Dear Sir or Madam
In accordance with Article 13 of the General Data Protection Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 concerning the protection of personal data (GDPR), we would like to inform you about the principles governing the processing of personal data and your related rights.
The controller of your personal data is Iron-Art Łódź with its registered office in Łódź, Brzezińska 38, ul. 92-103. In matters concerning the protection of your data, you may contact the Controller by writing to the address indicated above or by email at biuro@metalpoland.mom.
Your personal data will be processed for the following purposes:
- concluding, performing and continuing agreements for services offered by the Controller,
- selling services offered by the Controller,
- providing support for services offered by the Controller,
- conducting marketing activities by the Controller independently or in cooperation with other entities,
- pursuing claims,
- archiving,
- responding to letters and requests,
- conducting activities related to ensuring security,
- fulfilling legal obligations imposed on the Controller, in particular issuing and storing invoices, sales documents and other accounting documents, as well as handling complaints,
- conducting analyses and preparing statistics concerning the business activity carried out.
Your personal data is processed within the following scope: first name and surname, position, contact details including email address and telephone number, address details and the company of the represented entity. In the case of entrepreneurs, we additionally process the tax identification number, REGON number, registered office address and bank account number.
The legal basis for processing your data may be:
- your consent,
- the necessity to perform an agreement or take action at your request before entering into an agreement,
- the necessity to fulfil a legal obligation imposed on the Controller,
- the necessity arising from legitimate interests pursued by the Controller.
Your data may be transferred to the following entities:
- cooperating entities and contractors in connection with activities commissioned by the Controller and carried out for and on behalf of the Controller,
- courier and postal companies responsible for delivering parcels to you,
- law firms providing legal services to the Controller in connection with its activities,
- entities or authorities authorised under applicable law.
The Controller undertakes to apply appropriate technical and organisational security measures to protect your personal data.
Your personal data will be stored for an appropriate period that will not exceed the periods specified by the currently applicable laws governing particular areas of personal data processing, including:
- the period required by legal regulations that may oblige the Controller to process data for a specified time, such as accounting regulations,
- the period during which services are provided,
- the period necessary to protect the interests of the Controller,
- the period for which consent has been granted.
Furthermore, we inform you that you have the right to:
- request access to your personal data in order to rectify it,
- request the completion of incomplete personal data, including by providing an additional statement,
- request the deletion of data or restriction of its processing,
- object to the further processing of personal data,
- request the removal of your data from the personal data records of Iron-Art Łódź,
- not be subject to profiling,
- transfer your personal data.
In accordance with Article 21 paragraph 4 of the GDPR, we inform you that you have the right to object to the processing of your personal data. The objection should be submitted to the Data Protection Officer. In accordance with Article 21 paragraph 1 of the GDPR, when submitting an objection, you should state the reasons relating to your particular situation.
If you have doubts concerning whether the Controller is processing your personal data correctly, you have the right to lodge a complaint with the supervisory authority.
Your data will not be processed by automated means, including profiling.

