GENERAL INFORMATION
1. The purpose of the Privacy Policy is to present information regarding the processing of personal data in connection with the activities conducted by STELLMET. Whenever the term:
| STELLMET | this means a company under the name STELLMET spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in Katowice, ul. Jana III Sobieskiego 11/e6, 40-082 Katowice, KRS 0000966521, NIP 6342762727, REGON 241727801. |
| GDPR | this means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation data); |
| Websites | means websites operated by STELLMET. The websites are: stellmet.pl; zlomskup.eu, weglik.eu. |
2. The privacy policy specifies how STELLMET uses personal data of users who visit websites operated by STELLMET, interact with it and use the services available on STELLMET websites. Additionally, the Privacy Policy specifies the rules for collecting personal data and non-personal data in connection with advertising services provided by STELLMET. It also informs you about your rights and how the law protects you.
3. If you have any questions or wish to exercise your privacy rights, please follow the instructions in the Privacy Policy.
WEBSITES STELLMET
4. The privacy policy applies to all STELLMET Websites. This applies to:
1. stellmet.pl;
2. zlomskup.eu;
3. weglik.eu.
5. STELLMET websites may lead (link) to other websites, including websites of entities not related to STELLMET, in particular to social media portals. The rules regarding the processing of personal data on these websites are regulated by their providers.
DATA ADMINISTRATOR
6. The administrator of personal data is STELLMET, i.e. STELLMET spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in Katowice, ul. Jana III Sobieskiego 11/e6, 40-082 Katowice, KRS 0000966521, NIP 6342762727, REGON 241727801.
CONTACT THE PERSONAL DATA ADMINISTRATOR
7. You can contact STELLMET as follows:
1. via the contact form available on the Websites;
2. by e-mail, by sending a message to: biuro@stellmet.pl;
3. by phone, from Monday to Friday (excluding public holidays) from 8:00 a.m. to 4:00 p.m., by calling the number: (+48) 602 744 434 (fee according to the operator’s tariff).
DATA COLLECTION, PURPOSE AND BASIS OF PROCESSING
8. Depending on the form of interaction, STELLMET may collect various data, including personal data.
| Contractors STELLMET | STELLMET collects data in connection with the provision of services, as well as in connection with services provided to STELLMET by STELLMET’s contractors. Data collection concerns current and future STELLMET contractors. |
| This data may include: name, surname, e-mail address, telephone number, tax identification number and other register numbers in which the contractor is listed, business address, bank account number. Depending on the circumstances and the person of the contractor, the scope of data may vary, of which the contractor is informed by STELLMET. | |
| STELLMET processes this data for the purposes of: taking actions at the request of the contractor before concluding the contract (e.g. presenting an offer regarding STELLMET services) (Article 6(1)(b) of the GDPR); conclusion and performance of the contract by STELLMET (Article 6(1)(b) of the GDPR); fulfillment of tax and legal obligations (Article 6(1)(c) of the GDPR); implementation of legally justified interests of STELLMET, including determining, pursuing and defending against possible claims, maintaining ongoing relationships with contractors as part of cooperation, verification of the contractor, as well as making internal settlements (Article 6(1)(f) of the GDPR). | |
| Data is collected directly from STELLMET’s contractors. Providing data is voluntary, but the lack of some of them may result in the inability or refusal to conclude or perform the contract, and in cases provided for by law, also its termination. Data may also be collected using public registers such as the Court and Economic Monitor, the National Court Register or the Central Registration and Information on Business, the Central Register of Beneficial Owners or other domestic and foreign registers relevant to the client or contractor. | |
| The data is stored for a period of three (3) years (from the end of the calendar year in which the data was obtained) counting from the date of execution of the contract or its termination. However, the data contained in the settlement documents are stored for a period of five (5) years (from the end of the calendar year). These periods may be extended in the event of legitimate interests STELLMET, including the determination, investigation and defense against possible claims. | |
