Privacy Policy
Update Date: 01.10.2026
This Privacy Policy explains how the online shop operated byMETALPOINT sp. z o.o.processes personal data of people using the store, placing orders, creating an account or contacting the store.
1. Personal Data Administrator
The administrator of personal data isMETALPOINT sp. z o.o., Słowackiego 4, 46-022 Kępa, Poland, NIP: 9910547467. In matters concerning personal data and privacy, you can contact us at:zamowienia@metalpoint-sklep.pl.
2. What data may be processed
Depending on the manner of using the store, the following may be processed, in particular: name and surname, company name, billing address and delivery address, telephone number, e-mail address, tax identification number or other data necessary to issue a sales document, customer account data, information about orders and purchased products, the content of correspondence and information needed to handle complaints, returns or claims.
When using the store, technical data such as IP address, date and time of connection, address of the visited subpage, information about the browser and device, data stored in server logs and identifiers related to cookies or similar technologies may also be automatically processed – to the extent resulting from the user's settings and consents.
3. Purposes and legal bases of processing
Order and sales contract execution– the data is processed for the purpose of accepting the order, contacting regarding its execution, preparing the goods, payment, delivery and after-sales service. The basis is Article 6(1)(b) of the GDPR.
Customer Account– if the user creates an account, the data is processed for the purpose of creating and operating the account and providing its functions. The basis is Article 6(1)(b) of the GDPR.
Contact and handling inquiries– the data provided in a message, form, telephone conversation or other correspondence are used to respond and conduct further communication. If the contact concerns the conclusion or performance of a contract, the basis is Article 6(1)(b) of the GDPR, and in other cases, the legitimate interest of the administrator consisting in handling correspondence and responding – Article 6(1)(f) of the GDPR.
Settlements, taxes and accounting obligations– the data contained in sales and accounting documentation are processed in order to fulfil the obligations arising from the provisions of law. The basis is Article 6(1)(c) of the GDPR.
Complaints, returns and the establishment, pursuit and defence of claims– the basis for processing is the performance of obligations related to the contract or the legitimate interest of the controller consisting in the protection of its rights – Article 6(1)(b) and (f) of the GDPR.
Store security and fraud prevention– technical data and logs may be processed in order to ensure the security of the website, detect errors, prevent fraud and protect IT systems. The basis is Article 6(1)(f) of the GDPR.
Analytics– if the user gives appropriate consent, the data may be processed in order to measure traffic and the manner of use of the store, e.g. using Google Analytics. To the extent that analytics is related to the processing of personal data, the basis is consent – Article 6(1)(a) of the GDPR.
Marketing and measuring ad performance– after obtaining appropriate consent, the data may be used to measure advertising campaigns, remarketing, create audience groups and adjust advertising communication, e.g. using Google Ads or Meta Pixel. With regard to the processing of personal data, the basis is consent – Article 6(1)(a) of the GDPR.
4. Cookies and access to the user's device
The rules for saving information or accessing information stored on the user's device are specified in particular in the provisions of the Electronic Communications Law. Technologies necessary for the provision of the service may operate without additional consent in cases provided for by law. Analytical, marketing and other optional technologies are activated in accordance with the user's choice in the consent panel. Details can be found in the Cookie Policy.
5. Is it mandatory to provide data
Providing the data required when placing an order is necessary to conclude and perform a sales contract. The lack of such data may prevent the acceptance or execution of the order. Providing information in the contact form or during any other contact is voluntary, but the lack of data needed to respond may prevent the request from being processed. Consents for optional technologies are voluntary and are not a prerequisite for using the core features of the store.
6. Data recipients
The data may be made available to entities that support the administrator in running the store – only to the extent necessary to perform their tasks. These may include, in particular, hosting and IT infrastructure providers, entities maintaining or developing store software, payment operators, banks, courier and transport companies, entities providing accounting, legal or maintenance services, and providers of analytical and advertising tools, if the user has given the required consent.
Dane mogą być również przekazywane organom publicznym, jeżeli obowiązek taki wynika z przepisów prawa.
7. Google and Meta
If the corresponding services are activated in the shop and the user gives the required consent, data relating to the use of the website may be transferred to providers such as Google or Meta. The scope of the data may include, m.in others, online identifiers, device and browser data, information about the pages visited and events related to the use of the shop. The detailed data processing rules of these providers are also based on their own privacy policies.
8. Transfer of data outside the European Economic Area
Some providers of IT, analytics or advertising services may process data outside the European Economic Area. If such a transfer takes place, the controller uses the mechanisms provided for by the GDPR, appropriate for the respective provider and country, e.g. a decision of the European Commission determining the level of protection or standard contractual clauses with the required safeguards.
9. Data retention period
Data related to orders and the contract are stored for the period necessary to perform the contract, and then for the time necessary to comply with legal obligations and until the expiry of the periods in which claims can be pursued. Accounting and tax documentation is stored for the period required by the relevant regulations.
The data related to the contact is stored for the time necessary to handle the case, and if the correspondence may be relevant for the establishment, pursuit or defence of claims – also for the appropriate period of their limitation period. Technical data and logs are stored for the period justified by the security and proper operation of the store.
Dane przetwarzane na podstawie zgody są wykorzystywane do czasu jej wycofania lub do czasu wcześniejszego ustania celu przetwarzania, z zastrzeżeniem danych, które mogą być przechowywane w celu wykazania prawidłowego pozyskania i obsługi zgody.
10. Profilowanie i zautomatyzowane podejmowanie decyzji
If you consent to marketing technologies, providers of advertising tools may use information about your activity to create audiences, measure ads, or tailor ads. The store itself does not use this data to make decisions about you based solely on automated processing that would produce legal effects or similarly significantly affect you.
11. Rights of the data subject
On the terms set out in the GDPR, you may request access to your data, rectification, deletion, restriction of processing and, if the statutory conditions are met, data portability. If the processing is based on the legitimate interest of the controller, you may object to such processing.
If the basis for the processing is consent, it can be withdrawn at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal.
You also have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that your data is being processed in violation of the regulations.
12. Data security
The Administrator applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or destruction, taking into account the nature of the processed data and the risks associated with their processing.
13. Cookie policy
Detailed information on cookies and similar technologies, their categories, purposes and how to manage consents can be found in the Cookie Policy. Consent settings can be reopened using the "Manage consent" or "Privacy settings" link available in the store.
14. Changes to the Privacy Policy
The Policy may be updated in particular in the event of changes in the functioning of the store, the implementation of new services or technologies, or changes in regulations. The current version of the Policy is published on this page along with the date of the update.