Privacy Policy

1. General Information

1.1. This privacy policy applies to the website steelposter.com.
1.2. The website operator and data controller is Marceli Szczepek, Zamkowa 20, 05-850 Ożarów Mazowiecki, Poland, VAT ID: PL5271457837, REGON: 010447696, phone: +48 502092300.
1.3. Contact e-mail address of the operator: sklep@blachydekoracyjne.pl
1.4. The Operator is the Controller of personal data provided voluntarily through the Website.
1.5. The purpose of processing the Buyer’s data is to fulfill orders. Legal bases for data processing:
a) the sales contract or actions leading to its conclusion (Article 6(1)(b) GDPR),
b) legal obligations of the Seller (Article 6(1)(c) GDPR),
c) the legitimate interest of the Seller (Article 6(1)(f) GDPR).
1.6. The Website processes data for the following purposes:
- newsletter distribution,
- comment system operation,
- online chat communication,
- handling contact form inquiries,
- order preparation, packaging, and shipping,
- service provision,
- debt collection,
- offer or information presentation.
1.7. The Website collects information about users and their behavior through:
a) voluntarily entered form data,
b) cookies saved on the user’s device.

2. Selected Data Protection Methods

2.1. Login and data entry areas are protected with SSL encryption.
2.2. Personal data in the database is encrypted—only the Operator has the decryption key.
2.3. User passwords are stored in hashed form.
2.4. The Operator regularly changes administrator passwords.
2.5. The Operator ensures data safety by updating all relevant software and components.

3. Hosting

3.1. The website is hosted by home.pl.

4. Your Rights and Additional Information

4.1. The Controller may transfer your data to third parties if necessary for contract performance or to fulfill legal obligations. This includes:
- hosting providers,
- couriers and postal services,
- legal firms and debt collection agencies,
- payment providers,
- public authorities,
- chat service providers,
- authorized employees and collaborators,
- marketing service providers.
4.2. Personal data is processed only for as long as necessary. Marketing data is stored for up to 3 years.
4.3. You have the right to:
a) access your personal data,
b) rectify it,
c) delete it,
d) restrict its processing,
e) request data portability.
4.4. You have the right to object to processing based on legitimate interests.
4.5. You can lodge a complaint with the President of the Personal Data Protection Office in Poland (UODO), ul. Stawki 2, 00-193 Warsaw.
4.6. Providing personal data is voluntary but necessary to use the Website.
4.7. Automated decision-making, including profiling, may occur within the scope of contract fulfillment and marketing.
4.8. Data is not transferred outside the European Union.

5. Information in Forms

5.1. The Website collects data voluntarily provided by users.
5.2. It may log connection parameters (e.g., timestamp, IP address).
5.3. It may link form data to an email address by including it in the page URL.
5.4. Data from forms is used according to the purpose of the specific form.

6. Administrator Logs

6.1. User activity may be logged for administrative and diagnostic purposes.

7. Key Marketing Technologies

7.1. Google Analytics is used to analyze website traffic. Data is anonymized.
7.2. Remarketing allows the display of ads based on user behavior. No personal data is shared.
7.3. Facebook Pixel detects visits by Facebook users. No additional personal data is transmitted.
7.4. Heatmaps and session recordings analyze user behavior (personal data and passwords are not recorded).
7.5. Automation tools may send emails after visiting specific pages (if marketing consent is given).

8. Cookies Policy

8.1. The Website uses cookies.
8.2. Cookies are small text files stored on the user's device.
8.3. Cookies are placed and accessed by the Website operator.
8.4. Cookies serve purposes such as:
a) maintaining user sessions,
b) supporting marketing tools mentioned above.
8.5. Cookie types:
- "session" cookies – deleted after browser closure,
- "persistent" cookies – saved until a set expiry or user deletion.
8.6. Most browsers accept cookies by default, but you can change this in your settings.
8.7. Blocking cookies may affect some Website functionality.
8.8. Cookies may be used by external partners such as Google, Facebook, and Twitter.