Privacy and Cookie Policy - Salzgitter

Privacy and Cookie Policy

Rules Governing the Processing of Personal Data

Privacy and Cookie Policy

This document is a description of the Privacy Policy of Salzgitter Mannesmann Stahlhandel Sp. z o.o., ul. Poznańka 41, 62-400 Słupca. It defines the rules, the way of processing and using data and information from Clients, Service Providers, and Users of websites. The Company has implemented technical and organisational measures to ensure the security of personal data processing, in accordance with the requirements of GDPR.

Personal Data Controller

Your personal data is controlled by Salzgitter Mannesmann Stahlhandel Sp. z o.o. ul. Poznańska 41, 62-400 Słupca, entered in the Register of Entrepreneurs kept by the District Court in Poznań, 22nd Commercial Division of the National Court Register under KRS number 0000076516, NIP 6671532402, REGON: 311011046. You may contact the Controller with regard to the processing of your personal data by traditional mail to the address indicated above, or by e-mail: rodo@salzgitter.pl.

The Controller processes your personal data to the following extent and for the following purposes:

Clients / Service Providers

type of data

name/first and last name, address, NIP number, REGON number, KRS number, representative,
e-mail address, telephone number, vehicle numbers (applicable to Service Providers)

processing objectives

  • conclusion, implementation, and contact for the proper
    implementation of the Agreement, pursuant to point (b) of Article 6(1) of GDPR;

  • compliance with the obligations of the Personal Data Controller
    under the law, including keeping accounts, documentation archiving,
    handling complaints and grievances, pursuant to point (c) of Article 6(1) of GDPR;

  • exercise of the legitimate interests of the Personal Data Controller,
    such as defending itself against possible claims or pursuing any claims;

  • verification of payment credibility, analytical and statistical needs,
    pursuant to Article point (f) of Article 6(1) of GDPR;

  • marketing activities using electronic means of communication, which
    only take place based on consent obtained, pursuant to point (a)
    of Article 6(1) of GDPR.

period for which the personal data will be stored

  • for the term of the concluded Agreement, and after that period until
    the date of expiry of the limitation period for claims under the concluded Agreement;

  • personal data recorded in the accounting records will be kept for period indicated
    in the applicable laws, including tax regulations;

  • if the processing is based on the Controller’s legitimate interest,
    the personal data
    will be processed no longer than until an objection is made;

  • personal data processed based on consent will be stored until such consent is withdrawn.

Employees and Associates
of Clients/Service Providers

type of data

  • first and last name, gender, contact details (such as business e-mail address, telephone
    and fax numbers, function, position), ID document number
    (for Employees / Service Providers’ Associates).

processing objectives

  • exercise of the legitimate interests of the Personal Data Controller in connection
    with the performance of the Agreement between the two Parties
    (point (f) of Article 6(1) of GDPR).

period for which the personal data will be stored

  • personal data will be processed no longer than until an objection is made;

  • personal data recorded in the accounting records will be kept for a period indicated
    in the applicable laws, including tax regulations;

  • if the processing is based on the Controller’s legitimate interest, the personal data
    will be processed no longer than until an objection is made;

Website Users

type of data

  • first and last name, gender, address, NIP number, e-mail address, telephone numbers

processing objectives

  • exercise of the legitimate interests of the Personal Data Controller,
    such as analytical
    and statistical purposes, on the basis of point (f) of Article 6(1) of GDPR;

  • proper use of https://www.salzgitter.pl, https://salzgiterstahlhandel.pl and the mobile
    application Salzgitter PL using electronic means of communication, providing that these
    activities take place only on the basis of consents obtained,
    pursuant to point (a) of Article 6(1) of GDPR.

period for which the personal data will be stored

  • if the processing is based on the Controller’s legitimate interest,
    the personal data will be processed no longer than until an objection is made;

  • personal data processed based on consent will be stored until such
    consent is withdrawn.

Newsletter recipients

type of data

  • first and last name, gender, telephone number

processing objectives

  • exercise of the legitimate interests of the Controller, i.e. for the purpose of marketing
    activities, including sending a newsletter, on the basis of point (f) of Article 6(1) of GDPR;

period for which the personal data will be stored

  • personal data will be processed no longer than until an objection is made.

