Privacy and cookies policy
How Investmed processes personal data and uses storage technologies on this website.
The controller is INVESTMED limited partnership, Grójecka 3G , 62-510 Konin. No Data Protection Officer has been appointed. Privacy enquiries may be sent to biuro@investmed.com.pl.
Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Website operation and security | Technical identifiers, security events and server logs. | Legitimate interests: secure and reliable service (Article 6(1)(f) GDPR). | Security logs: up to 30 days. |
| Contact and quotation handling | Contact details, organisation, selected products, quantities and message. | Steps before a possible contract (Article 6(1)(b)); legitimate interests for business representatives (Article 6(1)(f)). | Three years from submission, followed by anonymisation. |
| Email marketing | Name, email address and evidence of permission. | Consent (Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Law). | Until withdrawal; evidence for five years after withdrawal. |
| Telephone marketing | Name, telephone number and evidence of permission. | Consent (Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Law). | Until withdrawal; evidence for five years after withdrawal. |
| Website analytics | Online identifiers and information about use of the website. | Consent (Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law). | GA4 user-level data: up to 14 months. |
| Google Maps | IP address and browser information sent when the map is loaded. | Consent (Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law). | According to Google settings and terms; the map is not loaded before permission. |
| Anti-spam verification | Technical information and a transient reCAPTCHA token. | Legitimate interests: preventing automated abuse (Article 6(1)(f) GDPR). | The theme does not retain the token after verification. |
Data sources and required fields
Data is obtained directly from users through the contact and quotation forms. Providing contact details required by a form is voluntary but necessary for Investmed to answer the enquiry. Marketing permissions are optional and unchecked by default.
Recipients and international transfers
Data may be accessed by authorised Investmed staff and service providers supporting hosting, email delivery, IT security, analytics and legal or accounting services. Data may also be disclosed where required by law.
Google services may process data outside the European Economic Area. Where this occurs, Google declares that it uses the legal mechanisms applicable to the service, including adequacy decisions or standard contractual clauses.
Your rights
Depending on the legal basis and circumstances, you may request access, rectification, erasure, restriction or portability of data, object to processing based on legitimate interests and withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
- Send privacy requests to biuro@investmed.com.pl.
- You may lodge a complaint with the President of the Polish Personal Data Protection Office.
Automated decisions and policy changes
Investmed does not use the website data to make decisions producing legal or similarly significant effects and does not conduct such profiling.
Material changes to this policy will be published with a new version and update date.
Cookies and local storage
| Mechanism | Purpose | Duration |
|---|---|---|
| investmed_quote_selection_v1 | Keeps selected quotation items and quantities on the user’s device. | 30 days |
| investmed_privacy_consent_v1 | Remembers privacy and external-content preferences. | 180 days |
| GTM / GA4 identifiers | Optional analytics, created only after analytics permission. | According to GA4 settings, up to 14 months |