Privacy and Cookie Policy.

I. General provisions.

1. The controller of personal data collected through the website www.pharmbicon.com is PHARMBICON, ul. Słoneczna 105B/72, 05-500 Stara Iwiczna, NIP (tax identification number): 7371122445, hereinafter referred to as the Controller.
2. The Controller may be contacted by email at admin@pharmbicon.com or by post at the address above.
3. Users' personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Personal Data Protection Act.
4. The Controller takes particular care to protect the interests of data subjects and, in particular, ensures that the data collected are processed lawfully.

II. Purposes, legal bases and retention periods.

Personal data may be processed for the following purposes:

• Handling contact form submissions or email enquiries:
  • Legal basis: Article 6(1)(f) GDPR, namely the Controller's legitimate interest in handling correspondence and responding to enquiries.
  • Retention period: for the time necessary to conclude the correspondence or until an effective objection is raised.
• Providing services or performing contracts, where applicable, e.g. an order placed through the website:
  • Legal basis: Article 6(1)(b) GDPR, namely processing necessary for the performance of a contract.
  • Retention period: for the duration of the contract and until any potential claims become time-barred.
• Sending a newsletter, if the website offers one:
  • Legal basis: Article 6(1)(a) GDPR, namely the User's freely given consent.
  • Retention period: until the User withdraws consent.
• Website traffic analytics and statistics:
  • Legal basis: Article 6(1)(f) GDPR, namely a legitimate interest in optimising website performance and marketing.
  • Retention period: according to the lifespan of the cookies, ranging from a few sessions to a maximum of a dozen or so months.

III. Data recipients.

To ensure the proper functioning of the website, personal data may be entrusted to third parties working with the Controller:

• hosting and email service providers;
• analytics service providers, e.g. Google LLC in connection with Google Analytics, if such a tool is used;
• mailing system providers, in the case of newsletter subscriptions.

IV. Users' rights.

Every data subject has the right to:

1. access their personal data and receive a copy;
2. rectify, i.e. correct, their data;
3. have their data erased, i.e. exercise the right to be forgotten;
4. restrict processing;
5. transfer their data to another controller;
6. object to processing based on the Controller's legitimate interest;
7. withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
8. lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (UODO) in Poland, if the User believes that the processing infringes the GDPR.

Providing personal data is entirely voluntary, but in some cases, such as using the contact form, it is necessary for the provision of the service.

V. Cookies.

1. The website uses cookies. These are small text files stored on the User's device.
2. Cookies are used to:
   • ensure the proper functioning and security of the website (necessary cookies);
   • adapt website content to the User's preferences (functional cookies);
   • compile visitor statistics (analytics cookies).
3. The User may change cookie settings at any time in their web browser or through the cookie consent banner displayed on the website. Disabling necessary cookies may adversely affect the functioning of the website.

VI. Final provisions.

1. The Controller reserves the right to amend this Privacy Policy for important reasons, such as changes in law or technological developments.
2. A new version of this document will be published on the website together with its update date.