Categories of recipients

The Personal Data Controller is entitled to transfer your personal data to third parties for the purpose and to the extent necessary for the proper and due performance of concluded agreements, operation of websites, and mobile application, i.e.: entities supporting the Controller in its activity; postal, courier, transport providers, legal and advisory providers, security and cleaning service providers, IT service providers (e.g. development and maintenance of IT systems and Internet services), entities pursuing a payment activity (banks, financial institutions), and State Authorities.

Rights of data subjects

Subject to the limitations of GDPR and other legal provisions, you have the right to request access to your personal data, to rectify, delete, or restrict the processing, to transfer your data, to object to the processing, as well as the right to withdraw your consent at any time, if the processing is based on your consent.Furthermore, we would like to inform you that you have the right to lodge a complaint with the supervisory authority, if you believe that the processing of your personal data will violate the rules of GDPR.Your personal data will not be subject to an automated decision-making process, including profiling, and therefore will have no legal effect.

Transfer of personal data to a third country / international organisation

Personal data will not be transferred to third countries / international organisations.

Voluntary or mandatory provision of personal data

Except in cases where the provision of personal data is an obligation under the law, the provision of personal data is voluntary, but may be necessary for the purposes indicated above.

Processing of personal data on the website

1. This Privacy Policy applies to the personal data of persons using websites operated at the following addresses: www.salzgitter.pl/, www.salzgitterstahlhandel.pl hereinafter referred to as the “Website”.

2. With regard to the use of the Website by the User, the Personal Data Controller will collect data to the extent necessary to provide the offered services, as well as information about the activity of the User on the Website. The protection of private information concerning the Users of our Website is of the utmost importance to us, and we make every effort to ensure the highest security in the use of these services.

3. The Controller will exercise special care that all personal data is processed in accordance with the purpose for which it has been collected and used, in accordance with the scope of authorisations (consents) and areas of processing permitted by law. The Controller will observe the rules resulting from the applicable provisions of law, in particular: the Act on the Protection of Personal Data of 10 May 2018 (Journal of Laws of 2018, item 1000), the Act on Providing Services by Electronic Means of 18 July 2002 (Journal of Laws of 2016, No. 0, item 1030, as amended), and the Act on the Telecommunications Law of 16 July 2004 (Journal of Laws of 2016, No. 0, item 1489, as amended).

4. The Website collects information voluntarily provided by the Users. In the case of data processing on the basis of the consent of the persons using the Website, the consent is given on the basis of an explicit statement by the data subject, including by ticking the checkbox. In addition, the Website may store information about the connection parameters, such as IP address, timestamp, and store cookies in end-use devices.

5. You may also use the Website without providing your personal data. Each time you access the pages of the Website, the server stores only server logs, such as the name of a requested file, an IP address, a date, and the time of a request, the amount of data sent, and the Internet service provider submitting the request (access data) and documents the request of the Website web page.

6. The Controller allows contacting it by means of an electronic contact form. Making the inquiry requires the provision of personal data which will enable the Controller to contact the User and answer the inquiry. The provision of data is voluntary, but necessary in order to process the inquiry, and failure to provide data results in a failure to respond.

7. As the Controller of the fanpage run on Facebook, creating such a web page, the Company allows Facebook to save cookies on the computer or on any other device of the person visiting its fanpage. The creation of a fanpage on Facebook is connected with the Controller’s actions consisting in setting the parameters for the management or promotion of its activities, which affects the processing of personal data for the purposes of statistics produced on the basis of the number of visitors to the fanpage. Using the filters provided by Facebook, the fanpage controller may determine the criteria for these statistics and thus determine the purposes and rules for data processing. The statistics on users are provided only to the Controller of the fanpage in an anonymous form, which does not change the fact that the compilation of these statistics is based on the prior collection of information using cookies, installed by Facebook on the computers or other devices of visitors to this web page, and on the processing of personal data of these persons for statistical purposes. For more information on Facebook’s data processing, please read its privacy policy (http://www.facebook.com/about/privacy/).

8. As the Controller of the account on the YouTube channel, the Company collects data from subscribers: e-mail address for sending information. The data is processed no longer than until the withdrawal of consent to the processing of personal data. Any playback of a video recording embedded in YouTube allows Google LLC to use cookies related to YouTube services and store them on the computer or any other device of the person playing the recording. For more information on Google’s data processing, please read its privacy policy (https://policies.google.com/privacy?hl=pl&gl=pl#intro). The account controller processes the personal data of Users visiting YouTube channel, other than subscribers. This data is processed only in connection with the account management, for the purpose of pursuing the Controller’s legitimate interests, including for statistical purposes and promotion of various events, products or services.