| Representatives and staff of contractors | STELLMET collects data in connection with the provision of services, as well as in connection with services provided to STELLMET by STELLMET’s contractors. Data collection concerns current and future representatives and staff of STELLMET contractors. This includes persons who are holders of statutory bodies, commercial proxies and proxies, employees and associates of the contractor taking part in the conclusion and performance of the contract with STELLMET, as well as data of third parties who perform activities for the contractor related to the conclusion and participation in the performance of the contract with STELLMET. (e.g. legal advisors, accountants). |
| This data may include: name, surname, e-mail address, telephone number, tax identification number and other register numbers in which the contractor’s representative or staff is listed, business address, bank account number. For holders of statutory bodies and proxies: PESEL number. Depending on the circumstances and the person of the contractor, the scope of data may vary, of which the contractor is informed by STELLMET. | |
| STELLMET processes this data for the purposes of: contact in connection with the conclusion or performance of a contract with the contractor (Article 6(1)(f) of the GDPR); implementation of legally justified interests of STELLMET, including determining, pursuing and defending against possible claims, maintaining ongoing relationships with contractors as part of cooperation, verification of the contractor, as well as making internal settlements (Article 6(1)(f) of the GDPR); fulfillment of tax and legal obligations (Article 6(1)(c) of the GDPR). | |
| Data is collected directly from data subjects or from other sources, including STELLMET’s contractors. Providing data is voluntary, but the lack of some of them may result in the inability or refusal to conclude or perform the contract, and in cases provided for by law, also its termination. Data may also be collected using public registers such as the Court and Economic Monitor, the National Court Register or the Central Registration and Information on Business, the Central Register of Beneficial Owners or other domestic and foreign registers relevant to the client or contractor. | |
| The data is stored for the period of communication, and thereafter for a period of three (3) years (from the end of the calendar year) counting from the date of implementation of the contract or its termination. However, the data contained in the settlement documents are stored for a period of five (5) years (counting from the end of the calendar year). These periods may be extended in the event of STELLMET’s legitimate interests, including the determination, investigation and defense against possible claims. | |
| Users contacting STELLMET (excluding telephone contacts) | STELLMET collects data in connection with users’ interactions with STELLMET via e-mail, post and via contact forms on the Websites. |
| This data may include: name, surname, e-mail address, telephone number, username (nickname), data contained in the content of the message (if they contain personal data). Depending on the circumstances and the person of the contractor, the scope of data may vary, of which the contractor is informed by STELLMET. | |
| STELLMET processes this data for the purposes of: contacting the user and considering the case reported by the user (Article 6(1)(f) of the GDPR); in some cases of implementation of legally justified interests of STELLMET, including the determination, investigation and defense against possible claims (Article 6(1)(f) of the GDPR). | |
| Data is collected directly from data subjects. Providing data is voluntary, but the lack of some of them may result in the inability to respond or consider the case reported by the user. | |
| The data is stored for the period resulting from the purpose of their processing and taking into account the purpose of the notification. Typically, this period is 12 months. This period may be extended in the event of STELLMET’s legitimate interests, including the determination, investigation and defense against possible claims. | |
| People subscribing to the marketing database (newsletter, telephone database) | STELLMET collects data in connection with users’ subscriptions to advertising newsletters allowing them to receive emails containing STELLMET commercial information. STELLMET also collects data in connection with user registrations in a marketing database containing telephone numbers. |
| This data may include (depending on the database): name, surname, e-mail address or name, surname, telephone number. | |
| STELLMET processes this data for the purposes of: sending emails containing STELLMET commercial information (Article 6(1)(a) of the GDPR); telephone contacts for marketing and sales purposes of STELLMET products and services (Article 6(1)(a) of the GDPR); fulfillment of legal obligations (demonstration of entry into the database) (Article 6(1)(c) of the GDPR); in some cases of implementation of legally justified interests of STELLMET, including the determination, investigation and defense against possible claims (Article 6(1)(f) of the GDPR) | |
