Privacy policy

PRIVACY POLICY FKS STAL MIELEC S.A.

SHOP OF STAL MIELEC

1. What is the purpose of the Privacy Policy?

FKS Stal Mielec S.A. (“We” or “Stal“) pays particular attention to protecting the privacy and personal data of those whose personal data it obtains. Our priority is to process your personal data in a secure and lawful manner, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (” RODO“).
In this Privacy Policy (” Privacy Policy“), we inform and explain how we use the personal data we obtain or share with you in connection with the operations of the Mielec Steel Shop.
In the Privacy Policy, you will learn, in particular, what rights you have as a result of us processing your personal data, and how you can exercise these rights.

1. Who is the controller of your personal data? How can you contact us?

The controller of your personal data is FKS Stal Mielec S.A. , address: 1 Solskiego Street, 39-300 Mielec. You can always contact us regarding the processing of your personal data, among others, by post or by sending an e-mail to: sprzedaz@stalmielec.com

1. What are the purposes of processing your data?

Your data will be used by FKS Stal Mielec S.A. in order to maintain your account in the Stali online shop (if you create such an account), to enable you to place orders and fulfil them, to handle these orders and to contact you regarding your orders, to handle your requests, to assess your satisfaction with our products and services, and to inform you about and carry out marketing of Stali’s services and products. Your data, including information about your purchases, will be used to create offers of products and services dedicated to you, as well as for analyses (including statistical and relevant characteristics of the recipients of our services and products) carried out in order to better prepare our offer or information or to ensure more effective outreach to a selected group of recipients (if you create an account in the Steel online shop)
In addition, Stal will process your data in order to establish, assert or defend against possible claims, to fulfil its obligations towards you and to fulfil legal obligations incumbent on Stal, e.g. in the field of taxes, as well as in relation to a matter with which you address us (e.g. a complaint, application, claim, question) or in relation to which we contact you (e.g. to provide you with an answer, to deal with a complaint or a claim).

1. What are the legal bases for processing your data? What is the legitimate interest on the basis of which we process your data?

Steel processes your data on the following legal bases, depending on the circumstances, as it is necessary for:
(1) the performance of a contract to which you are a party – this applies to the maintenance of your account in the Steel online shop (as long as you set up an account in the Steel online shop) as well as the processing of each of the orders you place, including the processing of electronic payments and the delivery of the purchased goods, in accordance with Article 6(1)(b) of the RODO;
(2) to comply with a legal obligation incumbent on Steel – this includes, in particular, obligations arising from legislation setting out consumer rights, tax legislation and accounting legislation, in accordance with Article 6(1)(c) of the DPA;
(3) to direct marketing to you, to which you have given your prior consent, including the preparation and communication of information about activities and offers concerning Steel’s products and services.

(4) purposes arising from legitimate interests pursued by Steel or others, in accordance with Article 6(1)(f) of the RODO – this applies to the following:
a. direct marketing involving the preparation and communication of information about activities and offers relating to Steel’s products and services, as well as, if you set up an account in Steel’s online shop, information and offers prepared specifically for you on the basis of an analysis of your purchase history and other information (e.g. birthday discount offers to be used around your birthday, offers aimed exclusively at you in relation to your specific characteristics e.g. place of residence, gender, age group, etc.), as well as the provision of information and offers to you.
b. Surveying your satisfaction with the services and products Stal provides and with the quality of its customer service;
c. to analyze the activity of Steel’s customers on the website of the Steel web shop in order to better prepare our offer or information or to provide more effective outreach to the selected audience, if you create an account in the Steel web shop and in connection with affiliate marketing carried out by Steel;
d. to respond to your complaint, request, claim, question;
e. establishing and asserting claims or defending against such claims.

1. To whom do we shareyour data?
   Your data may be shared by us with the following entities:
   a. providers of services provided to Steel in the maintenance and operation of the website of the Steel shop,
   b. providers of information systems used in the maintenance of your account or to make purchases from the Stali web shop,
   c. entities processing online payments,
   d. entities processing data in connection with profiling,
   e. entities providing accounting, legal, advisory, auditing, consulting and parcel delivery services, or
   f. agencies carrying out marketing services on behalf of Steel.
   Your data will also be made available to public authorities, including the courts, upon their legitimate request or if they are obliged to do so by law or for the purpose of defending or pursuing claims.
2. Do we transfer your data outside the European Economic Area or to international organisations?
   Your personal data will not be transferred outside the European Economic Area (“EEA”) or to international organisations. In certain cases, in particular when using IT solutions provided using servers that may be located outside the EEA, we may transfer personal data to so-called third countries. The level of protection of personal data outside the EEA differs from that provided by Polish and European law. Accordingly, we only transfer personal data outside the EEA where it is necessary and with an appropriate level of protection for personal data. You have the right to obtain a copy of the standard contractual clauses or other relevant safeguards for the transfer of data outside of the EEA through Steel.
3. For how long will we keep your data?
   We will keep your data for as long as is necessary for us to achieve the purposes for which we process it.
   We will keep your data for:

