Personal data processing notice

How SteelProfil sp. z o.o. processes personal data

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we provide the following information.

The controller of your personal data is SteelProfil sp. z o.o., 06-114 Dzierżenin 34 E, Poland (the “Controller”). The company is registered in the National Court Register, 14th Commercial Division in Warsaw, under number 0000343080. VAT number: PL 5311664644.

You can contact the Controller by post at SteelProfil sp. z o.o., 06-114 Dzierżenin, Poland, or by email at [email protected].

We process applicants’ personal data with their consent to carry out recruitment. Providing your data is voluntary, but you cannot take part in recruitment without it. To carry out recruitment, we need your first name, surname, home address and details of your education and experience. We keep this data for up to 6 months, or for up to 24 months if you consent to its use in future recruitment.

We process your data so that we can communicate with you. The legal basis is the Controller’s legitimate interest in communicating with you, establishing a relationship where appropriate and providing the information you need. We process your first name, surname, email address, telephone number, postal address and any other information you give us. Providing your data is voluntary, but without it communication may be difficult or impossible.

For requests for advice or information and for company newsletter subscriptions, we keep the data until you ask us to erase your data and the contents of your enquiries from our database, or for as long as necessary for the legitimate interests of the Controller or a third party. For complaints, we keep the data until the complaint is resolved or until the warranty period for the product purchased or complained about ends.

We process personal data to enter into or perform a contract, or both. We process the data of contracting parties and the people they designate, including their employees and associates, to enter into or perform a contract, or on the basis of the Controller’s legitimate interest in communicating with the contracting party and performing the contract.

We process first name, surname, email address, telephone number, place of work, job title, business address, Polish tax identification number (NIP), business registry number (REGON) and personal identification number (PESEL). In some cases we also process identity card or passport details. If we are entering into a contract with you as an individual, the data is necessary to enter into or perform the contract. If you represent a legal entity, providing your data is optional but enables us to contact you.

We keep the data for the term of the contract and for the period necessary for the parties to pursue claims arising from it. We keep it for at least the period required by law, or for as long as necessary for the legitimate interests of the Controller or a third party.

We process visitors’ data to identify and receive them on our premises and to protect people and property. The legal basis is the Controller’s legitimate interest in receiving visitors and ensuring security. We process visitors’ images captured by video surveillance, first names and surnames. We keep surveillance images for up to 3 months and the remaining data for up to 2 years.

We process personal data to communicate with people taking part in SteelProfil sp. z o.o. marketing activities, such as promotions and purchase-related competitions. The legal basis is the Controller’s legitimate interest in communicating with participants, establishing a relationship where appropriate and providing the information they need, or the competition participant’s consent. We process first name, surname, email address, telephone number, postal address and other information you provide as a participant. Providing your data is voluntary, but without it the activity may be difficult or impossible to carry out.

We keep the data until the promotion or competition ends, or for as long as necessary for the legitimate interests of the Controller or a third party.

We may share data with entities and authorities authorised by law to process it. We may also share it with other companies in the SteelProfil group, providers of technical and organisational services (such as IT service providers), and providers of legal and advisory services. These entities process the data under a contract with the Controller and in accordance with its instructions.

We do not use automated processing of personal data to make decisions, including through profiling.

You have the right to:

• ask the Controller for access to your personal data;
• ask the Controller to correct your personal data;
• ask the Controller to erase your personal data;
• ask the Controller to restrict the processing of your personal data;
• object to the processing of your personal data;
• data portability;
• withdraw your consent, without affecting the lawfulness of processing based on consent before its withdrawal;
• lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office in Poland.

If we received your personal data from someone other than you, it came from our contracting parties, social media, the internet or other publicly available sources.

The company’s rules on security, data protection and the processing of personal data are available at its registered office.