| Data is collected directly from data subjects. Providing data is voluntary, but the lack of some of them may result in the inability to send e-mails containing STELLMET commercial information. | |
| The data is stored until consent is withdrawn. After the consent is withdrawn, the data may be processed in the event of the legitimate interests of STELLMET, including the determination, investigation and defense against possible claims, for the period of existence of this interest. | |
| People interacting with the company profile on social media | STELLMET collects data in connection with its company profiles on social media platforms. These platforms include: Facebook (Meta), YouTube, LinkedIn. STELLMET processes personal data of website users who visit the STELLMET profile, website users who follow the profile and website users who publish comments on the content posted there as part of the STELLMET profile or otherwise interact with the STELLMET profile. |
| This data includes: data provided by the user when interacting with the STELLMET profile. Additionally, STELLMET obtains data from the operator of a given website, including data that may include: user ID, name and surname, content of comments published as part of the STELLMET profile. | |
| STELLMET processes this data for the purposes of: maintaining a STELLMET profile within a given website (Article 6(1)(f) of the GDPR); informing about STELLMET’s activities (Article 6(1)(f) of the GDPR); responding to comments published by users of a given website (Article 6(1)(f) of the GDPR); conducting analyzes and statistics regarding the functioning and manner of use of the STELLMET profile by users (Article 6(1)(f) of the GDPR); in some cases of implementation of legally justified interests of STELLMET, including the determination, investigation and defense against possible claims (Article 6(1)(f) of the GDPR (Article 6(1)(f) of the GDPR). | |
| Data is collected directly from data subjects and through the functionalities of a given website. Providing data is voluntary, but the lack of some of them may result in the user’s inability to fully use the functionalities included in the STELLMET profile. | |
| The data is stored for the period set by the given social media platform. | |
| People interacting with STELLMET in connection with recruitment | STELLMET collects data in connection with its recruitment procedures. Data collection concerns current and future STELLMET employees. |
| These data include: data provided during the recruitment process (including data contained in the CV, cover letter or recruitment correspondence). In the event of providing data that is not obliged to be transferred to STELLMET or that STELLMET does not have the right to request its provision, STELLMET considers this as consent to the processing of this data for recruitment purposes, which is voluntary and may be revoked at any time. | |
| STELLMET processes this data for the purposes of: a. performance of obligations arising from labor law provisions related to the employment process, if the intended form of employment is an employment contract (Article 22[1] § 1 points 1-6 of the Labor Code in connection with Article 6(1)(a) .c) GDPR or Art. 22[1] § 1 points 1-3 of the Labor Code in connection with joke. 6 section 1 letter c) GDPR. The basis differs in the case where it is not necessary to obtain the data referred to in Art. 22[1] § 1 points 4-6 of the Labor Code); b. conducting the recruitment process if the intended form of employment is a civil law contract (Article 6(1)(b) of the GDPR); c. checking the candidate’s knowledge, abilities and skills (Article 6(1)(f) of the GDPR); d. in some cases of implementation of legally justified interests of STELLMET, including the determination, investigation and defense against possible claims (Article 6(1)(f) of the GDPR (Article 6(1)(f) of the GDPR). | |
| STELLMET will also process personal data in subsequent recruitment processes, if these persons have consented to it (Article 6(1)(a) of the GDPR). This consent is voluntary and may be revoked at any time. | |
| Data is collected directly from data subjects. Providing data is voluntary, but if you intend to employ someone under an employment contract, failure to provide the data specified in 22[1] § 1 of the Labor Code will result in the inability to consider your candidacy. | |
| The data will be stored for the duration of recruitment for the position to which the application relates. To the extent that the candidate’s personal data are processed on the basis of the candidate’s consent to the processing of data not required by law, the data will be stored for the duration of recruitment for the position to which the application relates. To the extent that the candidate’s personal data is processed on the basis of the candidate’s consent to participate in subsequent recruitment processes, the data is stored until the consent is withdrawn or for a period of twelve (12) months, whichever comes first. The storage period may be extended in the event of STELLMET’s legitimate interests, including the determination, investigation and defense against possible claims. | |
