We would like to inform you that as of May 25, 2018, the processing of personal data will be subject to the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (commonly known as “GDPR”).

In connection with this, we have prepared an information obligation for you in which we have described how we process your data and what rights you have.

Dear User, please be advised that as of May 25, 2018, the processing of personal data will be subject to the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (commonly known as “GDPR”). Below, we have gathered information regarding the principles of processing your personal data, which we provide to you in fulfillment of the obligation imposed by Article 13 of the GDPR. Please take a moment to read them – it should not take more than a few minutes. If you have any questions after reading, please contact us. Personal data is information about an identified or identifiable natural person.

a) Your consent to receive newsletters,

b) Your consent to the storage (“remembering”) of data in the customer account on the http://www.ulamex.com/ website,

c) Conducting transactions by you.

Your personal data is processed electronically and manually, in accordance with methods and procedures related to the purposes of processing, as mentioned in point 5. Providing personal data in connection with the specified activities was a condition for the conclusion of each agreement, as they were necessary for their performance.

The administrator of your personal data (hereinafter: “Administrator”) is: Ulamex Zbigniew Zientek. You can contact the administrator via traditional mail to the company’s address or email: bok@ulamex.com.pl Processing of your personal data by us requires a legal basis, which, in the scope of using our online store, includes:

a) Article 6(1)(b) of the GDPR, i.e., the necessity of processing for the performance of a contract to which you are a party (e.g., sales contract, contract for the provision of free electronic services – sending newsletters or managing an account in our online store);

b) Article 6(1)(c) of the GDPR, i.e., the necessity of processing for compliance with a legal obligation to which the Administrator is subject (e.g., storing VAT invoices to fulfill tax obligations);

c) Article 6(1)(f) of the GDPR, i.e., the necessity of processing for the purposes of the legitimate interests pursued by the Administrator or by a third party, in particular marketing and promotion of products offered in our online store (e.g., direct marketing and asserting and defending against mutual claims);

d) Article 6(1)(a) of the GDPR, i.e., your consent to the processing of your personal data (e.g., consent to automated decision-making to grant you personalized discounts).

Your data are processed by the Administrator for one or more of the following purposes: a) Sale and delivery of ordered goods (basis: Article 6(1)(b) of the GDPR);

b) Fulfillment of fiscal and accounting obligations (basis: Article 6(1)(c) of the GDPR);

c) Establishment and operation of a customer account on the http://www.ulamex.com/ website (basis: Article 6(1)(b) of the GDPR);

d) Execution of a free newsletter service if you voluntarily consent to receiving commercial information (basis: Article 6(1)(b) of the GDPR);

e) Execution of a free data storage (“remembering”) service within a customer account (basis: Article 6(1)(b) of the GDPR);

f) Handling complaints or returning purchased goods (basis: Article 6(1)(b) of the GDPR);

g) Establishing, investigating, and defending against mutual claims (basis: Article 6(1)(f) of the GDPR);

h) Marketing purposes (basis: Article 6(1)(f) of the GDPR);

i) Processing payments (basis: Article 6(1)(b) of the GDPR);

j) Analytical (basis: Article 6(1)(f) of the GDPR);

k) Statistical (basis: Article 6(1)(f) of the GDPR);

l) Archival (basis: Article 6(1)(f) of the GDPR);

m) Profiling of your data and making automated decisions regarding you (basis: Article 6(1)(a) of the GDPR).

One of the ways we process your personal data is profiling, which means that based on your data, we can create preference profiles for you and then customize the content displayed in the online store to meet your needs and interests. Please note that we do not make automated decisions, including profiling. If you have given your consent, we process your personal data through profiling described in point 6, as a result of which we make automated decisions with legal effects, for example, granting you personalized discounts based on your shopping preferences. This process only occurs if you have explicitly given your consent. Like most businesses, we use the assistance of other entities in our activities, which often involves the necessity of transferring your personal data, for example, to deliver the ordered goods. Therefore, if necessary, we transfer your personal data to the following recipients: a) Operators of IT systems,

b) Operators of payment systems,

c) Operators of SMS and email marketing systems,

d) Logistic companies,

e) Courier companies and Polish Post,

f) External product suppliers,

g) Payment operators

h) Law firms,

i) Accounting and auditing companies.

j) Retail partner marketstal.pl sp. z o.o. identified by VAT number: 773-246-99-35

The cookies we collect are processed to facilitate the fulfillment of your order (remembering data about a logged-in user, contents of the shopping cart), conduct visit statistics, facilitate sharing information with your friends through social media portals like Facebook, limit pop-up ads, display information about the cookie policy, and measure the effectiveness of our advertising campaigns. Your personal data is not transferred to Third Countries, i.e., outside the European Economic Area (EEA), or to international organizations. The Administrator does not process special categories of personal data or personal data related to criminal convictions and offenses or related security measures. Special categories of data include: personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, sexuality, or sexual orientation of that person. Your personal data will be processed by the Company for the period necessary to achieve the purposes mentioned in point 5, e.g., until the completion of the service of sending newsletters or storing data, closing an order, deleting your customer account, completing a complaint procedure, and after this period until the expiry of any claims or the expiration of data storage obligations arising from legal provisions. In connection with the processing of your personal data, you have the right to:

a) Access your personal data,

b) Rectify your personal data,

c) Erase your personal data,

d) Restrict the processing of your personal data,

e) Object to the processing of your personal data,

f) Data portability,

g) Lodge a complaint with the supervisory authority.

If your data are processed based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of the processing carried out before its withdrawal. You can exercise the rights specified in point 18 above, in particular by:

a) Email contact at: ulamex@ulamex.com.pl

b) Written contact via traditional mail to the address: Zawada 144, 97-200 Tomaszów Mazowiecki

If we process your personal data based on the legitimate interest of the Administrator (e.g., for marketing purposes), we will no longer process them for the specified purposes if you object to such processing. You have the right to object to the processing of your personal data at any time free of charge when: (1) the processing of your personal data is based on the legitimate interest or for statistical purposes, and the objection is justified by a particular situation in which you find yourself, or (2) your personal data are processed for direct marketing purposes, including profiling, to the extent that processing is related to such direct marketing. You can object by writing to the email address ulamex@ulamex.com.pl. For more information on how to exercise your rights as specified in point 13, you can contact the Administrator. The Administrator makes every effort to ensure all physical, technical, and organizational means of protecting personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, use, or access, in accordance with all applicable regulations. Terms of sending inquiries on the ULAMEX Steel Wholesale platform Sending an inquiry is possible only after receiving login details from ULAMEX Steel Wholesale To receive a quote, you must send a free inquiry through the http://www.ulamex.com/ platform Sending an inquiry does not imply placing and executing an order. After sending an inquiry, ULAMEX Steel Wholesale has a maximum of 7 days to accept the inquiry and send a quote for the goods. After receiving the quote, the customer decides whether to proceed with its execution. The customer has the right to resign from further execution of the quote. The quote for goods is valid for 3 days from the moment of its receipt. The cost of transporting goods is calculated individually for each inquiry. We reserve the right to reject a sent inquiry. The customer will be notified of the rejection electronically – via email. The Ulamex platform does not allow for the direct purchase of products. The customer agrees to the processing of personal data sent through the non-registration form on the website for verification and handling of the submitted inquiry.