Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we inform you that:
Data controller
ALEX MEDICAL Sp. z o.o.
ul. Pilska 9, 05-510 Konstancin-Jeziorna, Poland
NIP 123-159-7412 · KRS 0001221740 · REGON 543904238
Contact: biuro@alexmedical.pl
Purposes and legal bases
- Handling enquiries and customer contact: Article 6(1)(b) GDPR, steps taken prior to entering into a contract.
- Conclusion and performance of a supply or service contract: Article 6(1)(b) GDPR.
- Issuing invoices and keeping accounting records: Article 6(1)(c) GDPR in conjunction with the Polish Accounting Act.
- Meeting obligations under medical device legislation, including post-market surveillance and reporting to the Polish competent authority: Article 6(1)(c) GDPR.
- Direct marketing of our own products and services: Article 6(1)(f) GDPR, legitimate interest of the controller. You may object at any time.
Retention period
We keep data for as long as is necessary: contact details from enquiries for up to 3 years, contract data for 5 years from the end of the calendar year, and medical device service records for the period required by applicable law.
Recipients of the data
Data may be passed to IT service providers, our accounting office, our law firm, equipment manufacturers and public authorities where the law requires it, and in every case strictly to the extent necessary for the purpose.
Rights of the data subject
You have the right to:
- access your data (Article 15 GDPR),
- rectification (Article 16 GDPR),
- erasure (Article 17 GDPR), subject to our legal obligations,
- restriction of processing (Article 18 GDPR),
- data portability (Article 20 GDPR),
- object to processing (Article 21 GDPR),
- lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Voluntary nature of providing data
Providing your data is voluntary, but it is necessary in order to handle an enquiry, conclude a contract or meet obligations arising from the law.
Profiling
Your data is not subject to automated processing leading to profiling, nor to automated decision-making producing legal effects concerning you.
Exercising your rights
To exercise any of these rights, simply write to biuro@alexmedical.pl. We respond within 30 days. This English text is provided for convenience; in case of any discrepancy, the Polish version at www.alexmedical.pl/rodo prevails.
Last updated: 20 September 2026.