Privacy Policy

The purpose of this privacy policy is to explain how we use the personal data collected when you use our website at https://steelwave.pl/ (hereinafter: the “Website”), as well as your rights in connection with this.

Who We Are
The administrator of your personal data is Steel Wave sp. z o.o. (limited liability company) with its registered office in Poznań (60-791), ul. Władysława Reymonta 29 /2, registered in the register of entrepreneurs of the National Court Register under KRS number: 0001025600, whose registration files are kept by the District Court Poznań – Nowe Miasto and Wilda in Poznań, VIII Economic Department of the National Court Register, using Tax Identification Number (NIP): 7792552580, Statistical Number (REGON): 52476033700000, with a share capital of PLN 5,000.00.

Contact
For any additional questions or to exercise your rights, please contact us at our registered office address or via email at: contact@steelwave.pl.

How We Process Your Data
We make every effort to always process your personal data in accordance with applicable regulations, including, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: “GDPR”).

Purposes, Legal Bases, and Retention Period for Personal Data Processing
Your personal data may be processed by us for one or more of the purposes listed below, depending on the relationship you have established with us:

Conclusion and performance of an agreement for the provision of electronic services in the scope of maintaining a Customer account on our Website (Art. 6(1)(b) GDPR), until the account is deleted.
Conclusion and performance of a sales agreement for our products (Art. 6(1)(b) GDPR), until the agreement is fulfilled.
Maintaining ongoing contact in connection with a placed product order, responding to your questions or complaints (Art. 6(1)(f) GDPR), until the order is fulfilled, the query is answered, or the complaint is resolved.
Fulfilling our legal and tax obligations in connection with your product order (Art. 6(1)(c) GDPR), until our obligations cease, no longer than 5 years from the end of the year in which the accounting and tax obligation arose.
Pursuing our rights and defending against potential claims (Art. 6(1)(f) GDPR), no longer than until the claims expire in accordance with applicable regulations.
Sending you commercial information after subscribing to our newsletter (Art. 6(1)(a) GDPR), until you withdraw your consent.
Direct marketing of our products and satisfaction surveys regarding completed purchases, if you were or are our customer (Art. 6(1)(f) GDPR), until you object.
Conducting analyses and statistics related to the use of our Website and ordered products (Art. 6(1)(f) GDPR), until you object.
If we process your personal data based on your consent, you can withdraw such consent at any time by contacting us in any form. After withdrawing consent, we will no longer use or process your personal data, unless we have another legal basis for processing your data. Withdrawal of your consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Is Providing Data Mandatory?
Providing personal data is voluntary, but it may be necessary to subscribe to our newsletter, place an order for our products, create a Customer account on our Website, contact us, or get answers to your questions or complaints. If you do not provide the required data, the fulfillment of the purposes described above may be impossible.

Will Personal Data Be Transferred Outside the European Economic Area?
We may transfer your personal data outside the European Economic Area (hereinafter: “EEA”) only when using information society tools, e.g., to analyze the use of our Website. If we decide to transfer data outside the EEA, this will be done only under the conditions and to the extent permitted by law, and the transfer will occur, in particular, based on appropriate safeguards such as standard contractual clauses, the content of which has been approved by the European Commission. Information about the safeguards used and copies thereof can be obtained by contacting us for this purpose.

Recipients of Personal Data
We may share your personal data with our trusted suppliers, including IT solution providers and communication service providers, legal, accounting, and tax advisors, postal or courier service providers, payment service providers (banks, payment institutions), authorities and courts in connection with activities conducted by or before these authorities or courts.

What Are My Rights?
When we process your personal data, you have the following rights:

Access to the content of your personal data.
Rectification (correction) of personal data if they are inaccurate, and completion of incomplete data.
Erasure of personal data.
Restriction of personal data processing.
Data portability.
Withdrawal of consent to personal data processing at any time without affecting the lawfulness of processing carried out on the basis of consent granted before its withdrawal.
Objection to processing, if the basis for using the data is our legitimate interest – Art. 6(1)(f) GDPR. In such a situation, after considering the objection, we will no longer be able to process the personal data covered by the objection on this basis, unless there are other grounds for processing your data that are considered by law to be overriding your interests, rights, and freedoms, or grounds for establishing, exercising, or defending claims.
Lodging a complaint with the supervisory authority, which in Poland is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).
Nature of the Data Provided
The provision of personal data may be:

Contractual, meaning that in the case of an agreement, providing personal data is voluntary but also a necessary condition for its conclusion and performance. Failure to provide data will result in the inability to conclude and perform the agreement.
Non-contractual, where providing data is voluntary, but not providing them may limit the possibility of using the newsletter or contacting us.
Do We Profile Personal Data?
We do not make decisions based solely on automated processing, including profiling, of personal data.

Cookies
Cookies are small text files that are sent to the user’s device by visited websites. They do not cause any configuration changes to the device.

Our Website may use the following types of cookies:

Session cookies – these are deleted after closing the web browser.
Persistent cookies – these remain on the user’s device and are deleted after their validity period expires or after they are deleted by the user.
Web browsers typically enable cookie handling by default. It is possible to change these settings and completely or partially block cookies, as well as to make the web browser inform about cookies stored on the user’s device.

Cookies usually contain the name of the domain they come from, their storage time on the device, and an assigned value. Below is a table with a detailed description of the cookies used by our Website:

(Please note: The table mentioned in the original text was not provided. If you have the content of the table, please provide it, and I can include it here.)

Changes to the Privacy Policy
We reserve the right to periodically make changes to this Policy.

This Policy, in its current version, has been in effect since April 15, 2024.