Your data.
Clear information.

1. Controller and contact

The controller is Iron Workers Sp. z o.o., ul. Batalionów Chłopskich 38/38, 70-764 Szczecin, Poland; KRS 0000913735, NIP 9552558466.

Privacy contact: p.tokarek@ironworkers.pl — Paulina Tokarek, administration. You may also write to our registered address. We have not appointed a data protection officer.

2. Contact and quotation enquiries

We process details you provide in correspondence or a conversation: your name, company details, email address, any phone number you give us, and your enquiry and attachments. Please provide only information needed to deal with your request.

• Preparing a quotation or performing a contract where you are a party: Article 6(1)(b) GDPR.
• Contact with company representatives and other correspondence: Article 6(1)(f) GDPR. Our legitimate interest is handling enquiries and business relationships.
• Legal obligations arising from a contract, such as accounting: Article 6(1)(c) GDPR.
• Establishing, exercising or defending legal claims where necessary: Article 6(1)(f) GDPR.

Providing data in an enquiry is voluntary. Without details of your request and a way to contact you, we may be unable to reply or prepare a quotation. Ordinary contact does not require marketing consent.

3. How the enquiry tool works

The “Sheet metal to size” tool calculates part parameters in your browser. Its form does not collect your name, phone number or email address. Opening the summary does not send an enquiry to us.

“Open email” opens your email app with a prepared specification. Only after you send the email do we receive its contents, sender details and any files you attach. Downloading a specification saves a file to your device. We do not make automated decisions with legal effects or perform marketing profiling on the website.

4. Website operation and recipients

Serving and protecting the website involves technical data such as your IP address, request time, requested address and browser details. Keeping the website available and secure is our legitimate interest under Article 6(1)(f) GDPR. Separate rules apply to storing and reading cookies, as described below.

Recipients may include authorised members of our company, hosting and security providers (OpenAI / ChatGPT Sites and Cloudflare infrastructure), our business email provider (Microsoft 365), and, where needed, IT support, legal advisers and competent authorities. Data is shared to the extent needed for the relevant service or obligation.

5. Processing outside the EEA

Providers use global infrastructure, so data may be processed outside the European Economic Area, including in the USA. ChatGPT Sites does not guarantee storage exclusively within the EEA.

The Sites data processing terms provide for Standard Contractual Clauses or a European Commission adequacy decision for transfers from the EEA. Provider information: Sites data processing terms and Microsoft data protection terms. Contact our administration team for information about the safeguards applying to your data and how to obtain a copy.

6. Retention

We retain correspondence for as long as needed to handle an enquiry and related discussions. If it leads to a business relationship, the data becomes part of its documentation. Documents subject to legal retention requirements are kept for the period required by applicable law.

Where data is needed for legal claims, we take into account the relevant limitation period and any proceedings. Once the purpose and obligations end, the data should be deleted or anonymised. Cookie durations are described below; specific platform log retention periods require confirmation from the hosting provider.

7. Your rights

You may request access, rectification, erasure or restriction of processing under the conditions set out in the GDPR. Data portability applies to automated processing based on consent or a contract.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Send requests to our administration team. You may also complain to the President of the Polish Personal Data Protection Office (UODO) or a competent supervisory authority in the country of your habitual residence, workplace or the alleged infringement.

8. Cookies and browser settings

Cookies are small pieces of information stored in your browser. We have not added Google Analytics, advertising pixels or embedded social media players. Website fonts, images and scripts are loaded from our domain.

The hosting service sets its own cookies. Our inspection identified:

__cf_bm · Cloudflare

Bot protection. Cloudflare documents expiry after 30 minutes of inactivity.

cf_clearance · Cloudflare

Evidence of passing a security check. Its lifetime depends on the hosting provider’s security configuration.

__Host-appgarden-visitor · Sites hosting

A cookie set by the hosting provider. Its specific purpose and lifetime have not been confirmed in the available documentation; we do not classify it as strictly necessary based only on its name.

More information: Cloudflare cookie documentation. You can inspect, delete or block cookies in your browser settings. Blocking security cookies may prevent the website from loading correctly.

This notice is not consent to cookies. Browser settings do not replace consent where it is required. The purpose and controls for the additional hosting cookie require clarification with the provider; the website does not offer buttons promising to block it.

9. Maps and social media

Links to Google Maps, TikTok and Instagram open external services. We do not load their embedded maps or videos. After you follow a link, the service processes data under its own rules: Google, TikTok, Instagram.

This notice describes the current website. Changes to enquiry handling, payments or measurement tools will require updated information and appropriate privacy settings.