9. The Website contains links to websites of other service providers. The Website features the following plug-ins:www.facebook.com/SalzgitterPoland/, www.youtube.com/channel/UCk_BjMcPw3Ymy_46hxt0MVw/, www.linkedin.com/company/salzgitterpolandThe plug-ins establish a direct connection between the browser and the servers of service providers. If the button is activated, your browser can establish a direct connection to the servers of a given service provider. If the User is logged in to a service provider’s account, the service provider may combine the User’s browsing behaviour with other information. Even if the User does not have an account on a given website, the website may receive and store the User’s IP address and information about the browser and operating system used. Information on the scope and purpose of collecting, processing, and using the data by the websites and information on privacy settings can be found in the data protection guidelines published by each website.

10. The personal data of persons visiting the Website is stored for a period not longer than it is necessary for proper use of the Website or performance of the agreement. After this period the data will be deleted from the Website, unless the processing is:

– necessary to pursue claims arising from the performance of the agreement;
– necessary for the purpose of market research, as well as to examine the behaviour and preferences of the Users, but only with their consent.

11. Persons visiting the Website have the right to access the content of their personal data, to correct it, request completion, updates, corrections, temporary or permanent suspension of its processing or deletion, if it is incomplete, outdated, untrue, or has been collected in violation of the Act or is no longer necessary for the purpose for which it has been collected, as well as to withdraw at any time their consent for processing personal data for marketing purposes.

12. The Website collects information voluntarily provided by the Website’s users. The Website may store information about the connection parameters, such as IP address, timestamp, and store cookies in end-use devices.

13. Consent to the processing of personal data for marketing purposes may be withdrawn at any time by sending a relevant statement to an e-mail address: rodo@salzgitter.pl

14. A person visiting the Website should take precautions not to disclose his or her personal data to third parties, while using the website and when leaving it.

15. The Website uses cookies for statistical purposes, as well as to adjust the Website to the individual preferences of Clients and persons using the Website, including improvement of the Website’s operation. This serves to protect the Controller’s legitimate interest in personalising the presentation of the services provided by the Controller.

16. Cookies are IT data, in particular text files, which are stored in an end-use device of the Website’s User and are designed to use the Website’s pages. Cookies usually contain the name of the website from which they originate, the time they have been stored on an end-use device and a unique number.

17. The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User’s end-use device until the User logs out, leaves the website, or turns off the software (web browser). Persistent cookies are stored in the User’s end-use device for the time specified in the parameters of cookie files or until they are deleted by the User.

18. We ask for your voluntary consent to the processing of cookies by storing information or accessing information already stored in your telecommunications end-use devices. The above consent is given by using the button containing a statement of consent to the processing of cookies or by confirming that you have read its terms and conditions. This consent can be withdrawn at any time. We process cookies pursuant to Article 173 of the Act on the Telecommunications Law of 16 July 2004 (Journal of Laws of 2016, No. 0, item 1489, as amended).

19. In many cases, the software used to browse the web pages (web browser) by default allows storing cookies in the User’s end-use device. Website users may change their cookie settings at any time. These settings may be changed particularly in such a way as to block the automatic handling of cookies in the settings of your web browser or to inform about their placement in the device of the Website User. Detailed information about the possibilities and ways of handling cookies is available in the settings of the software (web browser). The Website operator informs that restrictions on the use of cookies may affect some of the functionalities available on the Website’s pages.

20. The website uses Google Analytics, Internet Analytics by Google Inc. (“Google”). Google Analytics uses Cookies. The information obtained by Cookies on the use of the website (including IP address) will be transmitted to a Google server in the US and stored there. This information helps carrying out an analysis of the use of the website, provided to the owner of the website and to offer other services related to the use of the Internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information for Google. Google will not link your IP address to any other data held by Google. By using this website you agree to the processing of your personal data by Google for the purpose and in the manner described above.

21. Using the Website involves sending requests to the server where the web page is stored. Each such request is stored in the server logs, which, among others, include IP address, information on the date and time of the server, browser, and operating system. Logs are recorded and stored on the server. The data recorded in logs is not used to identify a particular person using the Website, but is used only to keep statistics and is auxiliary for controlling the Website. The data contained in the logs is not transferred to other entities, except for persons authorised to control the server.

22. The Controller reserves the right to make changes to this Privacy Policy.