Privacy policy
Effective date: October 11, 2026
1. Data controller and contact
The controller of personal data is Fedian Jan Fedorowicz (Tax ID: 5241892830, REGON: 142374093), with its registered office at ul. Admiralska 1/7, 00-910 Warsaw, Poland.
For matters concerning personal data, please contact contact@fedian.com.pl. This is the controller’s official, monitored contact channel, including for privacy matters.
Data protection officer: not appointed.
2. Data that may be processed
When you use the website, the hosting provider may process technical connection data, including your IP address, the date and time of the request, the address of the requested resource, browser information and the server response, to the extent necessary to operate and secure the service.
If you send a message using the form or an email link, we may process the information you provide, including your full name, work email address, phone number, organization name, subject, selected product and inquiry text.
The form sends the inquiry through the website server to contact@fedian.com.pl so that we can respond. Do not send patient data or test results through this contact channel.
3. Purposes and legal bases
Data is processed to: (a) ensure the website’s technical operation and security, and (b) handle your inquiry if you choose to send a message.
The legal basis for processing technical data is Article 6(1)(f) GDPR: the controller’s legitimate interest in ensuring the website’s security and proper operation. For inquiries concerning the conclusion or performance of a contract, the basis is Article 6(1)(b) GDPR. Other correspondence is processed under Article 6(1)(f) GDPR, namely the controller’s legitimate interest in handling business inquiries and defending against claims.
We provide the optional YouTube player to display the Snorkel video. Your consent is the basis for transmitting to Google the data needed to load it (Article 6(1)(a) GDPR); consent also covers storing and accessing information on your device in connection with the player (Article 399 of Poland’s Electronic Communications Law). Refusing consent does not restrict access to product information or inquiry forms.
4. Recipients and transfers
Unix Storm – Michał Gottlieb, the hosting and email provider for the Fedian domain, may receive technical data and correspondence only to the extent necessary to provide these services. The current website does not use a CRM, analytics, marketing pixels or an external form endpoint.
According to the hosting provider, its servers and data backups are located in Poland. Once you consent to the Snorkel player, Google, the provider of YouTube, receives data including your IP address, browser information and the video request. Google’s further processing, including service operation, security and usage measurement, is described in Google’s privacy policy. Privacy-enhanced mode limits personalization associated with the embedded video but does not eliminate data processing.
Data may be transferred outside the EEA, including to the United States. Google states that it relies on adequacy decisions, including the EU–US Data Privacy Framework for certified Google LLC and its covered US subsidiaries, and standard contractual clauses where a transfer is not covered by an adequacy decision. Information on safeguards, certification and how to obtain copies of the clauses is available in Google’s data transfer frameworks.
5. Retention
We retain ordinary business inquiry correspondence for 12 months after the last contact, unless longer retention is necessary to establish, exercise or defend legal claims or is required by law. The hosting provider retains technical logs under its technical retention policy, only for as long as necessary for the service’s security and operation. Fedian does not maintain a separate archive of these logs.
We record YouTube consent and its withdrawal on the server using only a random event identifier, UTC time, language, notice version and consent status. The record contains no IP address, email, form data or device data. It serves to demonstrate consent (Article 6(1)(c) in conjunction with Article 7(1) GDPR) and is automatically deleted after 30 days, at the next hourly cleanup. Permission to keep the player active expires when consent is withdrawn, you leave the page or after a maximum of 24 hours. We do not save consent in cookies or browser storage for reuse.
6. Your rights
Subject to the conditions set out in the GDPR, you have the right to access, rectify and erase your data, restrict processing, object to processing, obtain data portability and lodge a complaint with the President of Poland’s Personal Data Protection Office (UODO).
7. Voluntary provision, profiling and marketing
Providing data in a message is voluntary, but we may be unable to respond without the necessary contact details. The form requires your full name, work email address, organization and subject; your phone number and message text are optional. You decide what additional data to provide when contacting us by form or email.
We do not carry out automated decision-making or profiling. The current website does not operate a newsletter or use inquiry data for marketing. Any future marketing will begin only after a separate legal basis has been established and this notice has been updated.
8. Cookies and similar technologies
The website uses no own analytics, marketing pixels or cookies. The privacy-enhanced YouTube player (youtube-nocookie.com) remains inactive until you voluntarily select “I agree — load YouTube” after reading the notice next to the video. We do not connect to YouTube before that choice. Once loaded, Google may store and access cookies or browser storage as described in Google’s cookie policy.
You can withdraw consent at any time using “Withdraw YouTube consent” next to the video. We remove the player and stop its further connections from this page. Withdrawal does not affect the lawfulness of earlier processing and does not delete data already transmitted to Google or information Google has stored on your device. Google’s policy explains the controls for managing and deleting that data. After reopening or refreshing the page, the video remains inactive until you consent again.
Other technologies that store or access information on your device outside the statutory exemption will not be enabled without the required prior notice and consent.
9. Legal sources
This notice is designed in accordance with Article 13 GDPR and, for cookies and similar technologies, Article 399 of Poland’s Electronic Communications Law. Sources: GDPR, Electronic Communications Law, UODO — controller obligations.