Privacy Policy

§1 General Provisions

The administrator of personal data of users of the website located under the domain www.stalflex.pl is Stalflex Sp. z o.o., with its registered office in Tomaszów Mazowiecki (registered office and delivery address: ul. Piaskowa 134A, 97-200 Tomaszów Mazowiecki), entered in the Register of Entrepreneurs of the National Court Register under the number KRS 0000537685; District Court in Łódź, XX Economic Division of the National Court Register; share capital: PLN 1,270,000.00; NIP: 7732475752; REGON: 360667640 (hereinafter referred to as the “Administrator”).

The Administrator can be contacted via email at: bok@stalflex.pl and by phone at: +48 575 777 254.

This Privacy Policy sets out the rules for the processing of personal data collected by the Administrator through the website and in connection with the performance of agreements concluded outside of it. This policy aims to ensure the security of personal data and the privacy of users.

The Administrator reserves the right to make changes to the Privacy Policy in the event of changes in the law, the development of internet technologies, or changes in the way services are provided by the Administrator. The amended Policy will be published on the website, and in the case of significant changes, users will be informed via email.

§2 Scope and Purposes of Personal Data Processing

Users' personal data is processed in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act, and other applicable legal provisions. The Administrator ensures that data processing is carried out in accordance with the principles of legality, fairness, transparency, and confidentiality.

Scope of processed personal data:

Identification data: name, surname, home address, phone number, email address.
Contact data: phone number, email address.
Transaction data: order information, delivery address, bank account number.
Business data: company name, NIP, REGON (for entrepreneurs).

Purposes of personal data processing:

Execution of sales contracts: Personal data is processed for the purpose of concluding and performing sales contracts, including the fulfillment of orders, delivery of goods, and handling complaints.
Handling inquiries and customer contact: Data is processed to respond to inquiries sent via contact forms and to provide ongoing customer service.
Compliance with legal obligations: The Administrator processes personal data to fulfill legal obligations arising from legal provisions, including accounting and tax obligations.
Direct marketing: With the user's consent, personal data may be processed for the purpose of sending commercial information, promotions, and offers tailored to the user's preferences.
Statistical analyses: Data may be processed for conducting analyses and statistics that help improve the functioning of the website and the services provided.
Establishing, pursuing, or defending claims: Data may be processed for establishing, pursuing, or defending against claims arising from the execution of a contract.

Data retention period:

Personal data is stored for the period necessary to achieve the purposes for which it was collected, or for the time specified by law. Data processed based on consent is stored until the consent is withdrawn.

§3 Users' Rights

Users whose data is processed by the Administrator have the following rights:

Right of access to personal data: The user has the right to obtain information about what data is being processed, for what purpose, and by whom.
Right to rectification of data: The user has the right to correct their data if it is incorrect or outdated.
Right to deletion of data: The user may request the deletion of their data if it is no longer necessary for the purposes for which it was collected, or if they have withdrawn their consent for its processing.
Right to restrict processing: The user may request the restriction of the processing of their data in certain cases, e.g., when they question its accuracy.
Right to data portability: The user has the right to receive their data in a format that allows it to be transferred to another controller.
Right to object: The user has the right to object to the processing of data for direct marketing purposes or other legitimate interests of the Administrator.
Right to lodge a complaint: The user has the right to lodge a complaint with the supervisory authority responsible for data protection if they believe that their data is being processed unlawfully.

In order to exercise their rights, users may contact the Administrator using the contact details provided in §1. The Administrator will provide a response without undue delay, no later than within one month of receiving the request.

§4 Security of Personal Data

The Administrator takes appropriate technical and organizational measures to ensure the security of personal data, protecting it against unauthorized access, loss, damage, or destruction.

The website uses secure data transmission (SSL) encryption protocols to protect data transmitted over the internet.

Personal data is stored in databases secured with passwords and only accessible to authorized persons.

In the event of a personal data breach, the Administrator will take all necessary steps to mitigate its consequences and inform the relevant supervisory authority and affected users, if required by law.

§5 Cookies

The website uses cookies to enhance the user experience, for statistical purposes, and to tailor content to user preferences.

Cookies are small text files stored on the user's device when visiting the website. They do not contain personal data and do not allow the identification of the user.

Users can manage cookie settings through their browser, including blocking or deleting cookies. Blocking cookies may result in the website not functioning properly.

The website uses the following types of cookies:

Necessary cookies: Essential for the proper functioning of the website, allowing the use of basic functions such as navigation.
Performance cookies: Collect information about how users interact with the website, helping to improve its operation.
Functional cookies: Allow the website to remember user settings and preferences, such as language or region selection.
Targeting cookies: Used to tailor advertisements and content to user preferences.

Third-party services may also use cookies through the website, for example, for analytical purposes. These cookies are subject to the privacy policies of the respective third parties.

Users can find more information about cookies and how to manage them in the help section of their browser.

§6 Final Provisions

The Privacy Policy is effective as of the date of publication on the website. The current version of the Privacy Policy is available on the website under the link "Privacy Policy."

In matters not covered by this Policy, the relevant provisions of Polish law apply.

In case of any discrepancies between the Privacy Policy and the user's rights under applicable law, the provisions of the applicable law shall prevail.