Protecting the privacy of our Users is particularly important to us. We therefore make every effort to ensure that personal data relating to persons using the www.rolmetplus.pl online store, hereinafter referred to as the “Online Store”, is processed in accordance with applicable law and appropriately protected.

The controller of personal data is FLODI Kamil Błaszczyński.

This Privacy Policy has been prepared in particular with regard to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the “GDPR”.

This Privacy Policy sets out the rules governing the processing and protection of personal data provided by Users in connection with their use of the Online Store and related services and forms of communication.

A User is any data subject using the Online Store or contacting the Controller, hereinafter referred to as the “User”.

The controller of personal data is:

FLODI Kamil Błaszczyński
ul. Osiedle Lecha 8
62-571 Stare Miasto
Poland
Tax Identification Number (NIP): 6652720203
REGON: 528896789
email: biuro@rolmetplus.pl

hereinafter referred to as the “Controller”.

Personal data is processed only where an appropriate legal basis exists. Depending on the purpose of processing, the legal basis may include the performance of a contract or steps taken prior to entering into a contract, compliance with a legal obligation, the legitimate interests pursued by the Controller or the User’s consent.

Providing data required for the fulfilment of an Order or conclusion of a contract is voluntary; however, failure to provide such data may make it impossible to fulfil the Order or provide a particular service. Providing data processed on the basis of consent is voluntary.

Last updated: 4 October 2026

I. USER CONSENT

Simply using the Online Store does not constitute the User’s consent to all forms of personal data processing described in this Privacy Policy.

This Privacy Policy is intended to provide information. The User’s consent is obtained separately in cases where such consent is required by applicable law.

Where personal data is processed on the basis of the User’s consent, the User has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Where the Controller uses email, telephone or other electronic means of communication to send commercial information or conduct direct marketing, this is done after obtaining any consent required by applicable law.

Where the operation of particular analytical, advertising or marketing tools requires information to be stored on or accessed from the User’s device, such tools are activated after obtaining the required consent, except for technologies necessary for the proper operation of the Online Store or for providing a service requested by the User.

An amendment to this Privacy Policy does not automatically constitute new consent by the User. Where a change in the manner of processing requires new consent, the Controller will request such consent separately.

II. PERSONAL DATA PROCESSED BY THE CONTROLLER

1. How personal data is collected

a. Personal data collected directly from the User

The Controller may obtain personal data directly from the User, in particular when the User:

• sends a message using a contact form or email;
• creates a Customer Account in the Online Store;
• places an Order in the Online Store;
• contacts the Controller by telephone or electronically;
• submits a complaint, return request or other request relating to a purchase;
• provides information required to obtain technical support;
• provides photographs, product references or other information necessary to identify or select an appropriate product.

b. Personal data obtained from other sources

The Controller may also obtain data relating to the use of the Online Store through cookies and similar technologies.

Where the use of such technologies requires the User’s consent, data is obtained after such consent has been given.

The Controller may also receive data from entities involved in fulfilling Orders, providing services, settling payments or handling requests where this is necessary for the performance of a contract, compliance with the Controller’s legal obligations or protection of legitimate interests.

2. Personal data processed by the Controller

The scope of personal data processed may vary depending on how the Online Store is used and the purpose of processing.

The Controller may process in particular:

• the User’s login;
• first name and surname;
• company name;
• billing address;
• delivery address;
• correspondence address;
• telephone number;
• email address;
• Tax Identification Number (NIP);
• REGON, where provided and necessary;
• IP address;
• information about the device, operating system and browser;
• information concerning the manner in which the Online Store is used;
• Order information;
• information relating to payment and settlement of Orders;
• information stored in cookies and similar technologies in accordance with the User’s choices;
• correspondence with the Controller;
• data, photographs, part numbers, product references, dimensions and other information supplied for technical support, product selection, complaint handling or Order fulfilment;
• reviews and ratings of Goods or services, where such functionality is available.

In connection with the use of Google Analytics, information may be processed relating to, among other things, the number of users, sessions, device and browser information, approximate location and identifiers associated with the use of the website.

