Information from the Administrator on the processing of personal data

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The administrator of your personal data is Firma Produkcyjno-Usługowo-Handlowa STAL-MET Przemysław Cygal with its registered office in Skrzydlna (Skrzydlna 366, 34-625 Skrzydlna), registered in the Central Register and Information on Business Activity of the Republic of Poland, REGON: 121210548, NIP: 7371990727 (hereinafter also referred to as STAL-MET or Administrator). Contact with the Administrator: biurostalmet24@gmail.com.

2. GENERAL INFORMATION - INTRODUCTION

In the light of data protection regulations, STAL-MET is the controller of your personal data. This means that all your personal data obtained in connection with the conclusion of a contract or during its duration should be used by us in a safe manner, in accordance with the contract and the applicable regulations. Therefore, in order to maintain high standards in the processing of your personal data and trying to take the furthest steps to do so, we would like to provide you with the most important information concerning the processing of personal data obtained in connection with entering into cooperation with STAL-MET.

For our part, we would like to assure you that we have made every effort to ensure that this information complies with EU and national data protection legislation, and in particular that it fully complies with the requirements of the EU Regulation on the protection of the privacy of natural persons with regard to the processing of personal data and on the free movement of such data (‘General Data Protection Regulation’ or ‘GDPR’). If you have any suggestions or concerns regarding the processing of personal data at STAL-MET, please contact us.

3. WHAT IS THIS INFORMATION ABOUT?

This information relates to how we protect and process your personal data. Please read the contents of this document carefully.

4. WHAT PERSONAL CUSTOMER DATA DOES STAL-MET HOLD?

4.1 STAL-MET may come into possession of different categories of Customers' personal data, depending on the purposes of the processing.

4.2 When entering into a contract with you, we require your name (in the case of natural persons) or the designation of your company and your place of residence or the location of your registered office. The information we require also includes personal data such as your e-mail address, contact number and VAT number. These are data without which we cannot proceed to provide services to you (the contract will not be concluded). In addition, we may also ask for optional data such as your postal address and delivery/assembly address.

5. HOW DOES STAL- MET OBTAIN/COLLECT YOUR PERSONAL DATA?

5.1 Personal data processed by STAL-MET are obtained directly from you during the conclusion of the contract and during its execution.

6. FOR WHAT PURPOSE AND ON WHAT BASIS DOES STAL- MET USE YOUR PERSONAL DATA?

6.1 According to Article 6 of the RODO, STAL-MET only collects personal data if there is a clear legal basis for processing it. The following grounds may exist to justify the collection of your personal data:

● the processing is necessary for the performance of the contract or to take steps requested by the prospective customer prior to entering into the contract (legal basis: performance of the contract, Article 6.(1)(b) RODO);

● STAL-MET has a clear and legitimate interest in processing your personal data in connection with its business, except where such interests are subordinated to the interests relating to the fundamental rights and freedoms of the data subject and justifying the protection of personal data (legal basis: legitimate interest of STAL-MET, Art. 6. para. 1. lit. f) RODO);

● processing is necessary for the performance of a legal obligation to which STAL-MET is subject (legal basis: performance of a legal obligation, Art. 6. para. 1. lit. c) RODO;

● processing is necessary for the protection of your vital interests (legal basis: Article 6. para. 1. lit. d) RODO);

● you have given your explicit and voluntary consent to the processing of your personal data (Art. 6. para. 1. lit. a) RODO);

6.2 Your personal data obtained at the conclusion of the contract and during its duration STAL-MET uses for the following purposes:

1) the conclusion and performance of the contract between us and you - for the duration of the contract and after its termination (legal basis: performance of the contract, Article 6.(1)(b) RODO);

2) the performance of STAL-MET's legal obligations, e.g. issuing and storing invoices and accounting documents - for the period in which we perform the legal obligations and for the period in which regulations require us to store certain data, e.g. for tax purposes (legal basis: performance of a legal obligation, art. 6. par. 1. lit. c) or the period in which we may suffer the legal consequences of failing to perform the obligation (legal basis: STAL-MET's legitimate interest, art. 6. par. 1. lit. f) RODO);

3) to detect and prevent fraud - for the duration of the contract (legal basis: performance of the contract art. 6. par. 1. lit. b) RODO), and thereafter for the period after which claims arising from the contract become time-barred, and in the event of STAL-MET pursuing claims or notifying authorities - for the duration of such proceedings (legal basis: STAL-MET's legitimate interest, art. 6. par. 1. lit. f) RODO);

4) to establish, defend and pursue claims - for the period after which claims arising from the contract become time-barred (legal basis: legitimate interest of STAL-MET, Art. 6. par. 1. f) RODO);

5) the creation of analyses, statistics, studies, surveys, compilations for the internal needs of STAL-MET and for the needs of STAL-MET customers - for the duration of the contract and then for the period after which the claims arising from the contract become time-barred (legal basis: performance of the contract, art. 6. paragraph 1. lit. b) RODO) and the legitimate interest of STAL-MET, art. 6. paragraph 1. lit. f) RODO);

6) direct marketing - for the duration of the contract (legitimate interest of STAL-MET, art. 6. par. 1. lit. f) RODO);

7. HOW LONG WILL YOUR PERSONAL DATA BE PROCESSED?

7.1 STAL-MET will retain your personal data for as long as required by applicable law or for as long as it is necessary to process the personal data for the purposes set out in this document.

7.2 Once processing has ceased, your personal data and copies of documents containing that data will be anonymised or deleted from any electronic devices, while paper copies will be destroyed.

