Data Protection

Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller for this website is Olympia Biosciences™ Sp. z o.o. (trading as Olympia Biosciences™), with registered office at 20 Polska St., 81-339 Gdynia, Poland. VAT: PL9571026227. You may contact us at:

IOC Sp. z o.o. — Olympia Biosciences™

20 Polska St., 81-339 Gdynia, Poland

contact@olympiabiosciences.com

+48 58 710 24 64

2. Data We Collect

When you use our website or contact us, we may collect the following categories of personal data:

  • Contact details: name, email address, phone number, company name.
  • Technical data: IP address, browser type, pages visited, time on site (via server logs).
  • Communication data: content of messages you send us via the contact form or email.

3. Purposes and Legal Basis

Responding to enquiries

Legal basis: Article 6(1)(b) GDPR — performance of a contract or pre-contractual steps.

Website operation and security

Legal basis: Article 6(1)(f) GDPR — legitimate interest in maintaining website functionality and security.

Legal compliance

Legal basis: Article 6(1)(c) GDPR — compliance with legal obligations.

4. Data Retention

Contact enquiry data is retained for the period necessary to respond to your enquiry and up to 3 years thereafter for follow-up purposes. Technical server logs are retained for up to 12 months. Data retained for legal compliance purposes is kept for the period required by applicable law (typically 5 years for commercial records under Polish law).

5. Your Rights

Under the GDPR you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to lodge a complaint with the Polish supervisory authority (UODO)

To exercise your rights, contact us at contact@olympiabiosciences.com.

6. Cookies

This website uses cookies. For detailed information about how we use cookies, please see our Cookie Policy.

7. International Transfers

Your data is processed within the European Economic Area. Where we use third-party service providers outside the EEA, we ensure adequate safeguards are in place in accordance with Chapter V of the GDPR.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the Polish supervisory authority (UODO) without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR. Where the breach is likely to result in a high risk to individuals, we will also communicate the breach to the affected data subjects without undue delay, in accordance with Article 34 GDPR.

To report a potential security incident or data breach, please contact us immediately at contact@olympiabiosciences.com.

9. California Residents — CCPA Rights

If you are a resident of California, USA, you have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA):

  • Right to Know — the categories and specific pieces of personal information we collect, use, disclose, and sell.
  • Right to Delete — request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale — we do not sell your personal information to third parties.
  • Right to Non-Discrimination — we will not discriminate against you for exercising your privacy rights.
  • Right to Correct inaccurate personal information we hold about you.

To exercise your CCPA rights, contact us at contact@olympiabiosciences.com. We will respond within 45 days.

10. Canadian Residents — PIPEDA

If you are a resident of Canada, your personal data is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access the personal information we hold about you, to challenge its accuracy, and to withdraw consent for its use. We collect, use, and disclose personal information only with your knowledge and consent, except where permitted or required by law, and only for purposes that a reasonable person would consider appropriate.

To exercise your rights under PIPEDA, contact us at contact@olympiabiosciences.com.