In connection with the use of Google Ads, information concerning the User’s interactions with advertisements and the website may be processed, depending on the configuration of Google services and the consents granted by the User.

The Controller does not collect payment card data because the Online Store does not currently offer card payments or instant online payment services.

III. METHOD OF PROCESSING – PURPOSES OF PERSONAL DATA PROCESSING

The manner in which personal data is processed depends on the purpose for which it has been provided or collected.

1. Orders and Customer Account – performance of a contract

Where the User places an Order, the Controller processes personal data to the extent necessary to conclude and perform the Sales Agreement, including accepting and fulfilling the Order, delivering the Goods, communicating about the Order and providing after-sales service.

The legal basis for processing is Article 6(1)(b) GDPR.

Where the User creates a Customer Account, the Controller processes data in order to provide the Account service, enable login, provide access to Order history and allow the User to use the available Account functionality.

2. Communication – performance of a contract and legitimate interests of the Controller

The Controller processes personal data in order to communicate with the User, respond to enquiries, provide technical assistance, assist with product selection and handle Orders, returns, complaints and other requests.

The legal basis may be Article 6(1)(b) GDPR where the communication relates to entering into or performing a contract, or Article 6(1)(f) GDPR – the Controller’s legitimate interest in responding to enquiries and conducting communication related to its business activities.

3. Advertising and marketing – consent and legitimate interests of the Controller

The Controller may conduct marketing relating to its own Goods and services.

Where marketing involves the use of email, telephone or other electronic means of communication, such communication is conducted after obtaining any consent required by applicable law.

The Controller uses Google Ads for the purpose of conducting advertising campaigns, measuring their effectiveness, analysing conversions and – where the User has provided the appropriate consents – remarketing and personalised advertising.

Google Ads may use cookies and other advertising identifiers. The scope of the tool’s operation depends, among other things, on the User’s choices concerning consent for advertising storage, advertising-related user data and personalised advertising.

The User has the right to object at any time to the processing of personal data for direct marketing purposes and to withdraw previously granted consents.

4. Improving the Online Store and analytics – legitimate interests of the Controller or consent

The Controller uses data to conduct analyses and statistics concerning the operation of the Online Store in order to improve its functionality, usability and the quality of the services offered.

The Controller uses Google Analytics, which enables analysis of how the Online Store is used, including the number of visits, sessions, navigation through the website, basic device and browser information and the User’s approximate location.

Google Analytics may use, among other things, the _ga cookie to distinguish users and sessions.

Where the use of Google Analytics requires information to be stored on or accessed from the User’s device, the tool is used in accordance with the User’s consent.

The Controller may use Google Consent Mode to communicate the User’s consent status to Google services, including in relation to analytics and advertising.

5. Security – legitimate interests of the Controller

The Controller may process personal data to ensure the security of the Online Store, prevent fraud, spam and abuse, and protect against unauthorised access to systems and User Accounts.

The legal basis is Article 6(1)(f) GDPR – the Controller’s legitimate interest in protecting systems, data and Users.

The Online Store may use Google reCAPTCHA on certain forms to distinguish automated activity from genuine user activity and protect the Online Store against spam and abuse.

Where reCAPTCHA is used, technical information relating to the User’s device, connection and use of the relevant functionality may be processed to the extent necessary to detect abuse.

Where there is a reasonable suspicion that an offence or other breach of law has occurred, data may be used to establish the circumstances of the event and may be disclosed to the competent authorities where an appropriate legal basis exists.

6. Establishment, exercise or defence of claims – legitimate interests of the Controller

The Controller may process personal data to the extent necessary to establish, exercise or defend legal claims relating to the use of the Online Store, concluded agreements, Orders, complaints or the Controller’s business activities.

The legal basis is Article 6(1)(f) GDPR.

7. Tax and accounting documentation – compliance with a legal obligation

Where a purchase is made, the Controller processes personal data to the extent necessary to comply with applicable tax, accounting and documentation obligations.

The legal basis is Article 6(1)(c) GDPR.

8. Google Maps

The Online Store may use Google Maps, in particular to display the location of the business.

