1. Controller
The controller of your personal data is Steellogy — Dominika Smurzyńska, ul. Króla Kazimierza Wielkiego 33, 25-633 Kielce, Poland, VAT ID (NIP): PL 9592000954, REGON: 369184244 (the "Controller", "we").
Contact: info@steellogy.com, +48 732 059 424.
2. What data we process and why
We operate in the B2B sector and mainly process the business contact data of people acting on behalf of our customers and suppliers.
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering an enquiry sent through the RFQ form or by e-mail | company, name, e-mail, phone, country, message, company type, reason for enquiry, part-reference basis, RFQ reference, selected industry, CTA source and the same-origin page from which the form was opened | art. 6(1)(b) — steps prior to a contract; art. 6(1)(f) — legitimate interest in handling business correspondence |
| Preparing quotations, handling orders, deliveries and complaints | contact data, order and correspondence history | art. 6(1)(b); art. 6(1)(c) — accounting and tax obligations |
| Establishing, exercising or defending legal claims | data related to a given contract or dispute | art. 6(1)(f) |
| Technical operation and security of the website | server logs (IP address, request time, user agent) | art. 6(1)(f) |
| Aggregated website statistics through Vercel Web Analytics | page path, filtered query parameters, referrer, approximate country or region, device type, operating system and browser; Web Analytics uses no cookies and does not associate page views with an identified person | art. 6(1)(f) — legitimate interest in understanding website use and improving its content |
Providing data in the RFQ form is voluntary, but without it we cannot answer your enquiry.
To attribute a submitted RFQ to the page where the visit began, the site uses a data-minimising, first-party sessionStorage entry named steellogy-session-entry. It stores only the path of the first page opened in the current browser tab, without an identifier or query parameters. The entry is deleted when the tab is closed and is sent to Web3Forms only with a submitted RFQ form.
3. Recipients of data
We share data only to the extent necessary to operate our business with the following recipients: our IT providers — website hosting (Vercel Inc.) and the form service (Web3Forms, operated by Web3Creative), which receives, validates, stores and forwards form submissions to our e-mail; our e-mail provider (Google Workspace); carriers and freight forwarders handling deliveries; our accounting service provider and, where needed, legal advisers.
Web3Forms may process submission data through infrastructure and sub-processors outside the EEA. Its Data Processing Agreement is incorporated into the service terms and applies to our use of the service; where required, international transfers are protected by the EU standard contractual clauses. Other providers may also process data outside the EEA; the EU–US Data Privacy Framework or EU standard contractual clauses apply where appropriate.
We do not sell personal data and we do not use it for marketing profiling.
4. Voice assistant (AI)
The website offers an optional voice assistant based on artificial intelligence. It is provided on our behalf by ElevenLabs Inc. (USA) and is clearly marked as an AI assistant. It starts only when you activate it, and speaking with it requires granting your browser access to the microphone — you can withdraw that access at any time in the browser.
When you use the assistant, your voice and the content of the conversation are processed by ElevenLabs to run the conversation; conversations may be recorded and transcribed so that we can follow up on enquiries and monitor quality. Legal basis: art. 6(1)(f) GDPR — our legitimate interest in providing first-line assistance to business visitors. Transfers outside the EEA rely on the EU–US Data Privacy Framework or EU standard contractual clauses. Please do not share confidential or sensitive information in voice conversations — for technical documentation use the RFQ form or e-mail. Conversation records are kept no longer than enquiry correspondence (section 5).
5. Retention
Web3Forms may temporarily retain RFQ submissions according to the retention setting enabled for the Steellogy account and its Data Processing Agreement and service policy. We limit provider-side retention to what is necessary to deliver and protect the submission; technical or security logs and residual backup copies may follow separate provider periods. Enquiry correspondence delivered to our e-mail that does not lead to a contract — up to 2 years from the last contact. Contract, order and complaint documentation — for the duration of the contract and then for the periods required by tax and accounting law (as a rule 5 years from the end of the tax year) or until the applicable limitation periods expire. Server logs of our website — up to 12 months.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. To exercise these rights, write to info@steellogy.com. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warsaw, Poland) or your local supervisory authority.
7. Cookies and similar technologies
The website does not use analytics, tracking or marketing cookies. It uses cookie-free, aggregated Vercel Web Analytics for page-view statistics. Details are described in the Cookies policy.
8. Changes
We may update this policy, in particular when the scope of our services or providers changes. The current version is always published on this page, with its effective date.