Privacy Policy

Publication date: 15.05.2026 This Privacy Policy sets out the rules for processing the personal data of persons using the website www.drone4you.pl . The document contains the information required by the General Data Protection Regulation (GDPR) and takes into account the provisions of Polish law, including the Act of 7 October 2022 - Electronic Communications Law (PKE).

1. Personal data controller

The controller of your personal data is:

Biotronix Sp z o.o., with its registered office at: ul.Olchowa 15, 44-122 Gliwice, NIP 6312698775, REGON 389 529 644, KRS 0000912951 e-mail: info@biotronix.pl , tel: +48 731 751 111 (hereinafter: the "Controller" or "we").

2. Legal basis for data processing

Your personal data is processed in accordance with applicable law, including:

•Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),

•the Act of 10 May 2018 on the protection of personal data,

•the Act of 7 October 2022 - Electronic Communications Law (PKE), in particular Articles 398 and 399, regulating the rules for sending commercial information and using telecommunications terminal equipment and cookies.

3. Purposes, scope and legal bases of data processing

We process your data for the following purposes:

1. Conclusion and performance of a contract (e.g. processing orders, maintaining a customer account)

•Scope: first name, surname, e-mail address, correspondence address, NIP (if applicable), telephone number, payment data.

•Legal basis: Article 6(1)(b) GDPR (necessary for the performance of a contract).

•Storage period: until the expiry of the limitation period for claims arising from the contract.

2. Handling enquiries and correspondence (e.g. contact form, chat)

•Scope: data provided by you in the content of the enquiry (e.g. first name, surname, e-mail, telephone number).

•Legal basis: Article 6(1)(f) GDPR (the Controller's legitimate interest in maintaining contact with users).

•Storage period: until an objection is raised or the matter is resolved.

3. Fulfilment of legal obligations (e.g. accounting and tax obligations)

•Scope: data necessary to fulfil the obligation (e.g. invoice data: first name, surname, company, address, NIP).

•Legal basis: Article 6(1)(c) GDPR (legal obligation imposed on the Controller).

•Storage period: until the expiry of the period resulting from tax and accounting regulations.

4. Direct marketing (newsletter, commercial information)

•Scope: e-mail address, first name, surname, telephone number (if provided), IP address.

•Legal basis: Article 6(1)(a) GDPR (consent). In addition, pursuant to Article 398 PKE, sending commercial information electronically or using terminal equipment requires your prior consent.

•Storage period: until consent is withdrawn.

5. Establishment, pursuit and defence of claims

•Scope: data necessary to pursue or defend claims (e.g. identification data, contact details, transaction history).

•Legal basis: Article 6(1)(f) GDPR (the Controller's legitimate interest).

•Storage period: until claims become time-barred.

6. Analytics and statistics, offer personalisation (profiling)

•Scope: data on your behaviour on the website, IP address, data on orders and preferences.

•Legal basis: Article 6(1)(f) GDPR (legitimate interest consisting in improving the website) or Article 6(1)(a) GDPR (consent) - in the case of marketing profiling.

•Storage period: until an objection is raised or consent is withdrawn.

4. Data recipients

Your data may be transferred to entities that support us in providing services, e.g.:

•IT service providers (hosting, analytics services),

•courier companies and carriers (delivery of orders),

•accounting office, law firms (fulfilment of legal obligations, pursuit of claims),

•entities handling newsletters and marketing campaigns,

•entities providing analytics and advertising tools.

If data is transferred to third countries (e.g. the USA), we apply appropriate safeguards, such as standard contractual clauses.

5. Rights of data subjects

You have the following rights:

•Right of access to data (Article 15 GDPR) - to obtain information about processing and a copy of the data.

•Right to rectification of data (Article 16 GDPR) - to correct inaccurate or incomplete data.

•Right to erasure of data ("right to be forgotten", Article 17 GDPR) - to delete data when it is no longer needed or is processed unlawfully.

•Right to restriction of processing (Article 18 GDPR) - to restrict data processing in specific situations.

•Right to data portability (Article 20 GDPR) - to receive data in a structured format and transfer it to another controller.

•Right to object (Article 21 GDPR) - to object to data processing based on legitimate interest or to direct marketing.

•Right to withdraw consent (Article 7(3) GDPR) - you may withdraw consent at any time; this does not affect the lawfulness of processing before its withdrawal.

To exercise your rights, contact info@biotronix.pl . We will respond without undue delay, no later than within one month of receiving the request.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (https://uodo.gov.pl) if you believe that we process your data unlawfully.

6. Voluntary provision of data

Providing data is voluntary, but in some cases it is necessary for the performance of a contract or the provision of services (e.g. we cannot process an order without address data).

7. Automated decision-making and profiling

We may process data in an automated manner, including profiling, in order to tailor the offer or the presentation of advertisements to your preferences. Profiling does not produce legal effects concerning you or similarly significantly affect you without your consent.

8. Cookies and similar technologies

Pursuant to Article 399 PKE, before storing information or gaining access to information already stored on your device, we will inform you of the purpose and obtain your consent.

Cookies are small text files stored on your device. We use them to ensure the proper operation of the website, analyse traffic, and tailor content and advertisements. We use session cookies (deleted after closing the browser) and persistent cookies (remaining on your device until deleted).

We may use third-party cookies (e.g. Google Analytics, Meta Pixel, Microsoft Advertising) for analytical, advertising and marketing purposes. Detailed information about the privacy policies of these providers can be found on their websites.

You can manage cookie settings in your browser (block, delete). Failure to change the settings means consent to their use.

9. Changes to the Privacy Policy

The Privacy Policy may change, e.g. as a result of changes in regulations or the way services are provided. We will inform you of any significant changes through the website or by e-mail (if you have an account and have provided us with your e-mail address). We recommend that you regularly review the content of the Privacy Policy.