When the map is displayed, technical information relating to the request may be transmitted to Google, including the IP address, browser and operating system information, date and time of the request and information necessary to display the map.

Where consent is required to activate particular Google Maps functionality, the service is activated in accordance with the User’s choice.

9. Social media

The Online Store may contain links to Rolmet-Plus profiles on Instagram and LinkedIn.

Where these are ordinary links, merely displaying a page of the Online Store does not, as a result of those links alone, transmit personal data to those services. When the User clicks such a link, the User is redirected to an external service whose operator determines its own rules for processing personal data in accordance with its privacy policy.

If the Controller introduces social media plug-ins, tracking pixels or other technologies which automatically transmit data to social media services in the future, this Privacy Policy will be updated accordingly.

IV. DISCLOSURE OF PERSONAL DATA BY THE CONTROLLER

The User’s personal data may be disclosed to the following categories of recipients:

a. courier, postal and other service providers involved in delivering Orders;

b. banks and entities involved in payment settlement to the extent resulting from the selected payment method;

c. providers of hosting, IT, server, email and technical support services;

d. accounting, legal and advisory service providers;

e. entities assisting the Controller in the establishment, exercise or defence of claims;

f. Google in connection, as applicable, with the use of Google Analytics, Google Ads, Google Maps and Google reCAPTCHA;

g. providers of other analytical, advertising or marketing services if such services are implemented and an appropriate legal basis exists;

h. public authorities, courts, law enforcement authorities and other entities entitled to obtain data under applicable law.

The Controller discloses only the data necessary for the relevant purpose.

In connection with the use of services provided by internationally operating service providers, in particular Google, personal data may be transferred to or accessed from countries outside the European Economic Area.

Where such a transfer takes place, it is carried out using mechanisms provided for in Chapter V of the GDPR, in particular an adequacy decision adopted by the European Commission or appropriate safeguards such as standard contractual clauses.

V. USER RIGHTS

The User may exercise their rights by contacting the Controller at:

biuro@rolmetplus.pl

Certain data may also be modified directly through the Customer Account.

1. Right of access

The User has the right to obtain confirmation from the Controller as to whether their personal data is being processed and, where that is the case, to obtain access to the data and information relating to its processing.

The User also has the right to obtain a copy of the personal data being processed.

2. Right to rectification

The User has the right to request rectification of inaccurate personal data and completion of incomplete personal data.

3. Right to erasure – right to be forgotten

The User has the right to request erasure of personal data in the circumstances provided for in Article 17 GDPR, in particular where:

a. the data is no longer necessary for the purposes for which it was collected;

b. the User has withdrawn consent and there is no other legal basis for processing;

c. the User has successfully objected to processing;

d. the data has been unlawfully processed;

e. the data must be erased in order to comply with a legal obligation.

The right to erasure is not absolute. The Controller may continue to process or retain data where this is necessary, in particular to comply with a legal obligation or for the establishment, exercise or defence of legal claims.

4. Right to restriction of processing

The User may request restriction of the processing of personal data in the circumstances provided for by the GDPR, in particular where:

a. the User contests the accuracy of the data;

b. the processing is unlawful but the User opposes erasure;

c. the Controller no longer needs the data but the User requires it for the establishment, exercise or defence of legal claims;

d. the User has objected to processing, pending verification of whether the Controller’s legitimate grounds override those of the User.

5. Right to data portability

In the circumstances set out in Article 20 GDPR, the User has the right to receive personal data provided to the Controller in a structured, commonly used and machine-readable format and to transmit that data to another controller.

Where technically feasible, the User may request direct transmission of the data to another controller.

6. Right to object

The User has the right to object at any time, on grounds relating to their particular situation, to processing based on the Controller’s legitimate interests.

Where personal data is processed for direct marketing purposes, the User has the right to object at any time to such processing, including profiling to the extent that it is related to such direct marketing.

Following an objection to direct marketing, the data will no longer be processed for that purpose.

7. Right to withdraw consent

Where data is processed on the basis of consent, the User may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

8. Right to lodge a complaint

The User has the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if the User considers that the processing of their personal data infringes the GDPR.

