With reference to the entry into force on May 25, 2018 and the validity of the Act of August 29, 1997 on the protection of personal data (consolidated text of 13.06.2016, Journal of Laws of 2016 item 922) and in accordance with art. 28 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC, we inform that the controller of the Contractors’ personal data, including Contact Persons, are Bioti sp. z o. o., based in Warsaw, REGON 146679429, NIP: 5242759932. 

The Administrator appointed an inspector for personal data protection, which can be contacted by e-mail address:

The personal data of the Contractors and Contact Persons may be processed by the Administrator in order to conclude and perform commercial or service agreements, including cases where the data of the person acting in the interest and on behalf of the Contractor are required for the conclusion of the contract. The fulfillment of legal obligations incumbent on the Administrator results only from applicable law, including the civil code, tax law and accounting regulations.

The Administrator processes the following information: company name, forename and surname of the Contractors and Contact Persons, addresses of deliveries of goods or services, tax identification number, bank account number, signature, e-mail address provided for correspondence, telephone number (fax), contact history, inquiry submission history and inquiries about products.

Providing the data referred to mentioned above is voluntary and is not a statutory or legal obligation, but their lack will prevent the execution of specific actions on the part of the Administrator aiming at the conclusion and performance of commercial or service agreements provided by the Administrator.

The personal data of the Contractors and Contact Persons will be kept for the period in which claims related to the contract resulting from the provisions of the civil code may be disclosed, as well as for 5 years counted from the end of the calendar year in which the tax obligation arose, in accordance with the tax regulations.

The Administrator reserves the right to use data from publicly available information sources, e.g. trade registers, statistics organizations and official websites, in the data ranges published in an explicit manner.

Every person whose data is processed by the Administrator has the right to access their data, rectify data, limit their processing, stop further processing of data and enforce the right to be forgotten. To exercise the rights referred to mentioned above, please contact

The Administrator provides data to entities that support its activity, i.e. transport, courier and forwarding companies cooperating with the Administrator by providing the addresses of deliveries of goods and data of persons authorized to receive goods and the accounting firm. In each case of sharing personal data or the possibility of sharing such data, the Administrator uses organizational procedures and technical measures to minimize the scope of the data being shared and the risk of access to such data by persons other than the Administrator’s employees. The Administrator transfers personal data of Contractors and Contact Persons only to the extent necessary to achieve a specific purpose, in particular, does not share data with other entities for commercial purposes and does not sell personal data. The administrator will not process data in an automated way, including in the form of profiling. 

The counterparty has the right to lodge a complaint regarding the processing of personal data to the supervisory body.