1. Data controller
The data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) is:
GENETICVISION sp. z o.o.
ul. Legnicka 21A, 41-811 Zabrze, Poland
KRS 0001017870, NIP 6312710743, REGON 524389200
email: kontakt@geneticvision.pl
phone: +48 507 710 637
2. Scope of data processed
Through the contact form we process: full name, email address, optionally company name and phone number, message content and the IP address (for abuse protection).
3. Purpose and legal basis
We process the data to reply to inquiries submitted through the contact form. Legal basis:
- Art. 6(1)(f) GDPR — legitimate interest of the controller in handling an inquiry initiated by the contacting party.
- Art. 6(1)(b) GDPR — where the inquiry is pre-contractual, i.e. aimed at concluding a contract.
4. Data recipients
We entrust data processing to providers supplying the technical infrastructure of the site and email handling:
- Microsoft Corporation / Microsoft Ireland (Azure Static Web Apps, Azure Communication Services Email) — hosting and outbound email from the form.
- Cloudflare, Inc. (Turnstile) — form abuse protection; the mechanism runs without tracking cookies and without profiling.
5. Transfers outside the EEA
Data may be processed on our providers' servers located in the European Union. In the event of any transfer outside the EEA, Standard Contractual Clauses (SCC) are applied together with appropriate supplementary measures.
6. Retention period
We retain data from the form for the time needed to reply and to continue any subsequent commercial correspondence — no longer than 24 months from the last contact, unless a contract has been concluded, in which case data is retained in line with tax and accounting law.
7. Rights of the data subject
Every person has the right to access their data, to rectify it, to erase it, to restrict processing, to object to processing and to data portability. These rights can be exercised by writing to kontakt@geneticvision.pl. There is also the right to lodge a complaint with the Polish supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
8. Cookies and analytics
The site does not use tracking cookies or analytics tools in version 1.0. The only cookies that may be used are session cookies necessary for the site to function (form state) — they are not used for profiling. The Cloudflare Turnstile mechanism that protects the form is classified by the provider as exempt from the cookie consent requirement (no tracking, no profiling).
If analytics tools are introduced in future (e.g. Plausible or Cloudflare Web Analytics — both cookieless), this policy will be updated.
9. Updates
This policy may be updated. Any material change will be announced on this page together with the date of the change.