This website operating at the domain https://steelbo.global/ (hereinafter collectively: the “Portal”) is operated by STEELBO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Ludowa 61F, 58-304 Wałbrzych, NIP 8992904268, KRS 0000915571 (hereinafter: the “Company”).
The Privacy Policy sets out the rules for:
- processing of personal data by the Company,
- storing information about users on the Company’s server in the form of logs.
Personal data may be collected from users via the Portal, including in the following ways:
- through voluntarily provided information in forms (including, among others, contact forms),
- through recording of web server logs by the Company.
Principles of Personal Data Processing
Respecting the right to privacy of individuals whose data has been obtained by the Company in connection with its business activities, we inform you that this data is processed in accordance with national and European law and under conditions ensuring its security.
In order to ensure transparency of its data processing activities, the Company presents the principles of personal data protection established under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”):
- The controller of personal data is STEELBO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Ludowa 61F, 58-304 Wałbrzych;
- The Controller has/has not appointed a Data Protection Officer/person responsible for personal data protection. The Data Protection Officer can be contacted by phone at +48 690 524 907 or by email at info@steelbo.global regarding any matter related to the processing of personal data.
- Within the scope of its business activities, the Controller processes personal data for the following purposes depending on the specific circumstances:
| Purpose of processing | Legal basis and data retention period |
| If you contact us — handling correspondence and inquiries from contractors and non-contractors, including via email and web forms. | Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Art. 6(1)(f) GDPR — pursuit of the legitimate interest of the Controller consisting in responding to messages and inquiries. Personal data will be stored for the time needed to prepare and provide a response. No longer than 3 years. |
| If you are an employee or associate of our contractor or supplier and your data was shared with us in connection with the performance of a contract. | Art. 6(1)(f) GDPR — pursuit of the legitimate interest of the Controller consisting in contract administration. The source of the data is your employer. Personal data will be stored for the duration of the contract and, after its expiry, until the limitation period for claims arising therefrom expires — generally 3 years, maximum 6 years. |
| If we are involved in a dispute or are enforcing receivables. | Art. 6(1)(f) GDPR — pursuit of the legitimate interest of the Controller consisting in asserting or defending against claims. Personal data will be stored for the duration of proceedings regarding the claims pursued, i.e. until a final and binding decision is reached, and in the case of enforcement proceedings, until the claims are finally satisfied. |
| If you have entered into a contract with us or are preparing to do so — entering into and performance of a contract with a customer or contractor. | Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Personal data will be stored for the duration of the contract and, after its expiry, until the limitation period for claims arising therefrom expires — generally 3 years, maximum 6 years. |
| If you visit our social media and interact with us, e.g. by sending a message or leaving a comment. | Art. 6(1)(f) GDPR — pursuit of the legitimate interest of the Controller consisting in communicating with users of social media platforms. Personal data will be stored for the duration of the period during which you follow our social media, and in the case of a question being asked — for the time needed to provide a response, and then until the limitation period expires. |
The recipients of your personal data, i.e. entities to which the Company may transfer personal data, may include:
- state authorities or other entities authorized to access data to the extent and for the purpose specified in specific provisions,
- Poczta Polska and courier companies,
- law firms,
- banks where settlements need to be made,
- entities providing the Controller with services supporting its operations, including IT service providers, auditing entities, entities providing accounting services, entities supporting the recruitment process, entities providing marketing services — whereby such entities process data on the basis of a data processing agreement and solely in accordance with the Controller’s instructions.
Every individual whose data is processed in situations provided for by law has the following rights:
- the right to access their data and receive a copy thereof,
- the right to rectify (correct) their data,
- the right to erasure of personal data,
- the right to restriction of processing,
- the right to data portability,
- the right to object,
- the right to withdraw consent to data processing, whereby such withdrawal does not affect processing carried out prior to the withdrawal.
Every individual whose data is processed in situations provided for by law also has the right to lodge a complaint with the President of the Personal Data Protection Office. More information on lodging a complaint is available at: https://uodo.gov.pl/pl/526/2464.
The Controller does not transfer personal data outside the European Economic Area.
Providing personal data is generally voluntary; however, it is necessary for carrying out certain processing activities, including: receiving a response to a question sent to the Controller, and entering into and performing a contract with the Controller. Refusal to provide such data makes it impossible to carry out the relevant activity. Where certain data is processed on the basis of consent, providing data is always voluntary.
Your data will not be processed in an automated manner, including in the form of profiling.
Server Logs
Information about certain activities on the Portal is recorded in the form of logs on the Company’s server. Data collected in this way is used solely for the purpose of administering the Portal.
Data collected in the manner described in this section does not allow for the identification of specific individuals.
Browsed content is identified by URL addresses. It is also possible to record information about the user’s browser, IP address, and the date and time of access.
