This policy sets out how personal data is processed on the alexmedical.pl website and in correspondence handled by ALEX MEDICAL Sp. z o.o.
1. Data controller
The controller of your personal data is ALEX MEDICAL Sp. z o.o., registered office at ul. Pilska 9, 05-510 Konstancin-Jeziorna, Poland, entered in the National Court Register under number 0001221740, tax identification number (NIP) 123-159-7412, statistical number (REGON) 543904238.
For any matter concerning data processing, please write to biuro@alexmedical.pl.
2. Scope and purposes of processing
We process the personal data you provide voluntarily (name, email address, telephone number, name of the facility, position, and the content of your message) solely in order to:
- handle enquiries and reply to them (Article 6(1)(b) GDPR),
- conclude and perform a contract (Article 6(1)(b) GDPR),
- issue invoices and keep accounting records (Article 6(1)(c) GDPR),
- meet obligations under applicable law, including Polish medical device legislation (Article 6(1)(c) GDPR).
We also keep our own aggregate visit statistics (Article 6(1)(f) GDPR, legitimate interest: understanding which content is useful and developing the site). The server records the page visited, the domain of the referring site, the device type, the country derived from the IP address and a one-day encrypted hash created from the IP address and browser data. The IP address itself is not stored and the hash changes every day, so it cannot be used to follow a visitor across days. Statistics use no cookies and no browser storage.
3. Retention period
We keep personal data for as long as is necessary for the purpose it was collected for. For enquiries: up to 3 years from the last contact. For contracts: 5 years from the end of the calendar year, as required by Polish tax law. Visit statistics: 13 months, then deleted automatically.
4. Recipients of the data
Data may be disclosed to:
- providers of IT services (hosting, email), strictly to the extent necessary,
- our accounting office, to meet bookkeeping obligations,
- our law firm, in the event of a dispute,
- public authorities, where the law requires it.
5. Your rights
Under the GDPR you have the right to:
- access your data,
- have it rectified, erased or its processing restricted,
- data portability,
- object to processing,
- withdraw consent, where processing is based on it,
- lodge a complaint with the President of the Polish Personal Data Protection Office.
6. Cookies
The website uses strictly necessary cookies only. We use no analytics and no third-party advertising cookies. A separate Cookie policy is available at www.alexmedical.pl/en/cookie-policy.
7. Security
We apply technical and organisational safeguards: HTTPS encryption, access control for the administration panel, regular backups, and a restricted circle of authorised persons.
8. Changes and governing version
We reserve the right to update this policy; the current version is always available at this address. This English text is provided for convenience. In case of any discrepancy, the Polish version at www.alexmedical.pl/polityka-prywatnosci prevails.
Last updated: 14 October 2026.