Who is the data controller?
The controller of your personal data is:
Renova Beauty sp. z o.o. (full legal name: Renova Beauty spółka z ograniczoną odpowiedzialnością), a limited liability company under Polish law, the operator of the Alva Medica brand Registered office: ul. Żurawia 45, 00-680 Warszawa, Poland Company registry: entered in the register of entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) under KRS no. 0000845886 Tax ID (NIP): 7010986360 Statistical number (REGON): 386291478 E-mail: contact@alvamedica.com
In this policy, "we", "us" and "Alva Medica" refer to the controller identified above. You can contact us about any data protection matter using the e-mail address given.
What data do we process, and why?
We process personal data only for the purposes below, each with its legal basis under Regulation (EU) 2016/679 (GDPR).
Contact and offer requests
When you use our contact or partner forms, we process the data you provide — name, company or clinic name, e-mail address, phone number and the content of your message — to answer your inquiry, prepare a commercial offer and take steps prior to entering into a contract.
- Legal basis: Article 6(1)(b) GDPR (steps at your request prior to a contract) and Article 6(1)(f) GDPR (our legitimate interest in handling business correspondence).
Professional verification
For products available only to healthcare professionals, we process professional licence or business registration details you provide, in order to verify your entitlement to purchase such products.
- Legal basis: Article 6(1)(c) GDPR (legal obligations applicable to the distribution of such products) and Article 6(1)(f) GDPR (our legitimate interest in lawful trading).
Newsletter
If you subscribe to our newsletter, we process your e-mail address to send you professional industry content and product news.
- Legal basis: Article 6(1)(a) GDPR (your consent). You may withdraw consent at any time via the unsubscribe link in every message; withdrawal does not affect the lawfulness of processing before withdrawal.
Website operation and analytics
We process technical data (IP address, browser information, pages visited) to keep the website secure and functioning and — only with your consent — for analytics.
- Legal basis: Article 6(1)(f) GDPR (our legitimate interest in operating a secure website) and, for analytics cookies, Article 6(1)(a) GDPR (your consent given through the cookie banner).
What cookies do we use?
Our cookie banner is built for consent-mode operation: non-essential categories stay off until you opt in, and you can change your choice at any time via the cookie settings.
Strictly necessary cookies
Required for the website to function — for example, storing your cookie choices and language preference. These do not require consent and cannot be switched off.
Analytics cookies
Used, only with your consent, to understand how visitors use the website so we can improve it. No analytics cookies are set before you consent.
Marketing cookies
We do not currently use marketing or advertising cookies. If this changes, this policy and the cookie banner will be updated first, and such cookies will require your separate consent.
Who receives your data?
Your data may be disclosed to service providers acting on our behalf under data processing agreements — hosting and IT providers, e-mail delivery services, and, where relevant to your inquiry, our sales representatives for your market. Data may also be disclosed where the law requires it. We do not sell personal data.
Is data transferred outside the EEA?
We aim to keep processing within the European Economic Area. If any service provider processes data outside the EEA, we ensure an adequate safeguard under Chapter V GDPR — such as an adequacy decision or Standard Contractual Clauses.
How long do we keep your data?
- Contact and offer correspondence: for the duration of our exchange and then for the limitation period of potential claims arising from it.
- Contract and cooperation data: for the duration of the cooperation and afterwards as required by tax and accounting law.
- Newsletter data: until you withdraw consent or we discontinue the newsletter.
- Analytics data: for the period defined by the analytics tool's settings, counted from collection.
What are your rights?
Under the GDPR you have the right to:
- access your data and obtain a copy of it,
- rectify inaccurate or incomplete data,
- erase data ("right to be forgotten") where no legal ground for keeping it remains,
- restrict processing in the situations defined by Article 18 GDPR,
- data portability for data processed on the basis of consent or contract,
- object to processing based on our legitimate interest,
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at the e-mail address given in the controller section. You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.
Is providing data mandatory?
Providing data is voluntary, but necessary to achieve the given purpose: without contact details we cannot answer your inquiry or prepare an offer, and without an e-mail address we cannot send the newsletter.
Do we use automated decision-making?
No. We do not make decisions producing legal effects concerning you based solely on automated processing, including profiling.
Changes to this policy
We may update this policy as our services or the law change. The current version, with its "last updated" date, is always published on this page. Material changes affecting your rights will be communicated on the website.