercial arrangements.

This data is processed for the purpose of handling inquiries, preparing responses, providing information about the offer, verifying the contractor, determining the terms of potential cooperation, conducting negotiations, entering into and performing an agreement outside the Website, settlements, handling complaints, and pursuing claims or defending against claims.

In the case of persons representing contractors or potential contractors, the basis for processing is the legitimate interest of the Controller, consisting in conducting business activities, maintaining business relations, communicating with contractors, verifying the authorizations of persons acting on behalf of the contractor, and documenting commercial arrangements.

Some content on the Website may be available exclusively to persons who are 18 years of age or older. This applies in particular to content relating to alcoholic products or other content whose availability the Company restricts due to legal regulations, the nature of the products or the principles of responsible communication.

In order to enable access to such content, the Controller may process information confirming that the user is of legal age, the date or year of birth, if required, as well as technical information enabling the user’s choice to be remembered during a given session or for a specified period of time.

This data is processed for the purpose of restricting access to specific content by minors, ensuring that the Website operates in compliance with legal regulations, and protecting the Company’s legitimate interests. The basis for processing is the legitimate interest of the Controller, consisting in making content available responsibly and restricting access to content intended exclusively for adults.

If age verification is stored using a cookie or similar technology, the user receives appropriate information as part of the cookie mechanism. To the extent required by law, such technology is used when the user has given consent to it or when it is necessary to provide the requested service.

If the user subscribes to the newsletter or consents to receiving commercial information, the Controller may process the data necessary to conduct such communication, in particular the email address, name, company name, communication preferences and information about the consents given.

The data is processed for the purpose of sending the newsletter, information about products, news, events, the offer, the Company’s activities, commercial cooperation or other content related to the Company’s activities.

The basis for processing the data is the user’s consent. The user may withdraw consent at any time by using the link in the message, contacting the Controller or in another manner indicated in the communication. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

If marketing communication is directed to representatives of current contractors as part of an existing business relationship, the Controller may also process data on the basis of a legitimate interest consisting in maintaining business relationships and informing about the offer related to previous cooperation, taking into account the provisions concerning electronic communications.

In the event of a complaint concerning the operation of the Website, a submission, complaint or other request, the Controller may process the data provided in the submission and data related to its handling. This may include, in particular, identification data, contact details, data of the represented entity, a description of the matter, documents, correspondence and technical information related to the submission.

The data is processed for the purpose of handling the submission, providing a response, taking explanatory action, demonstrating how the matter was resolved, and pursuing claims or defending against claims.

The basis for processing is compliance with legal obligations, where applicable, and the legitimate interest of the Controller consisting in handling submissions, ensuring the proper operation of the Website and securing claims.

Complaints concerning specific sales or delivery agreements, product quality, payments, settlements or business cooperation may be handled outside the Website, in accordance with separate arrangements, agreements, general terms and conditions of sale or transaction documents.

If the Website contains links to the Company’s social media profiles or enables the use of social media plugins, the user should remember that the operators of these services may process personal data according to their own rules.

If the user contacts the Company via social media, comments on content, sends messages or interacts with the Company’s profile, the Controller may process the data visible on the relevant service and the data provided in the message. This data is processed for the purpose of conducting communication, handling inquiries, promoting the Company’s activities, building relationships with recipients and protecting against abuse.

Detailed information on data processing by social media operators can be found in the privacy documents applied by those entities.

The Website may use cookies and similar technologies. Cookies are small files saved on or read from the user’s device in connection with the use of the Website.

The following categories of cookies may be used on the Website:
a) necessary cookies — required for the proper operation of the Website, session handling, security, forms or other basic functions;
b) functional cookies — enabling the user’s settings to be remembered, such as language preferences, interface choices or age confirmation;
c) analytical cookies — used to create statistics concerning the use of the Website, analyse visits, measure the popularity of subpages and improve the operation of the service;
d) marketing cookies — used to conduct marketing activities, measure campaign effectiveness, personalize content or link user activity with advertising tools;
e) third-party cookies — originating from providers of tools used by the Administrator, in particular analytics tools, maps, video players, marketing systems or systems supporting the operation of the Website.

Necessary cookies may be used without the user’s consent if they are necessary to ensure the operation of the Website or a function explicitly requested by the user. Other cookies are used after obtaining the user’s consent if such consent is required by law.

The user may manage their consents using the mechanism available on the Website, as well as through their web browser settings. Restricting or blocking certain cookies may affect the operation of selected Website features, in particular forms, age confirmation retention, language preferences or security mechanisms.

The Administrator processes personal data only when there is an appropriate legal basis. Depending on the situation, this may be:
a) the consent of the data subject — in particular in the case of a newsletter, certain cookies, marketing communications or other activities based on consent;
b) performance of a contract or taking steps prior to entering into a contract — in particular when the contact or inquiry is aimed at entering into a contract outside the Website;
c) compliance with a legal obligation incumbent on the Administrator — in particular with regard to taxes, accounting, documentation, responding to requests from authorized authorities or other obligations arising from legal provisions;
d) the legitimate interest of the Administrator — in particular conducting correspondence, handling inquiries, maintaining relationships, ensuring the security of the Website, keeping statistics, protecting against abuse, pursuing claims and defending against claims.

