Legal Information
Privacy Policy
Last updated: February 24, 2026
This Privacy Policy describes the rules of personal data processing related to the use of the Colbiom website and contact channels.
1. Data Controller
The controller of personal data is Colbiom Sp. z o.o. with its registered office in Warsaw. Contact regarding personal data matters: info@colbiom.pl.
The controller processes data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Polish law.
2. Scope of Processed Data
We may process identification and contact data provided in forms and communication channels, including first and last name, email address, phone number, and message content.
We may also process technical data related to website usage, such as logs, browser information, and cookie identifiers.
3. Purposes and Legal Bases
Data is processed to handle inquiries, conduct communication, provide services, pursue legitimate interests of the controller, and fulfill legal obligations.
Legal bases include: consent (Art. 6(1)(a) GDPR), contract performance or pre-contractual actions (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), and legitimate interest (Art. 6(1)(f)).
4. Data Retention Period
Personal data is kept for the period necessary to achieve processing purposes, including correspondence handling, contract performance, and legal obligations.
After the retention period, data is deleted or anonymized unless further storage is required by law.
5. Data Recipients
Data may be shared with entities supporting website operation and business services, including hosting providers, IT service providers, and analytics providers.
Such entities process data on behalf of the controller based on relevant data processing agreements.
6. Data Subject Rights
You have the right to access your data, rectify it, erase it, restrict processing, transfer data, and object to processing in cases provided by law.
Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
7. International Transfers
If data is transferred outside the EEA, such transfer is based on legal safeguards required by GDPR, including adequacy decisions or standard contractual clauses.
Detailed information on transfer safeguards can be provided upon request.
8. Cookies and Complaints
The website may use cookies and similar technologies for technical, analytical, and functional purposes. You can manage cookie settings in your browser.
You have the right to lodge a complaint with the competent supervisory authority if you believe your data is processed unlawfully.