Legal Information
GDPR Information Clause
Last updated: February 24, 2026
This GDPR information clause explains how Colbiom processes personal data in connection with communication and business relations.
1. Controller and Contact
The controller of your personal data is Colbiom Sp. z o.o., ul. Marywilska 26, 03-228 Warsaw, Poland.
For all data protection matters, contact: info@colbiom.pl.
2. Categories of Data
We process data obtained directly from you, including identification data, contact data, correspondence content, and data necessary for business cooperation.
In justified cases, we may also process data from publicly available sources for business relationship purposes.
3. Processing Purposes
Data is processed to respond to inquiries, prepare and perform contracts, maintain business contact, and ensure legal compliance.
Data may also be processed to establish, pursue, or defend legal claims.
4. Legal Bases
Processing is based on GDPR legal grounds, in particular Art. 6(1)(a), (b), (c), and (f), depending on the context of the relationship.
If processing is based on consent, consent may be withdrawn at any time.
5. Data Recipients and Processors
Recipients may include entities providing IT, hosting, accounting, legal, and operational services to the controller.
Data is disclosed only to the extent necessary for service performance and legal compliance.
6. Retention Period
Data is stored for the period necessary to fulfill processing purposes, including contract performance, accounting obligations, and limitation periods for claims.
After expiry of relevant periods, data is deleted or anonymized in accordance with internal procedures.
7. Your Rights
You have the right to request access, rectification, erasure, restriction, portability, and to object to processing in cases provided by law.
You also have the right to lodge a complaint with the supervisory authority competent for personal data protection.
8. Voluntary Data Provision
Providing data is voluntary, but in some cases necessary to handle an inquiry, conclude a contract, or maintain cooperation.
Failure to provide required data may prevent the controller from carrying out the requested action.