Privacy and cookie policy

1. Data controller

The controller is Biovena Health Sp. z o.o., ul. Kolejowa 424, 05-092 Dziekanów Nowy, Poland, NIP 118-186-84-63, KRS 0000267601, REGON 14074593500000.

For data protection matters write to biuro@biovenahealth.com or call +48 22 896 38 05. We have not appointed a Data Protection Officer.

2. What data we process and why

• Email and phone correspondence — name, email address, phone number, company and message content, to reply to your enquiry and for possible business cooperation (Art. 6(1)(b) and (f) GDPR).
• AI advisor — the questions you type into the chat, used only to generate a reply and not linked to your identity. Please do not enter health or personal data (Art. 6(1)(f) GDPR).
• Technical data — IP address, browser type, time of visit, kept in server logs for security and operation of the site (Art. 6(1)(f) GDPR).
• Cookies — see section 6 (necessary: Art. 6(1)(f); others: consent, Art. 6(1)(a) GDPR).

3. Retention

Correspondence — as long as needed to handle the enquiry, then until claims become time-barred. Technical logs — up to 30 days. Cookie consent — until withdrawn, for no longer than 12 months, after which we ask again.

4. Recipients

Data may be shared only with providers supporting us technically: website hosting and infrastructure, email, the AI model provider powering the advisor and — with your consent — Google (maps). Some may process data outside the European Economic Area; in that case we rely on European Commission standard contractual clauses or an adequacy decision.

We do not sell personal data.

5. Your rights

• access to your data and a copy of it,
• rectification, erasure or restriction of processing,
• data portability,
• objection to processing based on legitimate interest,
• withdrawal of consent at any time (without affecting earlier processing),
• a complaint to the Polish supervisory authority, Prezes UODO (ul. Stawki 2, 00-193 Warsaw).

Providing data is voluntary, but we cannot reply without it. We do not make solely automated decisions or profile you.

6. Cookies

• Necessary — remember your cookie choice. No consent required.
• External content — Google Maps on the Contact page, loaded only after your consent; Google may then set its own cookies (see policies.google.com/privacy).
• Analytics — not currently used. If introduced (e.g. Google Analytics), they will run only with your consent and this policy will be updated.
• Marketing — not currently used, same rules as above.

Cookies are small files stored in your browser. We group them as follows:

7. Changes

We may update this document, e.g. when adding new tools. The current version is always available on this page.