Privacy Policy

Last updated: July 2026

§1 General Information

This Privacy Policy defines the rules for processing and protecting the personal data of website users. The document is designed to comply with the European Union General Data Protection Regulation (GDPR).

The data controller (administrator) of the website is: Maciej Trznadel Usługi Informatyczne ul. Joachima Lelewela 26/41, 38-400 Krosno, Poland Tax ID (NIP): 6842563014 Contact with the administrator is available exclusively via email at: support@winkreset.com.

§2 Scope, Purpose, and Legal Basis of Data Processing

The website processes only data strictly necessary for order fulfillment, technical support, and legal compliance. We process your data based on the following legal grounds:

• Email address: Used for the automatic delivery of purchased activation keys and customer support communication. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
• Payment and billing data: Processed directly and securely by third-party payment providers (e.g., Stripe, PayPal) for transaction authorization and accounting purposes. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and Compliance with a legal obligation (Art. 6(1)(c) GDPR) regarding tax and accounting laws.

Providing this data is voluntary but necessary to complete the service purchase. Personal data is not processed for automated decision-making or profiling.

§3 Data Retention Period

We store your personal data only as long as necessary:

• Data related to order fulfillment and support is kept until the contract is fully executed and potential claims expire.
• Billing and accounting records are retained for 5 years from the end of the calendar year in which the tax deadline passed, as required by Polish tax law.
• Data collected via tracking cookies (if consented) is retained according to the specific expiration dates of those cookies.

§4 Data Recipients, Security, and International Transfers

User personal data is not sold or shared with unauthorized third parties. We only share necessary data with trusted partners required to finalize transactions (e.g., payment processors). All connections related to payment processing are encrypted and secured in accordance with the PCI DSS standard. We do not store full payment card details on our servers.

International Transfers: Because we use global services like Stripe, PayPal, or Google Analytics, your data might be transferred to servers outside the European Economic Area (EEA), primarily to the USA. Such transfers are secured by legally binding mechanisms, such as standard contractual clauses (SCCs) or relevant adequacy decisions (e.g., EU-US Data Privacy Framework).

§5 Cookies and Analytics

Analytics and Google Tag Manager: The website uses Google Tag Manager (GTM) to manage marketing and analytical tools such as Google Analytics, which helps us understand website traffic and improve user experience. These tools use cookies to collect anonymous data about your visit.

We only activate these tracking scripts after receiving your explicit consent via the website’s cookie banner. Legal basis: User consent (Art. 6(1)(a) GDPR).

Managing Cookies: You can withdraw your consent or manage your preferences at any time by clicking the cookie settings link on our website. Additionally, you can block or delete cookies directly through your web browser settings (e.g., Chrome, Safari, Firefox). Restricting essential cookies may affect website functionality.

§6 User Rights

Under the GDPR, each user has the right to:

• Access their personal data.
• Rectify (correct) inaccurate data.
• Erase data (right to be forgotten), subject to legal retention obligations (e.g., tax laws).
• Restrict or Object to data processing.
• Data Portability (receive a copy of the data).
• Withdraw consent at any time (for analytics/cookies), without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, users should send a formal request to: support@winkreset.com.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority (in Poland: President of the Personal Data Protection Office - PUODO).