VI. COOKIES AND OTHER TECHNOLOGIES USED BY THE CONTROLLER

The Controller uses cookies and similar technologies in order to ensure the proper operation of the Online Store, maintain the User’s session, remember settings, ensure security and – after obtaining any required consent – for analytical, statistical and advertising purposes.

Cookies are small pieces of information stored on the User’s terminal device. The Online Store may also use other technologies used to store or access information, such as Local Storage or Session Storage.

The Online Store may use in particular:

1. Necessary cookies – required for the proper operation of the Online Store, basic functionality, session maintenance, shopping cart operation, login and security.

2. Analytical cookies – used, among other things, in connection with Google Analytics to obtain statistical information about the use of the Online Store.

3. Advertising and marketing cookies – used, among other things, in connection with Google Ads for measuring advertising effectiveness, conversion analysis and – after obtaining the appropriate consents – remarketing and personalised advertising.

4. Security technologies – which may be used in connection with Google reCAPTCHA to protect forms against spam and automated abuse.

Cookies and other technologies which are necessary to provide a service requested by the User may be used without separate consent to the extent permitted by applicable law.

Analytical, advertising and marketing cookies and similar technologies which are not necessary for the proper operation of the Online Store are used after obtaining the User’s consent where such consent is required.

The User may accept or reject individual categories of optional cookies through the consent management mechanism provided in the Online Store and may subsequently change their decision.

Changing or withdrawing consent should be no more difficult than granting it.

With regard to Google services, consent status may be communicated using Consent Mode, including in relation to:

• analytics_storage,
• ad_storage,
• ad_user_data,
• ad_personalization.

Detailed information concerning the cookies used, their providers, purposes and duration is set out in the Cookie Policy.

VII. OTHER IMPORTANT INFORMATION

1. Personal data security

The Controller applies appropriate technical and organisational measures designed to ensure a level of security appropriate to the risks associated with the processing of personal data.

Access to personal data is limited to persons and entities that require such access in order to perform their assigned tasks or provide services to the Controller and that are required to ensure an appropriate level of data protection.

The Controller takes measures designed to protect systems against unauthorised access, loss, destruction, alteration or unauthorised disclosure of data.

2. Retention of personal data

The period for which personal data is retained depends on the purpose and legal basis of processing.

The Controller retains data in particular:

a. in connection with Orders and concluded agreements – for the period necessary for their performance and thereafter for the period during which legal claims may be asserted;

b. in connection with the Customer Account – for the duration of the agreement relating to the Account and thereafter for any period necessary to comply with legal obligations or protect against claims;

c. in connection with tax and accounting documentation – for the period required by applicable law;

d. where data is processed on the basis of consent – until consent is withdrawn, unless the purpose of processing ceases earlier or another legal basis permits further processing;

e. in the case of direct marketing based on legitimate interests – until an effective objection is made;

f. in relation to correspondence and enquiries – for the period necessary to handle the correspondence or matter and thereafter where necessary for the establishment, exercise or defence of claims;

g. in relation to analytical and advertising data – for the period resulting from the configuration of the relevant service, the User’s consents and the retention periods specified in the Cookie Policy;

h. in relation to cookies – for the lifetime of the relevant cookie or until the relevant consent is withdrawn, depending on the type of technology.

After the applicable retention period expires, the data is deleted or anonymised unless further retention is required by applicable law.

3. Amendments to the Privacy Policy

This Privacy Policy may be updated, in particular in the event of changes to applicable law, the operation of the Online Store, services or technologies used, or the manner in which personal data is processed.

The date of the latest update is indicated at the beginning of the Privacy Policy.

Where an amendment is material from the Users’ perspective, the Controller may inform Users through a notice in the Online Store or, where appropriate, directly, for example by email.

An amendment to this Privacy Policy does not itself replace the User’s consent where applicable law requires such consent.

4. Contact information

For questions relating to personal data protection, this Privacy Policy or the exercise of rights under the GDPR, the User may contact the Controller:

email: biuro@rolmetplus.pl

postal address:
FLODI Kamil Błaszczyński
ul. Osiedle Lecha 8
62-571 Stare Miasto
Poland