Data security

Print
Bookmark
Share on
Facebook Twitter Linkedin
Contact us

Data secuirty

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal data controller

The personal data controller (hereinafter referred to as the "Controller") is ArcelorMittal Distribution Solutions Poland sp. z o.o. with the headquarters in Katowice, address: ul. Stalowa 1, 40-610 Katowice, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for Katowice - East in Katowice, 8th Commercial Division of the National Court Register under KRS number 0000057816, with NIP [tax identification number]: 954-224-90-02, REGON: 276112593, and the share capital of PLN 194,570,700.00.

Contact details

As the Controller, we have not appointed a Data Protection Officer. You can contact us at any time with regard to any matters relating to the processing of personal data by us or the exercise of our rights relating to the processing of data at our e-mail address: rodo.amds@arcelormittal.comor in writing at the address of the Controller with the note "Personal data".

Purposes and legal basis of the processing

We process data in various business situations described in our policy. Below you will find information on the purposes and legal basis of the processing.

 

Purpose of the processing: Basis of the processing:
Undertaking the necessary actions before the conclusion of the contract, the conclusion and execution of the contract and the provision of services in accordance with the contract. Art. 6 item 1(b), (f) of RODO, as the so-called legitimate interest of the controller to seek redress and defend its rights.
For the Controller's marketing purposes, including profiling for marketing and analytical purposes Art. 6 item 1(b), (f) of RODO, as the so-called legitimate interest of the Controller, or Art. 6 item 1(a) - consent granted.
For marketing purposes, including analytical purposes and profiling of third parties, including the Controller's partners Art. 6 item 1(a) of RODO – consent, where no consent is given, personal data shall not be processed for that purpose
Alternatively, in order to seek redress in relation to the contract you have concluded/services provided Art. 6 item 1(b), (f) of RODO, as the so-called legitimate interest of the controller to seek redress and defend its rights.

The specific purpose and basis of the processing shall be given in a separate information notice addressed to the data subject

 

Period for which data will be stored

Your personal data will be stored until the statute of limitations for claims under the contract/service provision expires or until the obligation to store data under legal regulations expires, in particular the obligation to keep accounting documents relating to the contract. All data processed for accounting and tax purposes are processed for 5 years from the end of the calendar year in which the tax obligation arose. Your data will be deleted or made anonymous after the periods mentioned above have expired.

Where we process personal data based on the legitimate interest of the Controller, personal data will not be processed for specified purposes if you object to such processing.

If we process your data on the basis of your consent, your personal data will be processed until that consent is withdrawn.

Your personal data may be made available to third parties for the purposes referred to above/marketing purposes, if you agree to specific marketing purposes for which it is necessary to provide such data.

In addition, data may be transferred to entities processing personal data on the order of the Controller to, among others, providers of IT services, transport services, data processors for the purpose of debt collection - provided that such entities process data on the basis of a contract with the Controller and only in accordance with our instructions.

Transmission of data outside the European Economic Area

Personal data collected will not be transferred to recipients located in countries outside the European Economic Area (European Union countries, Iceland, Liechtenstein and Norway).

Rights of the data subject

You have the right to:

  1. Access to your personal data. This allows you to obtain a copy of personal data we have about you and to verify if we process them lawfully.
  2. Correct personal data stored by us. You may complete any incomplete information or correct any inaccurate information we store about you.
  3. Delete your personal data. You may request the erasure or deletion of your personal data if this is not unlawful and if there are no grounds for their further processing. In addition, you have the right to ask us to erase or delete your personal data if you exercise your right to object to the processing (see below).
  4. Restrict the processing of your personal data. You may request that the processing of your personal data be suspended so that we can determine whether such data are correct or the reason for their processing.
  5. File a complaint to the data protection supervisory authority, i.e. the President of the Office for the Protection of Personal Data.

 

In addition please note that:

  1. Providing personal data in connection with the contract concluded/services provided under the contract is voluntary, but necessary for the conclusion and execution of the contract - without providing personal data it is not possible to conclude the contract/provide services.
  2. The provision of personal data for marketing purposes is voluntary.
  3. Personal data shall not be subject to automated decision making including profiling.

 



Top of page
Back