Privacy Policy
Last updated: 1 October 2026
This policy explains how BioActive T Sp. z o.o. uses personal data when you visit www.bioactivet.pl or contact us. A Polish version is available: Polityka prywatności.
Who is responsible for your data
The controller of your personal data is BioActive T Sp. z o.o., ul. Marii Rodziewiczówny 1/811, 04-187 Warszawa, Poland.
For any question about your data, write to info@bioactivet.pl or to the postal address above. We have not appointed a data protection officer.
What we use, why, and for how long
| Situation | Data | Purpose | Legal basis | How long we keep it |
|---|---|---|---|---|
| You send us an enquiry through the contact form, by email or by phone | First name, last name, email address, phone number if you give it, and the content of your message | To answer you and handle your request | Our legitimate interest in answering business enquiries addressed to us (Art. 6(1)(f) GDPR). If you ask us, acting for yourself, to take steps before entering into a contract with you: Art. 6(1)(b) GDPR | Up to 12 months after our last contact with you, unless the enquiry leads to cooperation |
| You or the company you represent work with us | Contact details of the people acting for the partner, correspondence, contract and settlement data | To conclude and perform the contract, keep our accounts, and establish or defend legal claims | Art. 6(1)(b) GDPR where you are the contracting party. Art. 6(1)(f) GDPR where you act for a company: our legitimate interest in performing the contract with it and in establishing or defending claims. Art. 6(1)(c) GDPR for tax and accounting records | For the term of the contract and then until claims become time-barred under the Polish Civil Code, as a rule 3 years for business claims and 6 years in other cases. Accounting records for 5 years from the start of the year after the financial year they concern. Tax records until the tax liability becomes time-barred |
| You visit this website | IP address, date and time, address of the page requested, browser and device information sent by your browser | To deliver the pages, keep the website secure and diagnose errors | Our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR) | Server logs are kept by our hosting provider for a limited period set by our hosting plan. Ask us for the current period |
In the contact form, first name, last name, email address and message are required. The phone number is optional. Giving us your data is voluntary, but without the required fields we cannot answer you.
We do not use your enquiry to send you marketing messages, and we do not sell personal data.
If we received your contact details from your employer or a business partner who named you as a contact person, we use your name, position, email address and phone number for the purposes in the second row of the table.
Who receives your data
We share personal data only with those who need it to provide the service:
- Vercel Inc. (United States) hosts this website and processes server logs.
- Resend (United States) delivers the message you send through the contact form to our mailbox and keeps a delivery log for up to 30 days.
- Microsoft Ireland Operations Limited (Ireland) provides our email mailboxes.
- BioActive T PHARMA LIMITED (United Kingdom), if we pass your enquiry to it because it concerns the United Kingdom. It then handles your data as a separate controller under its own privacy policy.
- Legal, tax and accounting advisers, and public authorities when the law requires it.
Vercel, Resend and Microsoft act as our processors under data processing agreements and may use the data only on our instructions.
Transfers outside the European Economic Area
Vercel and Resend are based in the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognised as adequate on 10 July 2023, and their data processing agreements include the European Commission's standard contractual clauses. Transfers to the United Kingdom are covered by a European Commission adequacy decision.
You can ask us for a copy of the safeguards that apply to a transfer.
Cookies and similar technologies
This website does not use cookies or similar technologies for analytics, advertising or profiling. It sets one cookie, and only after you close the cookie notice:
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| bat_consent | This website | Remembers that you have seen the cookie notice and what you chose, so we do not show the notice on every page | Up to 180 days |
The cookie exists to keep the setting you asked for when you closed the notice, so the notice does not come back on every page. It holds your choice, its date and a version number, nothing else. We keep it for up to 180 days, so that we ask again about twice a year. Some browsers may shorten this period, for example to seven days or less in Safari, and the notice then returns sooner. You can delete it in your browser settings at any time, and you can reopen the notice with the Cookie settings link at the bottom of every page.
If we add an optional tool in the future, such as visitor statistics, we will ask for your consent first and list the tool here, as required by Article 399 of the Polish Electronic Communications Law.
Your rights
You have the right to:
- get access to your data and receive a copy of it,
- have inaccurate data corrected,
- have your data erased when we no longer have a reason to keep it,
- have the processing restricted,
- object, on grounds relating to your particular situation, to processing based on our legitimate interest,
- receive the data you gave us in a common machine-readable format and have it sent to another controller, where we process it to perform a contract with you.
To use any of these rights, write to info@bioactivet.pl. We answer within one month.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.
Automated decisions
We do not make decisions based solely on automated processing, and we do not profile visitors or contacts.
Security
The website is served only over an encrypted connection. Access to enquiries is limited to the people at BioActive T who need it to answer you.
Changes to this policy
We update this policy when the way we use personal data changes. The date at the top shows the latest version.