Contact us Umów się na wizytę


Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the “General Data Protection Regulation”) (“GDPR”), we hereby inform you that the controller of your data processed in connection with the operation of the website (the “Website”) will be Zviropolis Sp. z o.o. with its registered office in Krakow (“Zviropolis”).

1.     Zviropolis as a personal data controller

What is an administrator?Zviropolis Sp. z o.o.19/5 Bonarka St.30-415 Krakow
How can I contact the administrator?by e-mail to or in writing to the address of Zviropolis indicated above.

2. Use of the site

Zviropolis, as the owner of the Website, will be the administrator of your personal data related to the operation of the Website.

Zviropolis may process information relating to visitors to the Site even if you do not leave us your data, for example, through the contact form available on the Site.

In the process of using the Site, Zviropolis collects certain information through cookies. This information may constitute personal data in certain cases and may be more intrusive to your privacy, so we aim to provide as much detail as possible within this privacy policy and, in particular, within the cookie policy available at

Purpose and basis of the treatmentYour data, in connection with the use of the Site, will be processed by Zviropolis 
(a) for the purpose of maintaining the Website and providing the content and functionality collected on it (e.g. contact form) and thus providing electronic services, pursuant to Article 6(1)

(b) RODO, b) for the purpose of asserting or defending against claims (if any) pursuant to Article 6(1)(f) RODO, i.e. Zviropolis’ legitimate interest in the possible establishment, assertion or defence of legal and extrajudicial claims, 

c) to analyse traffic on the Website and monitor how certain content on the Website is “clicked” in connection with the use of cookies in accordance with the Cookie Policy, i.e. Zviropolis’ legitimate interest pursuant to Article 6(1)(f) RODO. 

In this regard, your consent to the use of cookies provided in accordance with the Cookie Policy will also be the basis for the possible transfer of personal data outside the EEA on the basis of Article 49(1)(a) RODO, which you can read more about in the section “Data recipients, data transfers to third countries” and in the Cookie Policy.
Processing timeThe data will be stored for the duration of the individual cookies specified in the Cookie Policy or until an objection is filed, whichever comes first. However, it is possible that Zviropolis will process data for a longer period if a claim arises that justifies longer data processing. In this case, the data will be processed until the expiry of the limitation period for this claim.
Obligation to provide dataProviding personal data may be necessary to use all the functionalities of the Site. The provision of data for the purposes of the legitimate interest of Zviropolis referred to in paragraph “c” above is voluntary, but refusal to do so may result in the content of the Website not being adapted to the user.

3. Contact form

You have the opportunity to contact Zviropolis using the contact form on the Website. For more information on this service, please refer to the Terms of Service available on the Website at

Purpose and basis of the treatmentIn connection with the use of the contact form on the Website, your personal data will be processed by Zviropolis in order to answer the question sent through the contact form and to conduct further correspondence in this regard, on the basis of Art. 6(1) lit. f RODO, i.e. the legitimate interest of Zviropolis to conduct correspondence addressed to Zviropolis in connection with its activities, as well as on the basis of Art. 6(1)(a) RODO, to obtain additional data that was not requested by Zviropolis and was provided voluntarily.
Processing timeYour personal data will generally be stored for the duration of the processing of your request and a maximum of 12 months after the processing is completed. If the processing is based on consent, the data will be processed until the expiry of the above periods or earlier until you withdraw your consent. Consent can be withdrawn at any time.
Obligation to provide dataProviding the data specified as mandatory in the contact form is necessary in order to contact the user and respond to the request. The user may also provide other data to facilitate contact or processing of the request, but the provision of such data is voluntary.

4.     Recipients of data, transfer of data to third countries

The recipients of your personal data processed for the above purposes may be

a. entities that provide maintenance and security of the Website,

b. IT service providers,

c. persons specified in the Cookie Policy,

d. law firms, legal advisers,

e. auditors.

As a rule, Zviropolis does not intend to transfer personal data to international organisations or third countries, i.e. those outside the European Economic Area.

However, in connection with the analytics conducted on the Site, Zviropolis uses tools such as Google Analytics, Facebook Pixel or Hotjar. In this regard, some of your personal data may be sent and stored in the United States, which is a third country within the meaning of the RODO, i.e. does not provide an adequate level of personal data protection in accordance with EU standards. If you consent to the use of cookies (other than essential cookies), this will also constitute consent to the possible transfer of your personal data to the United States in accordance with Article 49(1)(a) of the GDPR.

For more information (e.g. about cookies, the partners we use and the purposes for which we use them), please read our Cookie Policy.

You will also find us on social media. However, we have prepared a separate policy that regulates the principles and purposes of processing our data in connection with our social media profiles/accounts:

a.     Privacy Policy – Zviropolis on Facebook,

b.     Privacy Policy – Zviropolis on Instagram.

5. Personal data retention period

Zviropolis will not store your personal data for longer than is necessary to fulfill the purposes for which it was collected or longer than is required by law. You can find detailed information about the retention period for each activity listed above, as well as in the Cookie Policy.

6.     Rights in connection with the processing of personal data

You have the following rights regarding the processing of your personal data:

a. The right to withdraw consent if the processing was based on the consent provided (Article 7(3) DPA). You have the right to withdraw your consent at any time. The withdrawal of consent takes effect from the moment of withdrawal. The withdrawal of consent does not affect the processing of data carried out prior to its withdrawal. The withdrawal of consent does not have any negative consequences,

b. the right to access their personal data (Article 15 of the RODO),

c. the right to request rectification of your personal data (Article 16 of the RODO),

d. the right to request the erasure of your personal data (“right to be forgotten”) (Article 17 RODO),

e. the right to request restriction of processing of your personal data (Article 18 of the RODO),

f. the right to portability of your personal data (if the processing is based on Article 6(1)(b) GDPR or Article 6(1)(a) GDPR and is carried out by automated means) (Article 20 GDPR),

g. the right to object to processing (if the processing of your personal data is based on legitimate interest) (Article 21 of the RODO).

If you believe that we are processing your data unlawfully, you have the right to lodge a complaint with the national data protection supervisory authority, which is currently the President of the Office for Personal Data Protection.

7. Profiling

Your personal data will not be used by Zviropolis for the purpose of automated decision-making (including in the form of profiling) in such a way that any legally binding decisions can be made as a result of such automated processing.

8. Changes

We reserve the right to change this privacy policy at any time. Any changes to the privacy policy will be posted on the Website.