Personal data may be disclosed to entities that support the Administrator in operating the Website and conducting business activities. These may include, in particular:
a) hosting and IT infrastructure providers;
b) email service providers;
c) contact form system providers;
d) analytics and marketing tool providers;
e) entities providing maintenance, IT and security services;
f) accounting firms, auditors, tax advisors and legal advisors;
g) banks, payment operators or financial institutions, if they participate in settlements outside the Website;
h) transport, logistics and courier companies, if this is necessary to carry out cooperation outside the Website;
i) entities authorised under applicable law, in particular courts, public administration authorities, law enforcement authorities or tax authorities.

Entities processing data on behalf of the Controller process it on the basis of appropriate agreements and exclusively in accordance with the Controller’s instructions, unless applicable law provides otherwise.

As a rule, the Controller strives to ensure that users’ personal data is processed within the territory of the European Economic Area.

If, in connection with the use of IT, analytical, marketing, hosting or other service providers, data is transferred outside the European Economic Area, the Controller will ensure an appropriate legal basis for such transfer, in particular a European Commission decision confirming an adequate level of protection, standard contractual clauses or another mechanism provided for by personal data protection regulations.

Personal data is stored for the period necessary to achieve the purpose for which it was collected, and thereafter for the period required by law or justified by the need to secure claims.

In particular:
a) Technical data and server logs may be stored for the period necessary to administer the Website, ensure security and detect abuse, usually no longer than 12 months, unless longer storage is necessary in connection with a security incident or claims.
b) Data from the contact form is stored for the duration of handling the enquiry, and thereafter for the period necessary to demonstrate the course of communication, usually no longer than 5 years from the conclusion of the matter.
c) Data concerning commercial enquiries and business relations is stored for the duration of discussions, cooperation or negotiations, and thereafter for the limitation period of any potential claims.
d) Data concerning contracts, invoices and accounting documents created outside the Website is stored for the period required by tax and accounting regulations.
e) Data processed on the basis of consent is stored until the consent is withdrawn, unless there is another legal basis for further processing.
f) Data concerning complaints, reports and claims is stored for the duration of handling the matter, and thereafter for the limitation period of claims.
g) Data related to age verification is stored for the period resulting from the technical settings of the relevant function, in particular for the duration of the session or the validity period of the relevant cookie.

After the relevant period has expired, the data is deleted, anonymised or archived to the extent required by law.

Data subjects have the rights set out in data protection regulations, in particular:
a) the right to access data;
b) the right to receive a copy of the data;
c) the right to rectify data;
d) the right to erase data;
e) the right to restrict processing;
f) the right to data portability;
g) the right to object to the processing of data based on the Administrator’s legitimate interest;
h) the right to withdraw consent at any time if the processing is carried out on the basis of consent;
i) the right to lodge a complaint with the President of the Personal Data Protection Office.

To exercise these rights, you may contact the Administrator using the contact details indicated in this Privacy Policy.

The Administrator may request additional information enabling confirmation of the identity of the person submitting the request if this is necessary to protect the data from being disclosed to an unauthorised person.

Providing data during ordinary browsing of the Website is not required, except for technical data necessary to connect to the Website and ensure its proper operation.

Providing data in the contact form is voluntary, but necessary to send a message and receive a response.

Providing data in a commercial enquiry is voluntary, but may be necessary to provide a response, identify the represented entity, verify the nature of the enquiry or initiate further discussions outside the Website.

Providing data for the purpose of ordering the newsletter is voluntary. However, failure to provide the data will make it impossible to receive the newsletter.

Age verification is voluntary, but failure to verify age may prevent access to content intended exclusively for adults.

The Controller does not make decisions concerning users based solely on automated processing of data that would produce legal effects concerning them or similarly significantly affect them.

The Controller may use basic statistical or marketing analytics if the user has given the required consent to the relevant cookies or similar technologies. Such activities may involve analysing how the Website is used, the popularity of subpages, traffic sources, campaign effectiveness or interest in specific content, but they are not used to make decisions producing legal effects concerning the user.

The Controller applies technical and organisational measures aimed at protecting personal data against unauthorised access, loss, destruction, alteration, disclosure or other unlawful processing.

These measures may include, in particular, access control to systems, authorisations for persons processing data, IT infrastructure security, backups, transmission encryption, monitoring of technical events, software updates and agreements with entities processing data on behalf of the Controller.

The User should also take care of the security of their data, in particular by using up-to-date software, avoiding the transmission of unnecessary personal data and not providing in forms data that is not needed to handle the matter.

The Controller may amend the Privacy Policy, in particular in the event of changes to the law, changes to the Website’s functions, implementation of new tools, changes to forms, the newsletter, the cookie system, analytical or marketing tools, as well as changes to the way data is processed.

The current version of the Privacy Policy is published on the Website. If the change is significant for persons who maintain an ongoing contact relationship with the Company or subscribe to the newsletter, the Controller may also inform them of the change electronically.

For matters relating to the protection of personal data, exercising the rights of data subjects, cookies, the newsletter or other privacy-related issues, the Controller may be contacted:

VIN-KON S.A.
ul. Dąbrowskiego 35
62-500 Konin
email: vinkon@vinkon.pl
tel.: +48 63 2429311

This privacy policy is effective as of June 15, 2026.