The informational obligation arises from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).
1. Data Controller and Purposes and Legal Bases:
The controller of your personal data is BIODUR SP. Z O.O. to the extent specified below. BIODUR SP. Z O.O. processes your personal data for the purpose of:
- enabling the provision of electronic services;
- resolving technical issues related to the provided service;
- handling complaints if you file such a complaint;
- handling inquiries directed to us (e.g., via the contact form);
- contacting you, including for purposes related to the provision of services;
- conducting marketing activities towards you, including direct marketing of BIODUR SP. Z O.O.’s own services;
- ensuring the handling of payment services;
- ensuring the security of the services we provide to you electronically, including enforcing compliance with BIODUR SP. Z O.O.’s internal rules, preventing fraud and abuse, and ensuring traffic security;
- handling your requests, particularly directed to the user support department and via the contact form when they are not directly related to the contract performance;
- organising loyalty programs, contests, and promotional actions in which you can participate;
- debt collection; conducting legal, arbitration, and mediation proceedings;
- conducting statistical analyses;
- storing data for archival purposes and ensuring accountability (demonstrating our compliance with legal obligations).
2. Data Recipients:
The recipients of your personal data will be entities authorised by law.
3. Retention Period:
Your personal data is stored:
- in the case of data processing necessary to fulfill our legal obligation, for the period specified by the relevant tax law for the expiration of tax liabilities;
- in the case of data processing to pursue our legitimate interest, until you object, subject to the necessity to process data until the end of the period necessary to establish, assert, or defend claims;
- in the case of data processing for direct marketing purposes, for a maximum of 5 years or until you withdraw your consent (if there is no other legal basis for processing) or object (we will cease processing your data for this purpose). Furthermore, for 10 years, we will retain proof of consent for evidentiary purposes – to demonstrate facts in case of potential claims related to improper data processing.
4. Rights Information:
You have the right to access your data content and the right to rectify, delete, restrict processing, transfer data, object to data processing, object to profiling, and withdraw any consent at any time; in the case of data processing for direct marketing purposes, including profiling, you have the right to object to data processing for direct marketing at any time. If you exercise this right, we will cease processing data for this purpose.
5. Right to Lodge a Complaint:
You have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing of your personal data violates GDPR provisions.
6. Right to Object:
You have the right to object at any time to the processing of your data based on the legitimate interest described above. We will cease processing your data for these purposes unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the data is necessary for establishing, exercising, or defending legal claims.
7. Withdrawal of Consent for Personal Data Processing:
You have the right to withdraw your consents at any time by sending an email, or if it is difficult for you, also by regular mail to the following addresses:
- In the case of email: info@biodur.pl;
- In the case of regular mail: Biodur Sp. z o.o., Elektronowa 2E, 2nd floor, 03-219 Warsaw.