Privacy Policy
Effective Date: May 28, 2025
1. GENERAL INFORMATION
This Privacy Policy defines the principles of processing and protecting personal data provided by Users in connection with using electronic services provided through the website sativa-lab.com (hereinafter: “Website”).
Data Controller: SATIVA LAB INTERNATIONAL Sp. z o.o.
Address: ul. Główna 14, 55-080 Gądów, Poland
E-mail: office@sativa-lab.com
Phone: +48 662 543 773
2. LEGAL BASIS FOR DATA PROCESSING
Personal data processing is carried out in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR)
- Polish Act of 10 May 2018 on personal data protection
- Polish Telecommunications Law Act of 16 July 2004
- Polish Copyright and Related Rights Act of 4 February 1994
3. TYPES OF PROCESSED DATA
3.1 Automatically collected data
- IP address
- Internet browser type
- Operating system
- Internet service provider
- Date and time of visits
- Pages from which the User came to the Website
- Pages that the User visits on the Website
3.2 Voluntarily provided data
- First and last name
- E-mail address
- Phone number
- Correspondence address
- Other data provided in contact forms or during registration
4. PURPOSES AND LEGAL BASES FOR PROCESSING
| Processing purpose | Legal basis (GDPR article) | Retention period |
|---|---|---|
| Providing electronic services | Art. 6(1)(b) (contract performance) | Until service completion |
| Handling contact inquiries | Art. 6(1)(f) (legitimate interest) | 3 years from last contact |
| Direct marketing | Art. 6(1)(f) (legitimate interest) | Until objection is raised |
| Newsletter | Art. 6(1)(a) (consent) | Until consent withdrawal |
| Fulfilling legal obligations | Art. 6(1)(c) (legal obligation) | According to legal provisions |
| Establishing and pursuing claims | Art. 6(1)(f) (legitimate interest) | Limitation period for claims |
5. DATA RECIPIENTS
Personal data may be transferred to the following categories of recipients:
- IT and hosting service providers
- Courier and postal companies
- Payment system providers
- Law firms and accounting companies
- Entities authorized under legal provisions
6. DATA TRANSFERS TO THIRD COUNTRIES
Personal data is not transferred to third countries or international organizations, except when necessary for service delivery (e.g., online payments) and based on appropriate legal safeguards.
7. DATA SUBJECTS’ RIGHTS
Under GDPR, you have the following rights:
7.1 Right of access (Art. 15 GDPR)
Right to obtain information about processed personal data and receive a copy of such data.
7.2 Right to rectification (Art. 16 GDPR)
Right to request correction of inaccurate personal data or completion of incomplete data.
7.3 Right to erasure (Art. 17 GDPR)
Right to request deletion of personal data (“right to be forgotten”).
7.4 Right to restriction of processing (Art. 18 GDPR)
Right to request restriction of personal data processing.
7.5 Right to data portability (Art. 20 GDPR)
Right to receive data in a structured, commonly used, machine-readable format.
7.6 Right to object (Art. 21 GDPR)
Right to object to personal data processing due to reasons related to your particular situation.
7.7 Right to withdraw consent
In case of consent-based processing, right to withdraw consent at any time.
Contact for exercising rights: E-mail: [TO BE COMPLETED]
Correspondence address: SATIVA LAB INTERNATIONAL Sp. z o.o., 55-080 Gądów 3G, Poland
8. COOKIES
8.1 Definition and types of cookies
The Website uses cookies – small text files stored on the User’s device.
Types of cookies used:
- Necessary cookies – enable the use of services available on the Website
- Functional cookies – allow remembering User-selected settings
- Analytical cookies – help understand how Users use the Website
- Advertising cookies – serve to display personalized advertisements
8.2 Cookie management
Users can change cookie settings in their web browser at any time. Disabling cookies may affect Website functionality.
9. ANALYTICAL TOOLS
The Website may use analytical tools such as:
- Google Analytics
- Facebook Pixel
- Other marketing tools
Detailed information about data processing by these tools is available in their providers’ privacy policies.
10. DATA SECURITY
The Controller implements appropriate technical and organizational measures to ensure the security of processed personal data, including:
- Data encryption during transmission (SSL)
- Restricted access to personal data
- Regular backups
- IT system monitoring
- Staff training on data protection
11. AUTOMATED DECISION-MAKING
The Controller does not make decisions in an automated manner, including profiling within the meaning of Art. 22 GDPR.
12. RIGHT TO LODGE A COMPLAINT
In case of violation of personal data protection regulations, you have the right to lodge a complaint with a supervisory authority:
President of the Personal Data Protection Office (Poland)
ul. Stawki 2, 00-193 Warsaw, Poland
Phone: +48 22 531 03 00
E-mail: kancelaria@uodo.gov.pl
For EU residents: You may also contact your local supervisory authority.
13. CHANGES TO PRIVACY POLICY
The Controller reserves the right to make changes to this Privacy Policy. Users will be informed about any changes through publication of the new policy version on the Website.
14. FINAL PROVISIONS
- Matters not regulated by this Privacy Policy are governed by GDPR and Polish law provisions
- This Privacy Policy is an integral part of the Website Terms of Service
- In case of discrepancies between different language versions of this Policy, the Polish version shall prevail
Last updated: May 28, 2025
Contact:
SATIVA LAB INTERNATIONAL Sp. z o.o.
ul. Główna 14, 55-080 Gądów, Poland
E-mail: office@sativa-lab.com
Phone: +48 662 543 773
