Privacy Policy
Last updated: February 10, 2026
1. Data Controller
The controller of your personal data is:
For matters related to personal data protection, you can contact us at: info@biopak.net.pl
2. Legal Basis for Processing
We process your personal data in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR)
- Polish Act of 10 May 2018 on the Protection of Personal Data
- Polish Act of 18 July 2002 on the Provision of Electronic Services
- Polish Act of 16 July 2004 - Telecommunications Law
3. Purposes and Legal Bases for Data Processing
We process your personal data for the following purposes:
a) Handling contact form inquiries
Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest)
Data scope: name, email address, phone number, company name, position, message content
Retention period: until the inquiry is resolved, then for the limitation period for claims (3 years)
b) Sending commercial and marketing information
Legal basis: Art. 6(1)(a) GDPR (consent)
Data scope: email address
Retention period: until consent is withdrawn
c) Website traffic analysis
Legal basis: Art. 6(1)(a) GDPR (consent)
Data scope: IP address, device information, browser, geographic location, visit time
Retention period: according to analytics tools policy (Google Analytics - 14 months)
d) Ensuring website security
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Data scope: server logs, IP address
Retention period: up to 12 months
4. Rights of Data Subjects
Under GDPR, you have the following rights:
- Right of access (Art. 15 GDPR) - the right to obtain information about processed data and a copy of your data
- Right to rectification (Art. 16 GDPR) - the right to request correction of inaccurate or completion of incomplete data
- Right to erasure (Art. 17 GDPR) - the right to request deletion of data ("right to be forgotten")
- Right to restriction of processing (Art. 18 GDPR) - the right to request restriction of data processing
- Right to data portability (Art. 20 GDPR) - the right to receive data in a structured format
- Right to object (Art. 21 GDPR) - the right to object to data processing
- Right to withdraw consent (Art. 7(3) GDPR) - the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal
- Right to lodge a complaint with a supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland)
To exercise the above rights, please contact us at: info@biopak.net.pl
5. Data Recipients
Your personal data may be transferred to the following categories of recipients:
- Hosting service providers (Vercel Inc. - USA, under Standard Contractual Clauses)
- Email service providers (Resend - USA, under Standard Contractual Clauses)
- Analytics service providers (Google LLC - USA, under Standard Contractual Clauses)
- Government authorities or other entities authorized under law
6. Data Transfers to Third Countries
Due to the use of services from entities based outside the European Economic Area, your data may be transferred to third countries (USA). Data transfers are based on:
- Standard Contractual Clauses approved by the European Commission (Art. 46(2)(c) GDPR)
- European Commission adequacy decisions (EU-US Data Privacy Framework)
7. Cookies
Our website uses cookies. These are small text files stored on your device.
Types of cookies used:
Necessary
Required for the website to function properly. These cannot be disabled.
Analytics
Allow us to analyze website traffic and improve its functionality (Google Analytics, Vercel Analytics).
Marketing
Used to display personalized advertisements and measure their effectiveness.
Functional (Preferences)
Remember your preferences and choices on the website.
On your first visit, we display a cookie banner where you can consent to or reject individual cookie categories.
8. Google Consent Mode V2
Our website uses Google Consent Mode V2, which adjusts Google services based on your cookie decisions. Depending on the consents given:
- ad_storage - storage of advertising-related data
- ad_user_data - sending user data to Google for advertising purposes
- ad_personalization - ad personalization
- analytics_storage - storage of analytics data
By default, all consents are denied until you actively provide consent.
9. Data Security
We implement appropriate technical and organizational measures to ensure the security of processed personal data, including:
- Data transmission encryption (HTTPS/TLS protocol)
- Regular software updates
- Restricted access to personal data
- Data backups
10. Automated Decision-Making
We do not make decisions based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect the data subject.
11. Voluntary Provision of Data
Providing personal data is voluntary but necessary to achieve certain purposes (e.g., responding to a contact form inquiry). Failure to provide required data will prevent the delivery of the service.
12. Changes to Privacy Policy
We reserve the right to make changes to this Privacy Policy. We will inform you of any changes by publishing the updated version on this page. We recommend regularly reviewing the Privacy Policy content.
13. Contact
If you have questions about this Privacy Policy or the processing of your personal data, please contact us:
BIOPAK Sp. z o.o.
Email: info@biopak.net.pl