Legal

Privacy Policy

Last updated: July 2026

This Privacy Policy explains what personal data Global Metal Info (“the Site”, “we”, “us”) collects, why, and what rights you have, in line with the EU General Data Protection Regulation (GDPR / RODO) and applicable Polish data protection law.

1. Data controller

The data controller responsible for your personal data is:

Marcin Kwiecinski
P.O. Box 29
22-103 Chelm 4
Poland
Email: globalmetalinfo666@gmail.com

For any question about this policy or about your data, please use the contact details above or the Contact page.

2. What data we collect, and why

2.1 Contact form & order requests

When you use the contact form or request an archived magazine issue, we collect the name, email address and message you provide. We use this data solely to respond to your enquiry or fulfil your request. The legal basis is your consent (given by submitting the form) and our legitimate interest in handling correspondence. We keep this data only for as long as necessary to deal with your enquiry, and delete it afterwards unless we are required to keep it longer for legal or accounting reasons.

2.2 Server & security logs

Like most websites, our hosting provider automatically records basic technical information for every visit — such as IP address, browser type, referring page, and date/time — in server log files. This happens for every visitor, regardless of cookie consent, and is used only to operate, secure and troubleshoot the Site. The legal basis is our legitimate interest in keeping the Site secure and functioning correctly.

2.3 Cookies & embedded content

We use the following categories of cookies:

  • Strictly necessary cookies — e.g. the cookie that remembers your cookie-consent choice itself. These do not require consent, as the Site cannot function properly without them.
  • Third-party embedded content — some pages embed YouTube videos (via YouTube's privacy-enhanced youtube-nocookie.com mode, which avoids setting cookies until you actually press play) and load web fonts from Google Fonts. Loading a Google Fonts file transfers your IP address to Google's servers, even though no cookie is set. Playing an embedded YouTube video can set cookies from Google/YouTube on your device. These happen only where you interact with that content, and — where applicable — only after you accept cookies in the banner shown on the Site.
  • No advertising or analytics cookies are currently used on the Site. If this changes in the future, this policy will be updated accordingly and, where required, we will ask for your consent again.

You can accept or limit cookies to the necessary ones via the cookie banner shown on your first visit, and change your choice at any time using the small 🍪 button in the corner of the page. You can also block or delete cookies in your browser settings — see aboutcookies.org for browser-specific instructions. Note that blocking all cookies may affect how some parts of the Site work.

2.4 Comments

Comments are disabled site-wide, so we do not collect or store any comment data.

3. Who we share data with

We do not sell your personal data. It may be processed by:

  • Our website hosting provider, to store the Site and any submitted form data;
  • Our email delivery provider (for example, Google/Gmail, when used as the outgoing mail server for the contact form), to deliver emails you send us or that we send you in response;
  • Google, for Google Fonts (font delivery) and YouTube (video embeds), each acting as an independent data processor/controller for their own services;
  • Authorities, where required by law.

4. International data transfers

Some of the third parties above (notably Google) may process data outside the European Economic Area, including in the United States. Where this occurs, it is done under an appropriate legal safeguard, such as the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism offered by the provider.

5. How long we keep your data

We keep contact-form and order-request data only for as long as needed to handle your enquiry and any follow-up, then delete it. Server logs are typically rotated and deleted automatically by our hosting provider after a limited period. We do not keep personal data for longer than necessary for the purposes described in this policy, unless a longer period is required by law.

6. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate or incomplete data;
  • request erasure of your data (“right to be forgotten”);
  • request restriction of processing in certain circumstances;
  • object to processing based on our legitimate interest;
  • request a portable copy of the data you provided to us;
  • withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us using the details in section 1. You also have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office)
ul. Stawki 2, 00-193 Warszawa, Poland
uodo.gov.pl

7. Security

We take reasonable technical and organisational measures to protect the personal data we handle against loss, misuse and unauthorised access. However, no method of transmission or storage over the internet is 100% secure, and we cannot guarantee absolute security.

8. Children's privacy

The Site is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the services we use or in the law. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.