Privacy Policy
Portmetal Limited Liability Company
Definitions
1.1 Administrator – Portmetal Limited Liability Company based in Warsaw
1.2 Personal Data – all information about an identified or identifiable natural person through one or several specific factors defining their physical, physiological, genetic, mental, economic, cultural, or social identity, including the device’s IP, location data, internet identifier, and information collected through cookies or other similar technology.
1.3 GDPR – Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
1.4 Policy – this Privacy Policy.
1.5 User – any natural person visiting the Service or using one or more services or functionalities described in the Policy.
1.6 Service – the website operated by the Administrator at https://metalleo.pl/
Information on Personal Data Processing
2.1 The Administrator collects data for specific, lawful purposes, processes them lawfully, and does not subject them to further processing incompatible with those purposes. Data is collected only to the extent necessary for the purposes for which it is processed.
2.2 The Administrator does not process special categories of data. The Administrator takes all necessary precautions to protect data from unauthorized access by third parties, applying high-level organizational and technical security measures. The Administrator does not disclose data to unauthorized recipients in accordance with applicable law.
2.3 For matters concerning personal data protection and exercising rights related to data processing, you may contact the Administrator via the following communication channels:
Postal address: Portmetal Ltd., Puławska 99, Warsaw
Email address: biuro@metalleo.pl
Purposes of Data Processing
3.1 Personal data of users using the Service is processed by the Administrator for the purpose of enabling the use of the Service’s functionalities, including automatically during use, namely:
Registration on the Service;
Concluding contracts via or on the Service, including placing and processing shipments,
Ensuring the smooth operation and functioning of the Service, ensuring its security, including detecting fraud and performing analyses;
Fulfilling the Administrator’s obligations, especially in relation to complaints regarding contracts concluded on or through the Service, and the functioning of the Service.
3.2 For:
Registration on the Service: The following personal data is processed: email, IP address.
Shipping products: The following personal data is processed: name and surname, address, IP address, email, phone number.
Ensuring the smooth operation and functioning of the Service, ensuring its security, including detecting fraud, generating reports, and analyses: The following personal data is processed: those mentioned in point 3.2.
Legal Basis for Data Processing
4.1 The legal basis for the processing of personal data includes:
4.1.1. The consent of the data subject for processing their personal data;
4.1.2. Necessity for the performance of contracts concluded on the Service or through the Service, or to take actions requested by the data subject before entering into a contract;
4.1.3. Necessity to fulfill a legal obligation to which the Administrator is subject;
4.1.4. Legitimate interests pursued by the Administrator or a third party, such as payment service providers or other parties performing functions related to the Service’s functionality, provided that this basis does not concern children.
Contact Forms
5.1 The Administrator provides the possibility to contact them through an electronic form on the Service’s contact page. Using the form requires providing personal data necessary to contact the user. The personal data provided in the contact form includes name and email. Providing the data is necessary to accept and process the contact request, and failure to provide it will result in the inability to handle the query. The personal data provided in the form will be processed for the purpose of identifying and handling the query submitted via the contact form.
Personal Data Retention Period
6.1 The Administrator will process personal data for a maximum period of 5 years from the end of the calendar year in which the payment of tax related to the contract concluded through the Service was due. In other cases justified by the purposes of processing, personal data will be stored for as long as there is a legal basis for their processing, unless the applicable law requires a longer storage period.
6.2 After the retention period has expired, the data will be permanently deleted or anonymized.
User Rights
7.1 Every individual whose data is processed has the following rights:
7.1.1. The right to information about the processing of personal data;
7.1.2. The right to obtain a copy of the data;
7.1.3. The right to rectify the data;
7.1.4. The right to delete data;
7.1.5. The right to restrict processing;
7.1.6. The right to data portability;
7.1.7. The right to object to the processing of data;
7.1.8. The right to withdraw consent;
7.1.9. The right to file a complaint.
7.2 Requests related to the exercise of rights can be submitted:
Postal address: Portmetal Ltd., Puławska 99, Warsaw
Email address: biuro@brakes4cash.pl
7.3 The request should specify the right the data subject wants to exercise and the processing process to which the request relates.
Data Security
8.1 The Administrator takes steps to ensure a high level of security for users when using the Service by applying necessary legal technical and organizational measures regarding data security and ensuring continuous confidentiality, integrity, availability, and resilience of the processing system.
8.2 The Administrator conducts ongoing risk analysis to ensure that personal data is processed securely.
Data Recipients
9.1 Personal data related to the provision of services in the Service may be transferred to data processors on behalf of the Administrator, including IT service providers, TSR Poland Ltd., and DHL Express (Poland) Ltd. for transportation purposes. Such entities process data based on agreements with the Administrator and exclusively according to the Administrator’s instructions.
9.2 Data may also be transferred to entities authorized to receive them under applicable law.
