Regulated product data

This information supplements our privacy policy for orders of products whose sale requires an additional declaration or supporting documents. The data controller is Biogo S.A., Szewska 18, 50-139 Wrocław, Poland. Contact: contact@bioogo.com.

Depending on the product, we process the data of the person placing the order and, where applicable, of their representative, their contact details, data relating to their company, the product and quantity ordered, the intended use, the professional activity or legal authorization, as well as the information and signatures contained in the required declarations and supporting documents. We collect other data only if it is necessary for the product concerned.

We use this data to send the required documents, verify the right to acquire the product and its intended use, decide on acceptance of the order, and fulfill our legal retention and reporting obligations. Where the data subject is themselves a party to the contract, the processing necessary for pre-contractual steps and performance of the contract is based on Article 6(1)(b) of the GDPR. Processing necessary for compliance with a legal obligation is based on Article 6(1)(c) of the GDPR. Communication with representatives and the establishment, exercise or defense of legal claims are based on our legitimate interest, in accordance with Article 6(1)(f) of the GDPR.

We may use the telephone number provided when placing the order to send an SMS informing you that the required documents have been sent. This message concerns the processing of the order and does not contain advertising. The persons responsible for verification have access to the documents. If necessary, data is disclosed to our service providers and, where required by law, to the competent authorities.

The retention period depends on the rules applicable to the product and the information concerned. The information referred to in Article 8(1) and (2) of Regulation (EU) 2019/1148 is retained for 18 months from the transaction. The documents and records referred to in Article 5(1) to (4) of Regulation (EC) No 273/2004 are retained for at least three years from the end of the calendar year in which the transaction took place. Where Article 9 of the German ChemVerbotsV applies, the handover register and receipts are retained for at least five years after the last entry. The information necessary to comply with the obligations under Article 36 of the REACH Regulation is retained for at least ten years after the last supply of the substance or mixture concerned. If several obligations apply to the same information, the longest required retention period applies.

If no sales contract is concluded, we process the data until the verification and any refund are completed. We then delete it, unless its retention remains necessary for compliance with a specific legal obligation or for the establishment, exercise or defense of legal claims.

Without the information and supporting documents required for the product concerned, we cannot verify your right to acquire it or accept the order for that product. Acceptance of the order is reviewed by competent persons and is not based solely on an automated decision. To learn more about your rights, any transfers of data to third countries and our contact details, see our privacy policy: https://bioogo.com/policies/privacy-policy.