1. We will process your data for as long as there is a relationship between you and Steel that justifies such processing, in particular for as long as you maintain an active user account in Steel’s online shop or for the period of time necessary to process your order or deal with a complaint or other type of complaint or request.
2. For the pursuit of our legitimate interests, i.e. the establishment and assertion of claims or the defence of claims – for the period of limitation of your claims against us or our claims against you under the law (e.g. the general statute of limitations for business-related claims is 3 years, while the general statute of limitations for consumer claims against us is 6 years; the aforementioned retention periods for personal data may change with changes in generally applicable laws) or the statute of limitations for tax obligations relating to business events (purchase of services or goods) to which you were a party, as well as for the duration of court, arbitration, etc. proceedings relating to such claims.
3. For the purpose of pursuing our legitimate interests, i.e. responding to your question, complaint, request, complaint or suggestion – for the time necessary to respond, generally no longer than 30 days, whereby we may extend this period by the period of limitation of your or our claims under the law, if the processing of such data is necessary for the establishment or assertion of claims, as well as for the defence against such claims, and for the periods of related legal proceedings, arbitration, etc.
4. For the purpose of us complying with our obligations under the law (e.g. under the Accounting Act or tax legislation or product liability legislation) – for the period resulting from such legislation (e.g. for billing purposes, your data will be stored for 5 years counting from the end of the calendar year in which the deadline for payment of tax related to the contract has expired).
5. In the event that you object at any time on grounds relating to your particular situation – to processing relating to your personal data based on our legitimate interests (on the basis of Article 6(1)(f) of the DPA), including profiling, we will cease to process your personal data, unless Steel demonstrates that there are valid legitimate grounds for the processing which override your interests, rights and freedoms or grounds for establishing, asserting or defending claims.

1. What rights do you have?
   As Steel processes your personal data, you have a number of rights as set out below.
   In order to exercise these rights or to obtain further information in this regard, we encourage you to contact us, in particular by email: sprzedaż@stalmielec.com
   If you request Steel to exercise your rights, in case of reasonable doubt about your identity, Steel may request additional information necessary to confirm your identity. Steel will respond to requests without undue delay, possibly within one month of receipt of the request.
   If Steel demonstrates that your requests are manifestly unreasonable or excessive, in particular due to their continuing nature, Steel may:
   a. charge a reasonable fee, taking into account the administrative costs of providing the information, conducting the communication or taking the requested action; or
   b. refuse to act on the request.

Information about yourright of access
You have the right to request access to your personal data, including, in particular, information about whether Stal processes your personal data and the extent of the data held by Stal, the purposes of the processing, the categories of recipients of your data, the intended period of retention of your data, your rights concerning your personal data, and information about the sources of your data obtained by Stal if not collected from you. You also have the right to obtain a copy of your data, with the proviso that obtaining the first copy of your data is free of charge, and that obtaining each subsequent copy may involve the payment of a reasonable fee taking into account the administrative costs of preparing such copy of your data.

Information on the right to request rectification of data
You have the right to request the immediate rectification of inaccurate data or, taking into account the purposes of the processing, the completion of incomplete data.

Information on the right to request erasure (right to be forgotten)
You have the right to request the immediate erasure of your data if one of the following circumstances applies:
a. your personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b. you have made an effective objection to the processing;
c. the personal data has been unlawfully processed;
d. the personal data must be erased in order to comply with a legal obligation;
e. you have withdrawn your consent to the processing of personal data and the personal data was processed on the basis of your consent and there is no other legal basis for the processing;
f. the personal data was collected in connection with the offering of information society services as referred to in Article 8(1) of the DPA.
However, you will not be able to exercise your right to erasure, inter alia, if such data is necessary for the establishment or assertion of claims or the defence against claims.

