Legal

Privacy policy

How Steelest handles the personal data and files you send us. Last updated 4 November 2026.

Who is responsible

The data controller is Steelest, Monika Sobieraj, Poland. Contact for anything related to personal data: mon.sobieraj@gmail.com.

What we collect

  • Contact details you send us: name, company, email address, phone number.
  • Drawings, specifications and other files you send for a quote or a takeoff.
  • Standard server logs (IP address, browser type, pages visited) kept by our hosting provider for security and troubleshooting.

Why we use it

  • To answer your enquiry and prepare a quote: steps before entering into a contract (Art. 6(1)(b) GDPR).
  • To deliver and invoice the work you order: performance of a contract (Art. 6(1)(b) GDPR).
  • To keep accounting records required by law: legal obligation (Art. 6(1)(c) GDPR).
  • To keep the website secure: our legitimate interest (Art. 6(1)(f) GDPR).

How long we keep it

Enquiries and the files attached to them are kept for as long as needed to answer them and for up to two years afterwards, unless a contract follows. Records of completed work are kept for as long as tax and accounting law requires.

Who else sees it

Our website hosting provider and our email provider (Google, for the Gmail mailbox) process data on our behalf. We do not sell personal data and do not share it with anyone else unless the law requires it. Where a provider processes data outside the European Economic Area, it does so under safeguards recognised by the GDPR.

Cookies

This website uses Google Analytics (Google Ireland Ltd.) to understand how visitors use it. Analytics cookies are set only after you give consent; without consent Google receives only aggregated, cookieless signals. Apart from that, the site sets only the technical cookies WordPress needs to work, for example when you log in. There are no advertising cookies.

Your rights

You can ask to access, correct, delete or restrict the use of your personal data, ask for a copy of it, and object to processing based on legitimate interest. Write to mon.sobieraj@gmail.com. You can also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or with the supervisory authority in your own country.