Privacy Policy

Polska wersja Polityki Prywatności jest dostępna tutaj.

This document sets out the rules for the processing of personal data of individuals using the services offered through this website (hereinafter: “Users”). This Privacy Policy constitutes an information clause compliant with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

I. DATA CONTROLLER

The controller of the personal data provided by Users is the operator of this website: Top BioMedical Expert sp. z o.o., with its registered office in Łódź.
For matters related to personal data, you may contact us by email at: ado@topbiomedical.expert.
The Controller maintains a register of personal data processing activities in accordance with Article 30 of the GDPR.

II. PERSONAL DATA PROTECTION

With regard to the protection of Users’ personal data, we act in accordance with Article 32(1) of the GDPR. Personal data is processed in compliance with data protection regulations and with the use of appropriate technical and organisational measures designed to ensure an adequate level of security and prevent accidental or unlawful destruction, loss, alteration, disclosure, or access.

Collected personal data is stored in a dedicated database located on a secure server. Access to this database is granted only to a limited number of authorised employees.
Please note that providing personal data is always voluntary, but may be necessary for the conclusion of a contract or provision of certain services.

III. PURPOSES OF PERSONAL DATA PROCESSING

Users’ personal data is processed for the following purposes:

concluding and performing contracts for services or products offered through the website,
provision of electronic services, including creating and maintaining user accounts and enabling order placement,
responding to questions, inquiries, and messages submitted via contact forms,
carrying out marketing activities, including sending information about offers, only based on prior consent,
analysing and improving the quality of services, e.g., through user satisfaction surveys.

Legal bases for the processing of personal data:

the data subject’s consent (Article 6(1)(a) GDPR),
performance of a contract or taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR),
legitimate interests pursued by the Controller or a third party, such as handling inquiries, ensuring website security, pursuing claims, or direct marketing (Article 6(1)(f) GDPR).

IV. RECIPIENTS OF PERSONAL DATA

Personal data may be shared with entities providing IT, accounting, hosting, and marketing services to the Controller—solely on the basis of data processing agreements and exclusively in relation to the Controller’s legitimate business purposes.
Data is not transferred outside the European Economic Area.

V. DATA RETENTION PERIOD

Personal data is stored for the period necessary to achieve the purposes of processing or until an objection is submitted, consent is withdrawn, or the contract expires.
Documents relevant to claims or tax obligations may be stored until the expiry of statutory limitation periods.

VI. RIGHTS OF THE DATA SUBJECT

Providing personal data is voluntary.
A User who has given consent to data processing has the right to:

access their data,
rectify data,
delete data (“right to be forgotten”),
restrict processing,
data portability,
object to processing,
withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

If the User believes that personal data is processed in violation of applicable law, they have the right to lodge a complaint with the supervisory authority (in Poland: the President of the Office for Personal Data Protection).

VII. CONTACT FORMS

Data submitted through contact forms is processed solely for handling inquiries and requests.
Data is not used for other purposes and is not shared with third parties without the User’s consent.

VIII. EXTERNAL LINKS

Any links to external websites included on this site—whether within the content, comments, or dedicated sections—are provided for informational purposes only and in good faith.
The Controller is not responsible for the content, availability, services, or privacy policies of external websites. Please be aware that the content of external sites may have changed since the link was posted.

IX. COOKIE POLICY

This Cookie Policy applies to the website and subpages of topbiomedical.expert.
By not changing your browser settings, you consent to the use of cookies in accordance with this Policy.

We use third-party services, including Google Analytics and Facebook. Details can be found at:
- Google: https://policies.google.com/privacy
- Facebook: https://www.facebook.com/policies/cookies/

These tools help us develop the website effectively while respecting User privacy.

Cookies are text files stored on the User’s device to enable the use of the website. They usually contain the website name, storage duration, and a unique identifier.
Cookies are used to:

a. customise website content to User preferences and optimise website use,
b. create statistics on website usage to improve structure and content,
c. maintain User sessions (after logging in), preventing the need to re-enter login details on each subpage.

We use two main types of cookies:
- session cookies – temporary, deleted upon logout or browser closure,
- persistent cookies – stored until expiry or manual deletion by the User.
Types of cookies used on the website:
- necessary cookies – enabling essential website functions,
- security cookies – detecting authentication abuses,
- performance cookies – analysing usage patterns,
- functional cookies – remembering User settings (language, region, font size),
- advertising cookies – delivering ads tailored to User interests.
Web browsers typically allow cookies by default. Users can change settings at any time to block cookies or receive alerts when cookies are placed. Instructions can be found in browser settings.
Restricting cookies may affect certain website features.
Cookies placed on User devices may also be used by service partners such as analytics or advertising providers.
Each browser offers options to block or delete cookies.