Cookie Policy

Effective from: 8 October 2023 • Version: v1.3

This Cookie Policy describes the rules for storing and accessing information through cookies and similar technologies on b2b.gedeonpolska.com, operated by GEDEON Sp. z o.o., ul. Grażyńskiego 74, 43-300 Bielsko-Biała (the “Controller”).

1) Definitions

Cookies – small text files stored in the browser memory of the User's device.
Related technologies – „localStorage”, „sessionStorage”, „IndexedDB”, „pixel”, „SDK”, „web beacon”.
User – a person using the website.
External provider – an entity supplying tools that place third-party cookies.

2) Controller and contact details

The controller of personal data obtained through cookies is: GEDEON Sp. z o.o., KRS 0000125974, VAT ID 547-02-43-777. Contact: b2b@gedeonpolska.com, tel. +48 32 475 71 42.

3) Use of cookies and purposes of processing

ensuring the operation of the website (session, login, basket, security),
remembering settings (language, preferences, list views),
visitor analytics and statistics,
content personalisation and – with consent – marketing and remarketing.

4) Cookie categories

Essential – required for the website to operate; they cannot be disabled within the website's system.

Functional – remember preferences (e.g. language, filter, view).

Analytical – measure traffic, detect errors and monitor performance.

Multimedia/Social – support embedded content (e.g. videos, maps, social plugins).

Marketing – profiling and remarketing (consent required).

5) Legal bases (GDPR)

Article 6(1), point f of the GDPR (legitimate interests) – for essential cookies, security and website maintenance,
Article 6(1), point a of the GDPR (consent) – for analytical, functional (where they go beyond what is essential) and marketing cookies.

6) Retention period

Session cookies – until the browser is closed,
Persistent cookies – usually from 1 day to 24 months (details in the table below),
entries in localStorage/sessionStorage – until manually deleted or the browser is reset.

7) List of cookies used

Name	Provider	Purpose	Type	Duration	Legal basis
__RequestVerificationToken	Gedeon B2B	Anti-CSRF protection in forms and sessions.	HTTP	session	Article 6(1)(f) GDPR
ASP.NET_SessionId	Gedeon B2B	User session identifier (login, basket).	HTTP	session	Article 6(1)(f) GDPR
gdnConsent	Gedeon B2B	Remembering the cookie consent decision (CMP).	HTTP/localStorage	12 months	Article 6(1)(f) GDPR

Note: names may vary depending on the environment configuration.

Name	Provider	Purpose	Type	Duration	Legal basis
_ga, _gid, _ga_*	Google Analytics	Traffic measurement, statistics and improvements to website operation.	HTTP	24 months / 24 h	Article 6(1)(a) GDPR
_clck, _clsk	Microsoft Clarity (optional)	Behaviour mapping and usability analysis (without identification).	HTTP	12 months / 1 day	Article 6(1)(a) GDPR

Enabled only after consent has been given.

Name	Provider	Purpose	Type	Duration	Legal basis
_fbp	Meta/Facebook	Campaign measurement and remarketing.	HTTP	90 days	Article 6(1)(a) GDPR
VISITOR_INFO1_LIVE, YSC	YouTube	Support for the embedded video player.	HTTP	~6 months / session	Article 6(1)(a) GDPR

External components may collect data in accordance with their providers' policies.

8) External providers

Google Ireland Ltd. (Analytics/Ads) – data may be transferred to centres outside the EEA with appropriate safeguards (SCCs).
Meta Platforms Ireland Ltd. – marketing/remarketing.
Google/YouTube – embedded videos.
Others (identified on the pages where their components are embedded).

9) Data transfers outside the EEA

If data is transferred outside the EEA, we apply appropriate safeguards (including standard contractual clauses). A copy of the safeguards can be obtained by contacting the Controller.

10) Profiling and automated decisions

Once consent has been given, marketing cookies may be used to personalise advertisements. We do not make decisions producing legal effects solely on the basis of automated processing.

11) Managing and withdrawing consent

You can give or withdraw consent by category using the banner and the “Preferences panel”.
You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.

Open the preferences panel

12) Browser settings

Most browsers allow cookies to be blocked or deleted. Consequence: some website functions (e.g. login, basket) may not work correctly.

13) User rights

access to data, rectification, erasure, restriction, objection and portability,
a complaint to the President of the Personal Data Protection Office (PUODO, ul. Stawki 2, 00-193 Warszawa).

14) Changes to the Policy

We may update this document, including in response to changes in legislation or technology. The new version will be published here with its effective date.

Contact for privacy matters: b2b@gedeonpolska.com