Information Clause - METAL-FACH Sp. z o.o.

Information Clause

1Who is the controller of your personal data?
Metal-Fach Sp. z o.o., with its registered office in Sokółka, ul. Kresowa 62 (hereinafter “the Company” or “MF”), is the controller, i.e. the entity deciding how your personal data will be used, and the operator of the online trading platform available at www.metalfach.com.pl and www.platformazakupowa.pl (hereinafter “Metal-Fach”).
2How to contact the Company for more information on how the Company processes your personal data?
Contact the Data Protection Officer appointed by the Company. By e-mail:
j.pydys@metalfach.com.pl
or by post: Inspektor Ochrony Danych Metal-Fach sp. z o.o.,
ul. Kresowa 62, 16-100 Sokółka.
3Where does the Company obtain your data from?
The Company receives them from you in connection with transactions made as part of sales or service agreements, implemented pursuant to the MF Rules.
4What is the purpose of and the legal basis for the processing of your personal data by MF?

We sometimes process your personal data, because it is necessary to perform agreements concluded with you in connection with making a transaction with MF, without the need for prior registration or having an account on MF websites, including to

  • provide electronic services and use MF website, including transactions on the Company's trading platform and payments for goods sold in the MF Official Shop;
  • Ensure transactions are processed and technical problems solved;
  • Perform agreements concluded under sales agreements with other users or under sales agreements in the MF Official Shop;
  • Handle complaints on the MF website or in the MF Official Shop in the event you make such a complaint;
  • Handle your requests to the Company (e.g. via the contact form); contact you, including for the purposes connected with the provision of services.


Furthermore, the law requires that the Company process your data for tax and accounting purposes. The Company also processes your personal data for the purposes indicated below, based on the legitimate interest of MF, which is to:

  • Ensure the processing of payment services;
  • Ensure the security of the services the Company provides to you electronically, including to enforce compliance with the MF Corporate Principles and to prevent fraudulent and abusive actions, as well as to ensure traffic safety;
  • Conduct MF research and analysis for the functionality of this trading platform, improvement of service operation, or evaluation of visitors’ main interests and needs, among other things;
  • Handle your requests, forwarded particularly to the customer service department and via the contact form, unless they are directly related to the performance of agreements;
  • Collect debts, conduct court, arbitration and mediation proceedings;
  • Carry out statistical analyses;
  • Store data for the Company's files and ensure accountability (prove the Company’s compliance with legal obligations).


Upon, and only if you grant the Company your consent, the Company processes your personal data to:

  • Save data in cookies and collect data from websites and mobile applications.

5Do you need to provide the Company with your personal data?
The Company requires your e-mail address in order to be able to conclude and perform agreements concluded with you in connection with each transaction made by you with MF without the need for prior registration or creating an account. If for some reason you do not provide this personal data, unfortunately the Company will not be able to conclude any agreement with you, and consequently you will not be able to use MF in the manner described in the preceding sentence.
If required by applicable law, the Company has a right to require you to provide it with other information that may be necessary for, without limitation, accounting or tax purposes. In all other respects, your providing your data is voluntary.
6What are your rights towards MF with respect to processed data?

The Company undertakes and guarantees to fulfil all your rights under the General Data Protection Regulation, which includes the right of access, rectification and deletion of your data, the right to restrict the data processing, the right to transfer, the right not to be subject to automated decision making, including profiling, and the right to object to the processing of your personal data.


You can exercise these rights when,

  • with regard to the request for rectification of data: you notice that your data is incorrect or incomplete;
  • With regard to the request for erasure of data: your data is no longer necessary for the purposes for which it has been collected by the Company; you withdraw your consent to the processing of your data; you object to the processing of your data;
  • your data is processed unlawfully; your data should be deleted in order to comply with a legal obligation or the data has been collected in connection with the provision of electronic services offered to a child;
  • With regard to the request to restrict data processing: you notice that your data is incorrect – you can request that your data be restricted over a period of time enabling us to verify the accuracy of your data; your data is unlawfully processed but you do not want them to be deleted; your data is no longer necessary for us but may be necessary for you to defend or assert claims; or you object to the processing of your data – until it has been established whether a legitimate ground on the Company’s part has priority over the ground for objection;
  • With regard to the request for data transfer: your data is processed on the basis of your consent or an agreement with you and is processed automatically.


You have the right to lodge a complaint with the supervisory authority, which is the Office for the Protection of Personal Data, in connection with the Company's processing of your personal data.h.

7In what situations can you object to the processing of your data?
You have the right to object to the processing of your personal data when its processing is based on a legitimate interest or for statistical purposes, and your objection is justified by a situation you find yourself in.
8Who does the Company share your personal data with?
The Company may make your personal data available to entities supporting the Company in providing services by electronic means, i.e. those which provide payment services or perform consulting or audit services. The Company may transfer your personal data to public authorities combating fraud and abuse.
9How long does the Company keep your personal data?
The Company stores your personal data upon your transaction with MF without prior registration or creating an account for a period necessary to implement the transaction and for a period during which it is possible to pursue claims in connection with the implementation of a relevant agreement concluded as a result of the transaction, a maximum of 3.5 years from the date of the transaction.
Furthermore, the Company may store data for fraud prevention and statistical and filing purposes, for a period of 10 years from the date of termination of the agreement or the event giving rise to the need for such processing.
For the purpose of accountability, the Company will also store data for a period during which MF is obliged to retain data, or documents containing them, to prove the Company's fulfilment of legal requirements, including its availability for the control of their fulfilment by public authorities.
10Does the Company transfer your data to countries outside the European Economic Area?
Your personal data will not be transferred outside the European Economic Area.
11Does the Company process your personal data automatically (including by means of profiling) in a way that affects your rights?
Your personal data will not be processed automatically (profiling).