Personal data controller

The administrator of personal data is Bactotech Sp. z o.o., operating as a limited liability company, with its registered office at:

Kuczek 8P, 87-700 Aleksandrów Kujawski

e-mail: biuro@bactotech.pl

mobile number: 605 530 884

Scope of data processed

Personal data is processed only to the extent necessary for:

• implementation of the services offered,
• conducting email and telephone correspondence,
• handling of the contact form,
• Preparation of bids, contracts and settlements,
• maintenance of accounting records,
• Marketing of its own services – only if consent is given.

The processed data may include, in particular: name, e-mail address, telephone number, data on the performance of the service (e.g. place, date), IP address and information stored in cookies.

Legal basis for data processing

Personal data is processed in accordance with Article 6(1) of the RODO:

• Letter b – for the purpose of executing a contract or taking action prior to its conclusion,
• Letter a – on the basis of voluntarily given consent,
• Letter c – for the purpose of fulfilling legal obligations incumbent on the administrator (e.g. tax),
• Letter f – as part of the administrator’s legitimate interest (e.g. statistics, site security).

Recipients of data

Personal data may be transferred to entities that support the administrator in the operation of the site and activities, in particular:

• to the hosting and email provider,
• An accounting or bookkeeping firm,
• Technical service providers (e.g. online galleries, analytical tools),
• Companies providing technical support for the site (e.g. backup, mailing systems).

Data is not transferred outside the European Economic Area, unless the use of certain services (e.g. Google, Meta) involves such a transfer, in which case it is done on the basis of standard contractual clauses (SCC).

Data retention period

Personal data is stored:

• for the duration of the contact and up to 12 months after the contact ends,
• For the period required by law (e.g., accounting records – up to 5 years),
• Until the withdrawal of consent – in the case of data processed on the basis of consent.

Rights of data subjects

The data subject has the right to:

• access to their data,
• Their rectification, deletion or restriction of processing,
• data portability,
• to object to the processing,
• revoke consent at any time,
• to file a complaint with the President of the Office for Personal Data Protection (https://uodo.gov.pl).

The administrator does not use profiling or automated decision-making.

Cookies

The site uses cookies – small text files stored on the user’s device, which enable:

• Proper operation of the site and maintenance of sessions,
• analysis of visitor statistics,
• displaying content from external services (e.g. embedded videos).

Types of cookies used:

• Technical – necessary for the proper functioning of the site,
• Analytical – used to analyze how the site is used,
• Marketing / external – related to external tools (if used).

Users can manage cookies through their browser settings or through the consent banner available on the website.