| Persons contacting STELLMET by telephone and persons contacted by STELLMET by telephone | STELLMET collects data in connection with users’ interactions with STELLMET undertaken by telephone on the initiative of the contact persons and on the initiative of STELLMET. STELLMET records telephone calls, of which users are always informed before recording. |
| This data may include: name, surname and data provided during the telephone conversation (if they contain personal data). | |
| STELLMET processes this data for the purposes of: a. providing commercial information after prior consent to the transfer of such information (Article 6(1)(a) of the GDPR); b. improving the user service process, including performance evaluation and continuous improvement of customer service (Article 6(1)(a) of the GDPR) c. contacting the user and considering the case reported by the user (Article 6(1)(a) of the GDPR); d. fulfillment of legal obligations (demonstration of consent to recording) (Article 6(1)(c) of the GDPR); e. in some cases of implementation of legally justified interests of STELLMET, including the determination, investigation and defense against possible claims (Article 6(1)(f) of the GDPR). | |
| Data is collected directly from data subjects. Providing data is voluntary, but the lack of some of them may result in the inability to respond or consider the case reported by the user. | |
| The data is stored until the consent is withdrawn or for a period of six (6) months from contact, whichever occurs first. After the consent is withdrawn, the data may be processed in the event of the legitimate interests of STELLMET including the determination, investigation and defense against possible claims for the period of existence of this interest. |
9. STELLMET also collects, shares and uses aggregated data (statistical or demographic data), which, however, does not constitute personal data. If this data is combined with data enabling the user’s identification, the aggregated data is treated by STELLMET as personal data.
RIGHTS OF PERSONS TO WHOM THE DATA CONCERN
10. The data subject (user) has the following rights:
| Right of access, rectification, restriction, deletion or transfer | the data subject has the right to request from STELLMET access to his or her personal data, rectification, deletion (“right to be forgotten”) or restriction of processing and the right to object to the processing, and also has the right to transfer his or her data. Detailed conditions for exercising the above-mentioned rights are indicated in Art. 15-21 of the GDPR Regulations |
| The right to withdraw consent at any time | a person whose data is processed by STELLMET on the basis of consent (pursuant to Article 6(1)(a) or Art. 9 section 2 letter a) of the GDPR), he has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. |
| The right to lodge a complaint with the supervisory authority | the person whose data is processed by STELLMET has the right to lodge a complaint with the supervisory authority in the manner and manner specified in the provisions of the GDPR Regulation and Polish law, in particular the Personal Data Protection Act. The supervisory authority in Poland is the President of the Personal Data Protection Office |
| Right to object | the data subject has the right to object at any time – for reasons related to his or her particular situation – to the processing of personal data concerning him or her based on Art. 6 section 1 letter e) (public interest or tasks) or f) (legitimate interest), including profiling based on these provisions. STELLMET in such a case is no longer allowed to process this personal data, unless it demonstrates the existence of compelling legitimate grounds for processing, overriding the interests, rights and freedoms of the data subject, or grounds for establishing, pursuing or defending legal claims. |
| Right to object to direct marketing | if personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing purposes, to the extent that the processing is related to such direct marketing |
11. Access to people’s entitlements available through STELLMET contact and initial policy contact details.
PROFILING
12. STELLMET does not profile data.
DATA TRANSFER
13. Data collected by STELLMET is generally not transferred to third parties. However, STELLMET can:
1. transfer data to entities supporting STELLMET in running its business, such as providers of cloud business tools, providers of statistical tools (e.g. Albacross Nordic AB), legal service providers or accounting service providers;
2. transfer data to law enforcement authorities, supervisory authorities, entities performing public tasks or others when the obligation to disclose data results from legal provisions.
