Privacy policy

1. Data Controller

The controller of personal data of users of the website www.dekpolsteel.pl (hereinafter referred to as the “Website”) is Dekpol Steel Sp. z o.o., with its registered office in Pinczyn (83-251), ul. Gajowa 31, NIP 592-22-79-622, REGON 385001797, KRS 0000816536, hereinafter referred to as the “Controller” or “We”.

We have designated a contact point for data protection matters. You may contact us:

• By post, addressed to the Controller’s registered office;
• By email, at: rodo@dekpol.pl

2. Purposes and Legal Basis for Processing Personal Data

Personal data obtained via the Website may be processed by the Controller for the following purposes:

Purpose	Legal Basis	Retention Period
Distribution of newsletters containing marketing information regarding Dekpol Steel’s offer	Article 6(1)(a) of the GDPR – based on the User’s consent expressed by checking the appropriate checkbox	Until consent is withdrawn
Responding to inquiries submitted via the contact form or preparing an offer based on the data provided therein	Article 6(1)(a) of the GDPR – based on the User’s consent expressed by submitting the completed form and providing contact details	Until the final effective response is provided
Optimization of website content and marketing communications based on statistical data	Article 6(1)(a) of the GDPR – based on the User’s consent	As specified in the Cookie Policy

3. Right to Withdraw Consent

You may withdraw your consent to the processing of personal data at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to its withdrawal.

Consent may be withdrawn:

• Via the unsubscribe link included in emails sent as part of the newsletter service;
• By sending an email to: rodo@dekpol.pl

With regard to cookies, consent may be withdrawn by adjusting your browser settings.

4. Recipients of Personal Data

Access to personal data is granted to IT service providers to whom the Controller has entrusted data processing.

Additionally, third-party cookies may be installed on users’ devices via the Website, including cookies from entities such as Google Inc. and META Platforms Inc., which may identify users by assigning them unique IDs. Detailed information is available in the Cookie Policy.

5. Data Subject Rights

In accordance with the GDPR, each user of the Website has the following rights:

• Right of access to personal data;
• Right to rectification or completion of personal data;
• Right to erasure of personal data;
• Right to restriction of processing;
• Right to data portability;
• Right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (where processing is based on consent);
• Right to object to processing based on the Controller’s legitimate interests due to the user’s particular situation;
• Right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office — if the user believes that their data is being processed unlawfully.

Procedure for exercising rights:
To exercise any of the above rights, please contact the Data Protection Officer (contact details provided in Section 1 above), providing personal data sufficient to verify your identity.

6. Automated Decision-Making and Profiling

The Controller does not use machine learning mechanisms or other automated technologies to make decisions regarding individuals whose personal data is processed.

We do use tools provided by Google Analytics and Google Ads to optimize remarketing campaigns, which involve profiling. Profiling is based on information about Website users, including product browsing history, location, visit frequency, and duration. Such data is processed only after the user has given prior consent. Detailed information is available in the Cookie Policy.

7. Obligation or Voluntary Nature of Data Provision

Providing personal data is voluntary; however, failure to provide such data may hinder or prevent the use of certain functionalities of the Website.