1. Who is the controller of your data
The controller of your personal data is Marta Majorek, trading as Ratio Medica, [address and tax ID — to be added once the business is registered]. For any matters concerning personal data, you can write to [email protected] or call +48 692 435 588.
2. What data we process
- Contact form data: full name, email address, type of project, expected deadline and project description.
- Correspondence data: any data you share with us by email or during a phone call.
- Technical data: IP address, browser type and time of visit, recorded automatically in the logs of the server hosting the website.
3. Purposes and legal basis
- Responding to your enquiry and preparing a quote — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and your consent given in the form (Article 6(1)(a) GDPR).
- Performing a contract (Article 6(1)(b) GDPR).
- Handling correspondence, keeping the website secure and establishing, exercising or defending legal claims — our legitimate interest (Article 6(1)(f) GDPR).
- Meeting tax and accounting obligations if we work together (Article 6(1)(c) GDPR).
4. How long we keep data
- Enquiries that do not lead to a contract — up to 12 months from the last contact.
- Contract-related data — for the duration of the contract and then until the relevant limitation periods and statutory tax retention periods expire.
- Server logs — for a short period set by the hosting provider.
5. Who we share data with
We do not sell your data or share it for marketing purposes. Data may only be disclosed to providers who technically support our business: the website hosting provider, the email provider, the contact form service provider and our accounting office. They process data on our behalf and in line with the GDPR.
If any provider processes data outside the European Economic Area, this is based on a European Commission adequacy decision or standard contractual clauses.
6. Patient and study participant data
Please do not send, via the form or in your first message, any data that could identify patients or study participants. If a project requires processing such data, we sign a separate data processing agreement (Article 28 GDPR). All materials shared in connection with a project are treated as confidential, and we sign a non‑disclosure agreement on request.
7. Your rights
You have the right to:
- access your data and receive a copy,
- rectify your data,
- have your data erased or its processing restricted,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal,
- lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00‑193 Warsaw), or the authority in your country of residence or work.
To exercise your rights, write to [email protected].
8. Do you have to provide data
Providing data is voluntary, but without an email address or phone number we will not be able to reply to your enquiry. We do not make automated decisions or profile users.
9. Cookies and browser storage
This website does not use tracking cookies or analytics tools. The only information saved in your browser’s storage (localStorage) is the language version you choose — we save it only when you click the PL / EN switch, so that the right version is shown on your next visit. You can remove it by clearing the site data in your browser settings.
Fonts are stored on our own server, so the website does not connect to Google servers. Links to the ORCID and Google Scholar profiles lead to external services with their own privacy policies.
10. Changes to this policy
We may update this policy, for example following changes in the law or in how the website works. The current version is always available on this website.
Last updated: 1 October 2026
