Privacy Policy – BIOMAK Sp.j.

1. Data administrator

The administrator of personal data is:

BIOMAK Sp.j. Sylwester Kiełbowski and Karol Kiełbowski

Słońskiego 13 Street, 05-820 Piastów

Tax Identification Number (NIP): 534-14-50-244,

National Business Registry Number (REGON): 012375156

Contact: biomak@biomak.pl

2. Purposes and legal bases for data processing

Personal data is processed for the following purposes:

a) Order fulfilment (contract)

legal basis: Article 6(1)(b) of the GDPR

b) Handling complaints and customer contact

legal basis: Article 6(1)(b) and (f) of the GDPR

c) Legal obligations (e.g. accounting)

Legal basis: Article 6(1)(c) of the GDPR

d) Marketing (newsletter)

Legal basis: Article 6(1)(a) of the GDPR (consent)

e) Analysis and statistics (e.g. Google Analytics)

legal basis: Article 6(1)(f) of the GDPR

3. Scope of data processed

We process, among other things:

first name and surname

email address

telephone number

delivery address

invoicing details (VAT number, company name)

4. Recipients of the data

The data may be disclosed to:

courier companies

payment service providers

an accounting office

IT and hosting service providers

analytics companies (e.g. Google Analytics)

5. Transfer of data outside the EEA

Due to the use of tools such as Google Analytics, data may be transferred outside the European Economic Area (e.g. to the USA).

This is carried out on the basis of appropriate safeguards in accordance with the GDPR.

6. Data retention period

Data is retained:

for the duration of the contract

for the period required by law

until consent is withdrawn (marketing)

until claims become time-barred

7. User rights

You have the right to:

access your data

rectify your data

erase your data

restrict processing

data portability

object to processing

withdraw consent

You also have the right to lodge a complaint with

the Office for Personal Data Protection

8. Voluntary provision of data

The provision of data is voluntary, but necessary for the fulfilment of your order.

9. Cookies

The website uses cookies for the following purposes:

to ensure the shop functions correctly

to maintain the user’s session

to analyse traffic (Google Analytics)

Cookies may be:

session cookies (temporary)

persistent cookies

Users can manage cookies via their browser settings.

10. Server logs

When using the website, technical data may be collected:

IP address

browser

operating system

11. Data security

The controller implements appropriate technical and organisational measures to protect personal data, in particular:

connection encryption (SSL)

server security

data access control

12. Profiling

Personal data is not used for automated decision-making, including profiling, which would produce legal effects concerning the user or similarly significantly affect them.

13. Changes to the privacy policy

The privacy policy may be updated.

The new version will be published on the website.