This privacy policy sets out the rules for processing and protecting personal data provided by users in connection with the use of the BIOFRAME website, in accordance with GDPR (EU 2016/679) and the Polish Personal Data Protection Act.

1. Data controller

The controller of your personal data is BIOFRAME SYSTEMS ALEKSANDRA BOCZKOWSKA, ul. Ułowo 3 14-500 Ułowo. For matters regarding personal data you can contact us by e-mail: kontakt@bioframe.com.pl.

2. Purposes and legal basis for processing

Personal data are processed for the following purposes:

• providing website content and its proper operation — basis: legitimate interest (Art. 6(1)(f) GDPR);
• traffic analysis (Google Analytics, Facebook Pixel) after your consent — basis: consent (Art. 6(1)(a) GDPR);
• responding to enquiries sent via form or e-mail — basis: performance at your request / legitimate interest (Art. 6(1)(a) or (f) GDPR);
• establishing, pursuing or defending claims — basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Cookies and technical data

The website uses cookies and collects technical data (IP address, browser type, time on site) for:

• ensuring the website functions (essential cookies);
• traffic and usage analysis (Google Analytics, Tag Manager, Facebook Pixel) — only after your consent in the cookie banner;
• optimisation and security of the website.

Analytics scripts (GA, GTM, Facebook Pixel) are loaded only after you accept cookies in the consent banner. You may withdraw consent at any time by changing your browser settings or deleting cookies.

4. Your rights

You have the right to:

• access your data (Art. 15 GDPR);
• rectification (Art. 16 GDPR);
• erasure (Art. 17 GDPR);
• restriction of processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing (Art. 21 GDPR);
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Poland):

uodo.gov.pl

5. Data retention

Data are retained for as long as necessary for the purposes (e.g. duration of contract, claims, legal obligations). Server logs and analytics data are retained as per the respective service policies (e.g. up to 26 months in GA). After withdrawing cookie consent, analytics data are no longer collected.

6. Changes to this policy

This policy may be updated. We will inform you of material changes on this page. We recommend reviewing it periodically.

The binding version is the current policy published on this page. For the Polish market, the Polish language version prevails.