Privacy Policy
Last updated: 29 March 2025

This Privacy Policy explains how MIABIS d.o.o. (“MIABIS”, “we”, “us”, “our”) collects, uses, stores and protects personal data when you visit miabis.com, contact us, submit an inquiry, subscribe to updates, or otherwise interact with us. Personal data means information relating to an identified or identifiable individual, and processing includes collection, storage, use, disclosure and deletion of such data. (European Commission)

1. Controller

The controller responsible for the processing of personal data on this website is:

MIABIS d.o.o.
Website: miabis.com
Email: info@miabis.com

A privacy notice should clearly identify the organisation responsible for the processing and provide contact details. (ico.org.uk)

2. What personal data we may collect

Depending on how you interact with us, we may collect:

• name and surname;
• email address;
• phone number;
• company name;
• country, city or market information;
• inquiry details and message content;
• information you provide in forms, emails or business inquiries;
• technical data such as IP address, browser information, device information and website interaction data;
• cookie and analytics data, where applicable and permitted. Personal data can include identifiers such as names, email addresses, IP addresses and cookie IDs. (European Commission)

3. How we collect personal data

We may collect personal data:

• directly from you when you submit a contact form, send us an email, request information or subscribe to updates;
• automatically when you use our website, for example through server logs, cookies or analytics tools;
• during business communication, meetings, trade shows, partnership discussions or other commercial contact.

4. Why we process personal data

We may process personal data for the following purposes:

• to respond to inquiries and requests;
• to communicate with distributors, grow shops, resellers, partners and professional buyers;
• to provide product information, wholesale information and partnership details;
• to arrange meetings, calls, trade show follow-ups or business conversations;
• to operate, secure and improve our website;
• to measure website performance and user engagement;
• to send newsletters or updates where you have subscribed;
• to comply with legal obligations;
• to protect our rights, business operations and website security.

A privacy notice should explain both the purposes of processing and the lawful basis used for each purpose. (ico.org.uk)

5. Legal bases for processing

Depending on the situation, we rely on one or more of the following legal bases:

a) Consent

We rely on your consent where this is required, for example for newsletter subscriptions and certain non-essential cookies or similar technologies. Consent must be freely given, specific, informed and capable of being withdrawn as easily as it was given. (European Commission)

b) Steps prior to entering into a contract or performance of a contract

We may process your personal data where this is necessary to respond to a business request, prepare an offer, discuss supply terms, or otherwise take steps requested by you before entering into a business relationship.

c) Legitimate interests

We may process personal data where necessary for our legitimate interests, such as handling general business inquiries, protecting website security, improving our services, maintaining customer and partner communication, and managing B2B relationships, provided such interests are not overridden by your rights and freedoms. If you rely on legitimate interests, your privacy information should identify them. (ico.org.uk)

d) Legal obligation

We may process personal data where required to comply with legal or regulatory obligations.

6. Recipients of personal data

We may share personal data with:

• internal team members and authorised personnel;
• IT, hosting, website maintenance or cloud service providers;
• email, form, CRM, analytics or communication service providers used to operate our website and business communication;
• professional advisers where necessary;
• public authorities, regulators or law enforcement where legally required.

Privacy information should explain recipients or categories of recipients of personal data. (ico.org.uk)

7. International transfers

Some service providers we use may process or store personal data outside the European Economic Area. Where personal data is transferred outside the EEA, appropriate safeguards must be used, such as an adequacy decision or Standard Contractual Clauses, so that GDPR-level protection travels with the data. (European Commission)

8. How long we keep personal data

We keep personal data only for as long as necessary for the purpose for which it was collected, including for communication, record-keeping, legal compliance and business follow-up. If we do not have a fixed retention period for a specific category of data, we apply retention criteria based on:

• the nature of the inquiry or relationship;
• whether there is an ongoing business need;
• legal, accounting or compliance requirements;
• the need to protect our legal interests.

If you do not state exact retention periods, a privacy notice should at least explain the criteria used to decide retention. (ico.org.uk)

9. Cookies and similar technologies

Our website may use cookies and similar technologies for essential functionality and, where applicable, for analytics or marketing. For more information, please read our Cookie Policy.

If non-essential cookies are used, they should only be set after valid consent has been obtained. (European Commission)

10. Third-party tools and embedded content

Depending on the pages you use and the choices you make in our cookie banner, our website may use third-party tools or embedded services such as:

• website analytics tools;
• map services;
• video embeds;
• CRM or inquiry tools;
• newsletter or form tools;
• social media integrations.

These third parties may process personal data under their own privacy policies. Where such tools are not strictly necessary, they should only be activated after the required consent has been given.

11. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. However, no system can be guaranteed to be completely secure.

12. Your rights

Under applicable data protection law, you may have the right to:

• be informed about how your personal data is used;
• access your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing;
• receive your data in a portable format where applicable;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent supervisory authority. These rights are reflected in official EU guidance on information for individuals. (European Commission)

13. How to exercise your rights

If you would like to exercise any of your rights or have questions about this Privacy Policy, contact us at:

MIABIS d.o.o.
Email: info@miabis.com
Website: miabis.com

We may ask you for additional information to verify your identity before responding to your request.

14. Complaints

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the competent data protection authority in your country. EU guidance confirms that individuals have the right to lodge a complaint with a supervisory authority. (European Commission)

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, website functionality or our business operations. Any changes will be published on this page together with a revised “Last updated” date.