1. Controller
The controller of your personal data is Steellogy — Dominika Smurzyńska, ul. Króla Kazimierza Wielkiego 33, 25-633 Kielce, Poland, VAT ID (NIP): PL 9592000954, REGON: 369184244 (the "Controller", "we").
Contact: info@steellogy.com, +48 732 059 424.
2. What data we process and why
We operate in the B2B sector; we process personal data mainly as business contact data of people acting for our customers and suppliers.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering an enquiry sent through the RFQ form or by e-mail | company, name, e-mail, phone, country, content of the message | art. 6(1)(b) — steps prior to a contract; art. 6(1)(f) — legitimate interest in handling business correspondence |
| Preparing quotations, handling orders, deliveries and complaints | contact data, order and correspondence history | art. 6(1)(b); art. 6(1)(c) — accounting and tax obligations |
| Establishing, exercising or defending legal claims | data related to a given contract or dispute | art. 6(1)(f) |
| Technical operation and security of the website | server logs (IP address, request time, user agent) | art. 6(1)(f) |
Providing data in the RFQ form is voluntary, but without it we cannot answer your enquiry.
3. Recipients of data
We share data only to the extent necessary to operate our business, with: our IT providers — website hosting (Vercel Inc.) and the form delivery service (Web3Forms) which transmits form submissions to our e-mail; our e-mail provider (Google Workspace); carriers and freight forwarders handling deliveries; accounting and, where needed, legal advisors. Some of these providers may process data outside the EEA; in such cases transfers rely on the EU–US Data Privacy Framework or EU standard contractual clauses.
We do not sell personal data and we do not use it for marketing profiling.
4. Retention
Enquiry correspondence that does not lead to a contract — up to 2 years from the last contact. Contract, order and complaint documentation — for the duration of the contract and then for the periods required by tax and accounting law (as a rule 5 years from the end of the tax year) or until the limitation of claims. Server logs — up to 12 months.
5. Your rights
You have the right to access your data, rectify it, erase it, restrict its processing, data portability, and to object to processing based on legitimate interest. To exercise these rights, write to info@steellogy.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, Poland) or your local supervisory authority.
6. Cookies and similar technologies
The website does not use tracking or marketing cookies. Details are described in the Cookies policy.
7. Changes
We may update this policy, in particular when the scope of our services or providers changes. The current version is always published on this page, with its effective date.