8. TO WHOM WILL YOUR PERSONAL DATA BE MADE AVAILABLE?

8.1 STAL-MET will not share your personal data with third parties unless:

● the data is processed by an external entity on the basis of a written data entrustment agreement; we provide personal data to entities cooperating with us and other trusted companies or persons who process it for STAL-MET in accordance with our instructions and Information Security Policy and with all appropriate measures to protect the confidentiality and security of the information; the entities processing on our behalf involved in the performance of our activities include:

a) entities operating our ICT systems and entities providing us with tools to collect and store personal data;

b) subcontractors supporting us in the performance of the services and products we offer;

d) entities providing us with consultancy, advisory services, legal, tax, accounting assistance and other entities acting on our instructions

● there are legal reasons: We will be obliged to share personal data if required to do so by law, in particular in connection with litigation or at the request of administrative and governmental authorities - to the extent defined by these authorities;

8.2 STAL-MET will ensure that the transfer of personal data to a third country located outside the European Economic Area is carried out in compliance with the requirements of the Personal Data Protection Regulation and with an adequate level of information security. The data subject may, at any time, request information on the extent of the personal data processed by these entities, as well as obtain a list of the entities to which the personal data have been disclosed by sending a request to the following email address:

biurostalmet24@gmail.com

8.3 Entities located in third countries will ensure security protection of personal data at a level not lower than the level of security applied by STAL-MET and will be bound by appropriate confidentiality agreements.

9. HOW DO WE ENSURE THE SECURITY OF YOUR PERSONAL DATA?

9.1 We make every effort to protect your personal data from unauthorised access, unauthorised modification, disclosure and destruction of information held by STAL-MET. In particular:

● we control our methods of collecting, storing and processing information, including physical security measures, to protect against unauthorised access to personal data;

● we only grant access to your personal data to those employees, contractors and representatives of STAL-MET who need to have access to it in order to process it for STAL-MET's purposes and who are contractually obliged to maintain strict confidentiality and who, in the event of non-compliance with these obligations, are subject to strict liability as provided for by applicable legislation.

10. ARE YOUR PERSONAL DATA SUBJECT TO AUTOMATED DECISION-MAKING, INCLUDING PROFILING?

10.1 Your personal data is not subject to automated decision-making, including profiling.

11. HOW CAN YOU MANAGE YOUR PERSONAL DATA? WHAT RIGHTS DO YOU HAVE?

11.1 Commonly applicable data protection legislation imposes a number of obligations on STAL-MET as a data controller to enable you to exercise your rights, including:

● the right to access the data we collect, i.e. the right to know and be informed about the purposes for which we process your personal data, the recipients of your personal data, to know what data we process and the right to obtain a copy of that data. We are committed to ensuring that you have easy access to the personal data processed by STAL-MET. Therefore, if you would like to obtain information regarding the personal data we process, please send a request to view your personal data to the following email address: biurostalmet24@gmail.com. In response, we will inform you of the scope of the personal data processed by STAL-MET concerning your.

● the right to rectification, i.e. to correct the personal data processed by us, to complete incomplete data or to update it. If your personal data processed by STAL-MET is incorrect, incomplete or outdated please contact us at: biurostalmet24@gmail.com. We will do our best to quickly make the appropriate modification, update it or remove inaccuracies.

● the right to erasure, i.e. the right to request the immediate deletion of your personal data processed unjustifiably or used by us on our website or social media profiles; However, please note that we will not be able to delete all data concerning you. Some data - due to legitimate business or legal purposes of STAL-MET - we will have to retain. We will notify you in each case whether the personal data covered by your request has been deleted and, if not, we will inform you of the reasons why we cannot comply with your request.

● the right to restrict their processing, i.e. to temporarily delete your data from our databases or to stop any operations on your personal data, e.g. if you question the correctness of the data processed by us (the restriction occurs for the period of time that STAL-MET verifies the correctness of the data) or if you have lodged an objection to the processing (the restriction occurs until the legitimacy of the objection is verified)

● the right to data portability to another controller;

12. THE RIGHT TO OBJECT - WHAT IS THIS? - WHAT IS THIS?

12.1 Independently of the rights listed in section 11 of this notice, you also have the right to object at any time to the processing of your data for direct marketing purposes. Once we have accepted your request to this effect sent to the following email address: biurostalmet24@gmail.com we will not use your personal data for direct marketing purposes.

12.2 In specific situations, you may object at any time to the processing of your personal data if the basis for the use of your data is the legitimate interest of STAL-MET or the public interest. In this case, once we have considered your request, we will no longer be able to process the objected data on this basis unless we can demonstrate that there are:

● valid legitimate grounds for processing which are deemed by law to override your interests, rights and freedoms.

● grounds for the establishment, investigation and defence of claims.

13. CONSENT - AS A BASIS FOR PROCESSING YOUR PERSONAL DATA

Where the processing of your personal data does not involve the performance of a contract, the fulfilment of a legal obligation or does not constitute our legitimate interest, STAL-MET may ask you to give your consent to certain uses of your personal data. You may withdraw such consent at any time by sending us a notification to this effect. However, the withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

14. COMPLAINT

You may also exercise your right to make a complaint about our use of your personal data. To do so, please send an email with details of your complaint to biurostalmet24@gmail.com. We will promptly investigate your complaint and respond to you. Individuals also have the right to lodge a complaint with the President of the Data Protection Authority. For more information on individuals' rights and how to lodge a complaint with the Data Protection Authority, details of how to lodge a complaint, please visit www.giodo.gov.pl.

15. HOW TO CONTACT STAL-MET?

For more information on how STAL-MET processes and uses your personal data, please visit the stalmet24.pl website and contact us by e-mail at biurostalmet24@gmail.com or by using the contact form on the website.