Privacy Policy
1. Who processes your data
The data controller responsible for personal data collected through this website is Bihibi, operating from Nowe Sady 2, Łódź, Poland. For any question regarding this policy or your personal data, you may contact the controller at [email protected] or by phone at +48 796 569 392.
2. Legal basis for processing
Personal data submitted through the contact form, newsletter signup, or provided by phone or email is processed on the basis of Article 6(1)(a) of the General Data Protection Regulation (GDPR), namely consent, and where applicable Article 6(1)(b), for steps taken prior to entering into a contract, such as responding to an enrollment inquiry. Where retention is required by Polish accounting or tax law, Article 6(1)(c) applies.
3. What data is collected
Depending on how you interact with the site, the following categories of data may be collected: contact form data (name, company name, email address, phone number, and message content), newsletter data (email address), and technical data collected through cookies where consent has been given (browser type, approximate location derived from IP address, pages visited, and time spent on the site). No special categories of personal data under Article 9 GDPR are knowingly collected.
4. Purposes of processing
Data is processed to respond to inquiries submitted through the contact form, to send occasional newsletter content to subscribers who opted in, to maintain records required by Polish law for business correspondence, and, where analytics cookies are accepted, to understand general patterns of site usage in order to improve page content and structure.
5. Retention period
Contact form submissions are retained for as long as necessary to respond to the inquiry and for a reasonable period afterward for record-keeping, generally not exceeding twenty-four months unless a longer period is required by applicable Polish law. Newsletter email addresses are retained until the subscriber unsubscribes. Cookie-derived data is retained according to the periods described in the Cookie Policy.
6. Recipients of data
Personal data may be shared with service providers strictly necessary to operate the website, such as email delivery providers and, where analytics cookies are accepted, analytics service providers. These providers act as processors under data processing agreements and do not use personal data for their own purposes. Data is not sold to third parties.
7. International data transfers
Where a service provider is located outside the European Economic Area, transfers are carried out in reliance on appropriate safeguards recognized under GDPR, such as Standard Contractual Clauses adopted by the European Commission, or an applicable adequacy decision.
8. Your rights
Under the GDPR and the Polish Act of 10 May 2018 on the Protection of Personal Data, you have the right to access your personal data, request rectification of inaccurate data, request erasure, request restriction of processing, object to processing, request data portability, and withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).
9. Security measures
Reasonable technical and organizational measures are applied to protect personal data against unauthorized access, loss, or alteration, including restricted access to submitted inquiry data and use of secure connections for data transmitted through this site.
10. Changes to this policy
This Privacy Policy may be updated periodically to reflect changes in processing practices or legal requirements. The date at the top of this page indicates the most recent revision. Continued use of the website after an update constitutes acknowledgment of the revised policy.