Privacy Policy & Cookies

Effective from: 01.10.2025

1. Data Controller:
2. Med Miles Sp. z o.o.
3. ul. Świeradowska 47, 02-662 Warsaw, Poland
4. KRS: 0000821904, NIP: 5213886585,
5. Contact: info@medmiles.pl | +48 451 056 090

1. Personal data
   1. The data controller is Med Miles Sp. z o.o.
   2. Personal data are processed for:
      • contacting Users (forms, e-mail, phone),
      • registration and login to the B2B Portal,
      • order, quotation, and complaint handling,
      • sending commercial information and marketing (only with consent).
   3. Providing data is voluntary but necessary to use certain Website functions.
   4. Data may be shared only with IT, accounting, or legal service providers – to the extent necessary.
   5. Data are not transferred outside the EEA, except as described in §3a (Google Analytics).
2. User rights
   1. Users have the right to:
      • access their data,
      • rectify, erase, or restrict processing,
      • data portability,
      • object to processing,
      • withdraw consent at any time (if consent was the basis),
      • lodge a complaint with the supervisory authority.
   2. Requests should be sent to: info@medmiles.pl.
3. Cookies
   1. The Website uses cookies for functionality, traffic analysis, and service improvement.
   2. Types of cookies:
      • Necessary – enable the Website and login.
      • Analytical/Statistical – analyze Website usage.
      • Marketing – used only with consent.
   3. Users can manage cookies via browser settings or the Website’s cookie settings panel.

   3a. Analytics tools – Google Analytics 4

   1. The Website uses Google Analytics 4 (GA4), provided by Google Ireland Limited.
   2. GA4 is used to analyze traffic and improve the Website.
   3. Legal basis: the User’s consent for analytical cookies (Art. 6(1)
      (a) GDPR).
   4. Data processed: pseudonymized device/browser identifiers, events (page views, clicks), traffic sources, approximate location (city/country). IP addresses are not stored.
   5. Data may be transferred to Google LLC in the USA; Google applies Standard Contractual Clauses (SCC) for protection.
   6. Data retention in GA4: up to 14 months.
   7. Users may deny consent in the cookie banner or change preferences at any time.
4. Data retention
   1. Personal data are processed:
      • while using the Website and B2B Portal,
      • as required by law (e.g., tax/accounting),
      • until consent is withdrawn (if consent was the basis).
5. Final provisions
   1. This Privacy Policy may be updated; updates will be published on the Website.
   2. The current version is effective from the date of publication.