Information about the right to request the restriction of processing
You have the right to request the restriction of the processing of your data, e.g. when:

1. you question the accuracy of the processing of your personal data by us, in which case you can request a restriction of the processing for a period allowing you to check the accuracy of the data;
2. you consider that the processing of your personal data by us is unlawful, but at the same time you object to the erasure of this data requesting instead the restriction of its use;
3. we no longer need your personal data for the fulfilment of our purposes, but you need them to establish, assert or defend against claims;
4. you have objected to our processing of your personal data on the grounds of your particular situation, in which case you can request a restriction of processing until we have determined whether our legitimate interests in processing the data override the grounds for your objection.

If the processing of your personal data is restricted, we will only be able to store it and, in addition, only use it to establish, assert or defend claims, to protect the rights of another natural or legal person, or for compelling reasons of public interest of the European Union or a Member State. We will only be able to undertake other activities with your consent.

Information on the right to data portability

You have the right to receive in a structured, commonly used, machine-readable format Your personal data that you have provided to Steel and you have the right to send this personal data to another controller without hindrance from Steel if:
a. the processing is carried out on the basis of your consent or on the basis of a contract with you, at the same time
b. the processing is carried out by automated means.
In the situation indicated above, you have at the same time the right to request that the personal data be sent by Steel directly to another controller, insofar as this is technically possible.

Information about your right to object to the processing of your data

You have the right to object at any time – on grounds relating to your particular situation – to the processing of your data where the legal basis for the processing is the legitimate interests of Steel. In this case, you should indicate the particular situation which, in your opinion, justifies the cessation of our processing of your objected data.
As a result of an objection, Steel will cease processing your personal data unless it demonstrates that there are valid legitimate grounds for the processing which override your interests, rights and freedoms or grounds for establishing, pursuing or defending against claims.
If your personal data is processed for the purposes of direct marketing, you may object at any time to such processing, including profiling, without having to demonstrate reasons relating to your particular situation, and Steel shall immediately cease such processing.

Information on the right to withdraw consent

In any case where the processing is based on your consent, you have the right to withdraw it at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

Information about the right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the President of the Office for the Protection of Personal Data if you believe that the processing of personal data concerning you violates the provisions of the RODO.

1. Is the provision of personal data a statutory or contractual requirement or a condition for entering into a contract? What are the possible consequences of not providing data?

You provide all data voluntarily, but some of them are necessary to maintain your account in the Stali online shop (e.g. email address), to make and process orders (data allowing your identification, data necessary for delivery), to issue the relevant tax documents (VAT number), and their failure to do so will prevent these activities from taking place.

1. Information on automated decisions and profiling

In order to carry out marketing activities, Stal uses profiling activities, i.e. it analyses information about you and assesses your purchasing preferences so as to present you with an offer tailored to your characteristics or corresponding – in Stal’s assessment – to your needs and requirements.
In addition, Steel carries out profiling activities monitoring the internet traffic of users of the Steel websites (in particular identifying the websites from which users have accessed the Steel websites) in connection with affiliate marketing carried out by Steel.

1. Social media processing

We also process personal data in connection with our social media activity.
For more information in this regard, please see our pages on the individual sites such as Facebook and Instagram.

1. Links to social media sites

The website contains links to external social media sites (YouTube, Facebook, Twitter, Instagram). The functions assigned to the individual links, in particular the transmission of information and personal data, are only activated when the link is clicked on. The so-called plug-in of the respective social network is then activated and the browser establishes a direct connection to the servers of the social network and the user is redirected to the website of the social network. The provider of the portal will receive information that the user has visited the website of the online shop before entering the website of this portal (even if the user is not registered or logged in to this portal). Such information (including the IP address) will be transmitted directly from the user’s browser to the servers of the social portal (usually located in the United States of America) and stored there. If the user is logged in to the respective portal, this portal will immediately associate the user’s visit to the portal with the user’s account on this portal.

If the user does not want his or her data to be transmitted to the providers of the social networks, he or she should not click on the links of these portals. If you do not want the provider to associate your visit to the portal with your profile, make sure that you log out of the portal beforehand.

For more information on the processing of personal data by individual portals, please visit their websites.

1. Changes to the Privacy Policy

This Privacy Policy is subject to change and updates. If you would like up-to-date information on how we process your data, please visit this page from time to time.

1. Information about cookies

Cookies are text files that are stored on your computer when you visit websites, such as our website.
Information about the cookies we use can be found in a separate document published on the Steel website: www.stalmielec.com/ www.sklep.stalmielec.com
Please note that you can disable the storage of cookies on your computer at any time by changing the settings of your web browser.