Privacy Policy

1. Data Controller

Ostalin is the data controller responsible for personal data collected through this website and related communications. Our registered correspondence address is:

Enquiries regarding the handling of personal data may be directed to the above address or email.

2. Data We Collect

Ostalin collects personal data only where necessary for the operation of this website and for responding to communications. The categories of data we may collect include:

• — Contact information: Name and email address submitted through the contact form. This data is used exclusively to respond to your enquiry.
• — Usage data: Pages visited, time spent on pages, browser type, and referring URL. Collected via analytics cookies only if you have given consent. See the Cookie Policy for full details.
• — Technical data: IP address, device type, and operating system. Collected automatically for security and site stability purposes only.

3. Legal Basis for Processing

Ostalin processes personal data on the following legal bases under GDPR Article 6:

• — Legitimate interests (Article 6(1)(f)): Technical data processed for site security and stability.
• — Performance of a contract or pre-contractual steps (Article 6(1)(b)): Contact form data processed to respond to your communication.
• — Consent (Article 6(1)(a)): Analytics and non-essential cookies processed only with your explicit consent, given via the cookie banner.

4. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected:

• — Contact form data: retained for 12 months from the date of submission, then deleted.
• — Analytics data: retained according to the retention settings of the analytics platform, and subject to your consent choices.
• — Technical/server logs: retained for a maximum of 90 days for security purposes.

5. Your Rights

Under GDPR, you have the following rights with regard to your personal data:

• — Right of access: You may request a copy of personal data held about you.
• — Right to rectification: You may request correction of inaccurate data.
• — Right to erasure: You may request deletion of your data, subject to applicable legal retention obligations.
• — Right to object: You may object to processing based on legitimate interests.
• — Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please write to [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority (UODO — Urząd Ochrony Danych Osobowych).

6. Product Classification Disclosure

Ostalin formulations are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories. This website does not collect health, wellbeing, or personal dietary data.

7. Third Parties and Data Sharing

Ostalin does not sell, rent, or share personal data with third parties for marketing purposes. Data may be shared with the following categories of third party only where necessary for the operation of this site:

• — Web hosting and server infrastructure providers, operating under data processing agreements.
• — Analytics platforms (only if you have given cookie consent), subject to the data processing terms of those platforms.

8. Updates to This Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements or site operations. The date at the top of this page indicates when this version was last revised. Continued use of the site following an update constitutes acceptance of the revised policy.