Privacy Policy

Effective date: 4 November 2025
Website: https://aspersteel.com
Company: UTMK POLSKA LIMITED LIABILITY COMPANY (NIP: 7011156560)
Registered address: William Heerlein Lindley 16, 02-013 Warsaw, Poland
Contact: privacy@aspersteel.com, +48 22 000 00 00

1. Who we are

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit aspersteel.com, contact us, or use our products and services. We act as the data controller under the EU General Data Protection Regulation (GDPR).

2. Data we collect

Identification & contact: name, company, job title, email, phone, billing/shipping address.
Account data: username, hashed password, role, order history, saved preferences.
Order & payment data: items purchased, invoices, tax IDs, partial payment information (we do not store full card numbers; payments are processed by PCI-compliant processors).
Communications: messages sent via forms, email, chat; customer-support notes.
Technical data: IP address, device/browser info, pages viewed, referring URLs, cookie IDs, approximate location derived from IP.
Marketing data: newsletter opt-ins, campaign interactions, preferences.

3. Sources

We obtain data directly from you, from cookies and similar technologies, and—where applicable—from payment/fulfilment partners or publicly available business registries.

4. Purposes & legal bases

Provide the website, process orders, customer support (Art. 6(1)(b) GDPR – contract; Art. 6(1)(f) – legitimate interests).
Account management & security (Art. 6(1)(b)/(f)).
Legal/Tax compliance such as invoicing and record-keeping (Art. 6(1)(c)).
Marketing & newsletters with your consent (Art. 6(1)(a)) or legitimate interests for B2B prospects (Art. 6(1)(f))—you can opt out anytime.
Analytics & site improvement (Art. 6(1)(f)).
Fraud prevention & network security (Art. 6(1)(f)).

5. Sharing of data

We share personal data only as needed with:

Payment processors & banks (transaction processing, refunds).
Logistics/fulfilment partners (shipping).
IT & hosting providers (website operation, data storage).
Analytics & marketing vendors (only aggregated or pseudonymized data where possible).
Professional advisors (legal, accounting).
Authorities where required by law.

All processors are bound by data-processing agreements and appropriate safeguards.

6. International transfers

Where data is transferred outside the EEA/UK, we use EU Standard Contractual Clauses, UK IDTA/Addendum as applicable, and require appropriate technical and organizational measures.

7. Retention

We keep data only as long as necessary:

Orders/invoices: up to 6–10 years (legal/tax).
Account data: while the account is active, then up to 24 months for dispute/security logs.
Marketing data: until you withdraw consent or opt out, then kept on a suppression list.

8. Your rights (EU/UK)

Access, rectification, erasure, restriction, portability, and objection.
Withdraw consent at any time (does not affect prior processing).
Lodge a complaint with your local supervisory authority (in Poland: UODO).

To exercise rights: privacy@aspersteel.com

9. Children

Our services are not directed to children under 16. We do not knowingly collect their data.

10. Security

We apply industry-standard safeguards (encryption in transit, access controls, backups, least-privilege, logging). No method is 100% secure; we continuously improve our controls.

11. Cookies & similar technologies

See our Cookie Policy below for details about types, purposes, storage periods, and how to manage your preferences.

12. Third-party links

Our site may link to third-party websites. Their privacy practices are governed by their own policies.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be highlighted on this page with a new effective date.

14. Contact

UTMK POLSKA LIMITED LIABILITY COMPANY (NIP: 7011156560)
William Heerlein Lindley 16, 02-013 Warsaw, Poland
privacy@aspersteel.com