Privacy policy

PRIVACY POLICY

Effective as of: 2025-05-17

Welcome to the Privacy Policy of Titanosteel (hereinafter referred to as “we”, “our”, or “Titanosteel”), available at www.titanosteel.com. This document outlines how we process your personal data when you interact with our website, purchase products, contact our team, or engage with us through digital or social platforms. We comply with the EU General Data Protection Regulation (GDPR) (2016/679) and relevant national laws.


1. Data Controller Contact Details

We may update this Privacy Policy without prior notice. Please check back regularly to ensure you remain informed.


2. When and Why We Process Your Personal Data

PurposeData ProcessedLegal BasisStorage Duration
Order fulfillmentFull name, shipping address, email, phone number, payment method, IP address, device infoContractual necessity (Art. 6(1)(b) GDPR)10 years (accounting rules)
Website performance and securityIP address, browser info, device ID, session logsLegitimate interest (Art. 6(1)(f))1 month; 10 years for security logs
Customer serviceName, email, phone, country, message content, attachmentsConsent (Art. 6(1)(a))10 years after last inquiry
Marketing & remarketingName, email, IP, ad interactions, previous ordersConsent / Legitimate interest5 years or until opt-out
Social media interactionProfile name, comments, reactions, private messagesConsent10 years after last interaction
RecruitmentCV, name, contact info, experienceConsent / Contract / Legitimate interest6 months after closure or 5 years with consent
Accounting complianceFull name, invoice details, bank/payment infoLegal obligation (Art. 6(1)(c))10 years
Legal defenseAll categories above + legal documentsLegal obligation / Legitimate interest10 years or until litigation ends

3. Data Recipients & Transfers

We may share your data with service providers under strict data protection safeguards:

  • Hosting providers, email & IT systems (EU/Global – SCCs applied)
  • Logistics & fulfillment partners (EU/Global – SCCs applied)
  • Payment processors & banks (Global – SCCs applied)
  • Customer support platforms (EU/Global)
  • Marketing & ad platforms (Google, Meta, etc.)
  • Legal advisors, auditors, compliance officers (EU-based)
  • Social media platforms (if interacting publicly or privately)

Transfers outside the European Economic Area (EEA) are protected using Standard Contractual Clauses (SCCs).


4. Your GDPR Rights

You have the right to:

  1. Access – request confirmation and a copy of personal data we hold;
  2. Rectify – correct inaccurate or incomplete data;
  3. Erase – request deletion of your data under specific grounds;
  4. Restrict – temporarily block processing of your data;
  5. Port – receive data in a portable format;
  6. Object – to direct marketing or legitimate interest-based processing;
  7. Withdraw Consent – at any time without affecting prior processing;
  8. Complain – to your national data protection authority (e.g. VVTAT in Lithuania);
  9. Non-discrimination – you will not receive unfair treatment for exercising your rights.

To exercise any of these rights, contact us at [email protected].


5. Cookies

Our website uses cookies for:

  • Functionality (e.g., session management, security)
  • Statistics (e.g., Google Analytics)
  • Marketing (e.g., Facebook Pixel, remarketing tags)

6. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.


7. Data Protection Contact

If you have questions, complaints, or requests regarding your personal data, reach out via:

Shopping Basket