1. Data Controller
The controller of your personal data is Best Tools LTD, a limited liability company with identification number 446989894, registered on 14 February 2023 by the National Agency of Public Registry of Georgia, with its registered office at Andria Apakidze Street N7, Floor 1, Saburtalo, Tbilisi, Georgia. PRESS-STEEL is a trademark of Best Tools LTD.
You can reach us at:
- general enquiries: info@press-steel.pl
- personal data requests: privacy@press-steel.pl
Given the scale and nature of the processing we carry out, we are not required to appoint a Data Protection Officer, and none has been appointed. All data protection matters are handled directly through the address privacy@press-steel.pl.
2. Scope of This Policy
This policy applies to the website press-steel.pl and describes how we handle personal data collected through it. The website is hosted on a server located in the European Union (France), operated by Contabo GmbH (Germany).
The website is addressed to a business audience. We do not knowingly collect data relating to children, and nothing on this site is directed at them.
3. What Data We Process
We only process the data you give us and a limited set of technical records generated when you use the site:
- Quote request form — first and last name, company name (optional), e-mail address, telephone number (optional), city (optional), the text of your message (optional), and your consent mark. When the form is submitted, we also record the IP address, browser (user agent), the page from which the form was sent, the referring page address (referrer), advertising-campaign tags present in the page address (UTM), the browser language, and the date and time of submission.
- Correspondence — the content of e-mails you exchange with us in connection with your enquiry.
- Server logs — standard technical records kept by the web server for security and troubleshooting purposes.
- Visitor statistics — aggregated usage data collected by our self-hosted analytics tool, as described in section 5. These statistics do not identify individual visitors. If you consent, website usage statistics are also collected by Google Analytics: identifiers stored in cookies, pages viewed and the source of the visit.
4. Purposes and Legal Bases
We process personal data for the following purposes and on the following legal grounds:
- Responding to your quote request and preparing a commercial offer — Article 6(1)(b) GDPR: taking steps at your request prior to entering into a contract. Where you write to us as a representative of a company, the legal basis is Article 6(1)(f) GDPR: our legitimate interest in conducting business-to-business correspondence.
- Keeping the website secure and operational (server logs) — Article 6(1)(f) GDPR: our legitimate interest in maintaining the security and stability of the site.
- Measuring how the website performs (aggregated statistics) — Article 6(1)(f) GDPR: our legitimate interest in understanding how the site is used.
- Attributing your enquiry to the marketing source or campaign that brought you to the site (referring page address, UTM tags) — Article 6(1)(f) GDPR: our legitimate interest in measuring the effectiveness of our marketing.
- Measuring how our ads perform in Google Ads and website usage statistics in Google Analytics — Article 6(1)(a) GDPR: your consent given in the banner, which you can withdraw at any time.
5. Cookies and Similar Technologies
By default, this website sets no cookies. The only cookie we set regardless of your choice is ps_consent — a first-party cookie that remembers the choice you make in the consent banner. It is stored for 12 months, is set only at the moment you make a choice, exists solely to honour your decision, and does not track you. We also keep a record of your choice on our server (date, selection, consent banner version), retained for 3 years, so that we can demonstrate consent (Art. 7(1) GDPR).
For visitor statistics we use Umami, an analytics tool installed on our own server. Umami does not use cookies, does not build visitor profiles, and does not pass data to third parties. It collects only aggregated statistics — pages viewed, referral source, device type, and country — and the full IP address is never stored.
Once you give your consent, the following cookies are used:
| Name | Provider | Purpose | Storage period |
|---|---|---|---|
| _gcl_au | Google Ireland Limited | Attributing an enquiry to an ad click (conversion measurement) | 90 days |
| _ga, _ga_* | Google Ireland Limited | Website usage statistics (Google Analytics) | up to 2 years |
The website shows a consent banner. Google Ads — used solely to measure how our ads perform — starts only after you consent; until then we neither load its scripts nor store its cookies. We do not use it for ad personalisation or for building remarketing lists. Consent for website usage statistics in Google Analytics is asked separately: you can give either consent independently of the other. The legal basis is your consent — Article 6(1)(a) GDPR and Article 5(3) of the ePrivacy Directive as implemented locally. You can change or withdraw your choice at any time via the “Cookie settings” link in the site footer — withdrawing consent is as easy as giving it.
6. Recipients and Processors
Your data is disclosed only to the service providers we use to run the website:
- Contabo GmbH (Germany) — hosting provider; the server is located in France;
- Cloudflare Inc. — content delivery network, DNS, and e-mail routing;
- Google — provider of the company's e-mail services. Notifications about form submissions are forwarded to the company's work mailboxes operated by Google.
- Google Ireland Limited — measurement of Google Ads performance and Google Analytics statistics; data about your visit reaches it only if you consent.
For ad performance measurement, Google acts as an independent controller of the data collected through its own cookies, not as a processor acting on our instructions. For Google Analytics, Google processes the data on our behalf, as a processor.
We do not sell personal data and we do not share it with anyone for their own marketing purposes.
7. Data Transfers Outside the EEA
Two situations involve data leaving the European Economic Area:
- Transfer to the controller in Georgia. Best Tools LTD is established in Georgia. By sending an enquiry through the website, you transmit your data directly to the controller. Access by our staff is limited to what is necessary to respond to your request.
- Service providers established in the United States. Cloudflare Inc. and Google LLC — this also covers data collected, once you consent, by Google Ads and Google Analytics — process data on the basis of the EU-U.S. Data Privacy Framework, with the European Commission's Standard Contractual Clauses (SCCs) in place as a fallback safeguard.
8. Retention Periods
We keep personal data no longer than necessary for the purposes described above:
| Category of data | Retention period |
|---|---|
| Quote requests and related correspondence | 24 months from the last contact |
| Server logs | 30 days |
| Backup copies | 14 days |
| Visitor statistics (self-hosted tool) | Kept in aggregated form only, without a time limit |
| Google Analytics statistics | 14 months |
9. Your Rights and How to Exercise Them
Under the GDPR you have the right to:
- access your personal data and obtain a copy of it;
- have inaccurate data rectified;
- have your data erased;
- restrict the processing of your data;
- receive your data in a portable format;
- object to processing based on our legitimate interest, including objecting at any time to direct marketing;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7(3) GDPR).
To exercise any of these rights, write to privacy@press-steel.pl. We will respond within one month of receiving your request, as provided by Article 12(3) GDPR.
10. Right to Lodge a Complaint
If you believe that we process your personal data in breach of the GDPR, you have the right, under Article 77 GDPR, to lodge a complaint with a supervisory authority in any European Union member state — in particular in the state where you live, where you work, or where the alleged infringement took place. This includes, among others:
- Prezes Urzędu Ochrony Danych Osobowych (Prezes UODO) — Poland (uodo.gov.pl);
- Úřad pro ochranu osobních údajů (ÚOOÚ) — Czech Republic (uoou.cz);
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — Romania (dataprotection.ro).
11. Changes to This Document
We may update this policy when our services, the tools we use, or the applicable law change. Material changes will be announced on this page, and the version number and date below will always tell you which edition you are reading.
Version 2.5, dated 27 August 2026. This version replaces version 2.4. It adds Google Analytics to sections 4, 5, 6, 7 and 8; consent for statistics is independent of consent for ad performance measurement.