Data recipients may also be STELLMET employees and STELLMET associates, hosting providers, marketing and advertising agencies, entities providing IT system operation and maintenance services. Sharing or transferring data must always take place on the basis of a legal provision or an appropriate contract (e.g. entrusting the processing of personal data).
14. Data may be transferred outside the European Economic Area, and STELLMET ensures that appropriate security measures are provided, i.e. appropriate safeguards and binding corporate rules in accordance with Art. 46 and art. 47 GDPR. In particular, STELLMET concludes appropriate contracts (standard contractual clauses; provided that the receiving entity guarantees an appropriate level of data security) to secure the transferred personal data and transfers data to countries for which the European Commission has issued a decision confirming the level of protection.
RIGHT TO PRIVACY (RIGHT TO BE FORGOTTEN)
15. Each user has the right to request the deletion of data held by STELLMET about him/her. To delete this data, please contact STELLMET in accordance with the details in point 6 of the Privacy Policy.
COOKIES
16. In order to ensure the proper operation of the Websites, to adjust their operation, to improve them, and to conduct advertising activities for its services (e.g. remarketing), STELLMET uses cookies on the Websites. Cookies are files sent by the Websites, stored on the user’s device (in the memory of his browser). When the user’s device connects to the Website again or the user uses websites where STELLMET publishes advertisements for its services, the website recognizes the type of device from which the user connects.
17. Cookies collect various data related to the user’s use of the Website, including: IP address, information about the web browser, user behavior and the IT system used by the user. STELLMET provides a detailed description of cookies below, as well as in the window displayed to the user during the first visit to each of the Websites or after deleting files on a given device. Restricting the use of cookies (disabling them, limiting them) may affect some of the functionalities available on the Websites and make their functioning more difficult
18. The use of non-essential cookies requires the user’s consent. Such consent is voluntary. The User may change or withdraw his/her consent or modify his/her decision regarding cookies at any time by clicking the button available in the left corner of the page with the paperclip icon.
19. STELLMET uses the following cookies:
| FILE NAME | Durability | Description |
| _ga | 2 years | Google Analytic analytics |
| _gcl_au | 90 days | Measuring advertising effectiveness |
| CookieConsent | 12 months | Remembering the user’s choice of consent to cookies |
| Cookies_accepted | 12 months | Remembering the user’s decision to accept cookies |
| nQ_cookieId | A few days to a few weeks | User session tracking and content personalization |
| nQ_userVisitId | Duration of the visit or up to 24 hours | Tracking unique user visits, analyzing user activity on the website |
| Wp-wpml_current_language | Session/persistence depends on the user’s browser settings | Remembering the user’s language preferences, enabling the website to be displayed in the appropriate language |
STELLMET PARTNERS: PERSONAL DATA COLLECTED BY THIRD PARTIES
20. STELLMET informs about the processing of personal data on behalf of Albacross Nordic AB, i.e.: Albacross Nordic AB based in Stockholm (repeat number 556942-7338), Tegelbacken 4A, 111 52 Stockholm, Sweden, (www.albacross.com, contact@albacross. com). Information collected from cookies set on your device that qualifies as personal data will be processed by Albacross, a platform offering visitor identification and advertising targeting services. Full contact details are below.
21. The purpose of processing personal data is to enable Albacross to improve the services provided to STELLMET by adding data to their company database. The Albacross database will be used for targeted advertising purposes to companies and for this purpose data will be transferred to third party data service providers. Targeted advertising applies to companies, not individuals.
22. The data that is collected and used by Albacross to achieve this purpose is information about the IP address from which the user visited the Website and technical information that enables Albacross to distinguish different visitors from the same IP address. Albacross stores the domain from the form in order to correlate the IP address with the user’s employer.
23. Full information on our processing of personal data can be found in the Albacross Privacy Policy.