Effective Date: 1 st October 2024

Introduction

Steel.Bid, owned and managed by Blu Steel Solutions SLU ("we," "our," or "us")
is committed to protecting your privacy and ensuring that your personal data is
handled in compliance with applicable data protection laws, including the
General Data Protection Regulation (EU) 2016/679 ("GDPR"). This Privacy
Policy explains how we collect, use, disclose, and safeguard your personal
information when you use our platform and services.

By accessing or using Steel.Bid platform, you agree to the collection and use of
information in accordance with this Privacy Policy. If you do not agree, please
do not access or use our services.

1. Data Controller
For the purposes of the GDPR and other applicable data protection laws, the
Data Controller responsible for your personal data is:
SteelProc
Company Name: Blu Steel Solutions SL
Company Address: Avenida Europa 26, Atica 5, Piso 2
28224 – Pozuelo de Alarcon – Comunidad de Madrid
Spain
CIF B19430511
Email: info@blusteel.eu
We may collect the following types of personal data from you:

– Personal Information: Name, email address, phone number, company details,
and any other data necessary for account creation or order processing.
– Payment Information: Financial data for transactions (e.g., credit card
information or bank details), stored securely with third-party payment
processors.

– Usage Data: Information about how you use our platform, including IP
address, browser type, and interaction logs, collected via cookies or other
tracking technologies.

3. How We Use Your Data
We process personal data for the following purposes:
– To provide and improve our services: Your personal data allows us to manage
your account, process orders, and respond to inquiries.
– To comply with legal obligations: We may process your data to comply with
legal requirements, such as tax, anti-fraud, and accounting laws.
– For marketing purposes: With your explicit consent, we may send promotional
materials about our services and products. You can opt out at any time by
clicking "unsubscribe" in any email communication.

4. Legal Basis for Processing Personal Data
We rely on the following legal grounds under the GDPR to process your
personal data:
– Performance of a contract: Processing necessary to fulfill our contractual
obligations, such as processing payments or delivering products/services.
– Legitimate interests: To improve our services, prevent fraud, and ensure the
security of our platform.
– Consent: We will only process your data for marketing purposes with your
explicit consent.
– Legal obligation: Processing your data to comply with legal requirements.

5. How We Share Your Data
We do not sell or rent your personal data. However, we may share your
information with:

– Service providers: Trusted third parties who help us provide services, such as
payment processors, IT service providers, and analytics services.
– Legal authorities: If required to do so by law or to protect our legal rights.

– Business transfers: In the event of a merger, acquisition, or sale of our
business, your data may be transferred to the new owner.

6. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes
outlined in this Privacy Policy or as required by law. Once your data is no longer
needed, we will delete or anonymize it.

7. Your Rights Under the GDPR
You have several rights concerning your personal data under the GDPR:

– Right to access: You can request information on how your data is processed
and a copy of your personal data.
– Right to rectification: You can ask us to correct any inaccuracies in your
personal data.
– Right to erasure ("right to be forgotten"): You can request the deletion of your
personal data under certain circumstances.
– Right to restrict processing: You can request that we limit how we use your
personal data.
– Right to data portability: You can request that we provide your personal data in
a structured, commonly used, and machine-readable format.
– Right to object: You can object to the processing of your data for certain
purposes, such as direct marketing.
– Right to withdraw consent: If you’ve provided consent for processing, you can
withdraw it at any time.

To exercise any of these rights, please contact us at [Insert Contact Email]. We
will respond within one month of receiving your request, as required by the
GDPR.

8. Data Security
We take appropriate security measures to protect your personal data from
unauthorized access, disclosure, alteration, or destruction. These measures
include encryption, firewalls, and secure data storage practices. However,

please note that no method of transmission over the internet or method of
electronic storage is completely secure.

9. International Data Transfers
If you are located within the European Economic Area (EEA), your personal
data may be transferred to countries outside of the EEA that may not have the
same level of data protection laws. In such cases, we will ensure that
appropriate safeguards are in place to protect your data, such as the use of EU-
approved standard contractual clauses.

10. Cookies and Tracking Technologies
We use cookies and similar technologies to collect usage data, improve your
experience, and analyze traffic. You can control cookie preferences through
your browser settings. For more information on how we use cookies, please see
our [Cookie Policy].

11. Third-Party Links
Our platform may contain links to third-party websites that are not operated by
us. We have no control over and assume no responsibility for the content,
privacy policies, or practices of any third-party sites.

12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to legal,
technical, or business developments. When we update our Privacy Policy, we
will take appropriate measures to inform you, consistent with the significance of
the changes we make. Please check this page periodically for any updates.

13. Contact Us
If you have any questions or concerns about this Privacy Policy or how we
handle your personal data, please contact us:

Email: info@blusteel.eu
Address: Avedina Europa 26, Atica 5, Piso 2

28224 – Pozuelo de Alarcon – Comunidad de Madrid

Spain