Privacy Policy

Last updated: 15 July 2026

This Privacy Policy explains how BAT.FLY collects, uses, stores and protects personal data when you visit batfly.co (the “Website”), submit a consultation request, contact us, apply for a position or otherwise interact with BAT.FLY.

We are committed to processing personal data lawfully, fairly, transparently and only for specified purposes.

1. Who we are

The controller responsible for processing your personal data is:

BAT.FLY
Legal entity: BAT.FLY POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Registration number: KRS 0001240847
Registered address: Aleja Stanów Zjednoczonych 59, 04-028 Warszawa, Poland
Country of registration: Poland
Email: info@batfly.co

In this Privacy Policy, “BAT.FLY”, “we”, “us” and “our” refer to the legal entity identified above.

If a data protection officer or an EU/EEA representative has been appointed, their contact details are:

info@batfly.co

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data collected through:

the BAT.FLY Website;
consultation and contact forms;
email, telephone and messenger communications;
partnership and collaboration requests;
rehabilitation-related enquiries;
job and career enquiries;
technical logs, cookies and similar technologies used by the Website.

This Privacy Policy does not apply to third-party websites, platforms or services that may be linked from the Website.

3. Personal data we collect

The personal data we collect depends on how you interact with BAT.FLY.

3.1 Data you provide through the Website

When you submit a consultation or contact request, we may collect:

your name;
telephone number;
email address;
organisation or company name;
the product, service or area you are interested in;
the content of your message or comment;
any other information you voluntarily provide.

The Website may allow you to indicate that you are interested in:

a product consultation;
a rehabilitation partnership;
technology or business collaboration;
career opportunities;
another topic described in your message.

3.2 Communication data

When you communicate with us by email, telephone, messenger or another channel, we may collect:

your contact details;
the date and time of the communication;
the content of your correspondence;
information necessary to respond to your request;
records of follow-up communications.

3.3 Career and recruitment data

If you contact BAT.FLY regarding employment or collaboration, we may collect:

your name and contact details;
your CV, portfolio or professional profile;
information about your education and work experience;
technical and professional qualifications;
links to professional websites or social media profiles;
salary expectations and availability;
information provided during interviews or assessments;
other information relevant to the recruitment process.

Please do not provide information that is not relevant to your application.

3.4 Technical and usage data

When you visit the Website, certain technical information may be collected automatically, including:

your IP address;
browser type and version;
device type;
operating system;
language settings;
approximate location derived from your IP address;
pages viewed and actions performed;
date and time of access;
referring page or website;
technical error and security logs;
cookie identifiers and consent preferences.

This information may be collected through server logs, cookies and similar technologies.

4. Health and other sensitive data

BAT.FLY develops technologies associated with mobility support and rehabilitation. As a result, users may sometimes include information about injuries, health conditions, disabilities, rehabilitation needs or mobility limitations in their messages.

Information about health is considered sensitive personal data and requires additional protection.

The general Website contact form is not intended for submitting medical records, medical test results, diagnoses, detailed clinical histories or other extensive health information.

Please provide only the information reasonably necessary for us to understand the general nature of your enquiry.

If we receive sensitive personal data that is not required to process your request, we may delete or anonymise it. Where sensitive data is necessary, we will process it only where an appropriate legal basis and the additional conditions required by applicable data protection law are satisfied.

BAT.FLY does not provide medical diagnoses through the Website.

5. How we use personal data

We may process personal data for the following purposes:

5.1 Responding to enquiries

We use your contact details and message to:

respond to consultation requests;
provide general information about BAT.FLY products;
discuss potential rehabilitation cooperation;
answer partnership and business enquiries;
communicate about technology collaboration;
arrange further contact or a meeting.

5.2 Product and partnership communication

We may use your information to:

understand your organisation’s or project’s needs;
determine which BAT.FLY product or area may be relevant;
prepare a proposal or preliminary cooperation discussion;
communicate with rehabilitation centres, healthcare professionals, researchers, suppliers, investors or technology partners;
manage an existing or potential business relationship.

5.3 Recruitment

We may process recruitment data to:

review applications;
evaluate qualifications and experience;
communicate with candidates;
arrange interviews and assessments;
make recruitment decisions;
maintain recruitment records;
consider candidates for future relevant positions where permitted.

5.4 Website operation and security

We may process technical data to:

operate and maintain the Website;
ensure compatibility with devices and browsers;
diagnose technical problems;
detect and prevent fraud, abuse and cyberattacks;
protect the Website, our infrastructure and users;
maintain security and access logs.

5.5 Website analytics and improvement

Where permitted and, where required, after obtaining your consent, we may use analytics technologies to:

understand how visitors use the Website;
measure traffic and engagement;
identify popular content;
improve navigation, usability and performance;
evaluate the effectiveness of communication campaigns.

5.6 Legal and administrative purposes

We may process personal data to:

comply with legal and regulatory obligations;
respond to lawful requests from public authorities;
establish, exercise or defend legal claims;
maintain business and financial records;
enforce our Terms & Conditions;
investigate suspected violations or security incidents.

6. Legal bases for processing

Depending on the circumstances, we rely on one or more of the following legal bases:

Consent

We may process personal data based on your consent when:

you submit information through a form that requires consent;
you agree to receive optional communications;
you accept analytics or marketing cookies;
applicable law requires consent for a particular processing activity.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Steps taken at your request

We may process your data when necessary to take steps at your request before entering into a contract, including when you:

request information about a product;
ask for a commercial proposal;
discuss potential cooperation;
apply for a position;
request a consultation.

Performance of a contract

Where you or your organisation has entered into an agreement with BAT.FLY, we may process personal data when necessary to perform that agreement.

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

responding to business and professional enquiries;
developing potential partnerships;
managing relationships with users, specialists and organisations;
improving our Website and communications;
protecting our systems and preventing misuse;
maintaining appropriate business records;
establishing or defending legal claims.

Legal obligations

We may process personal data where necessary to comply with laws, court orders, regulatory requirements or lawful requests from public authorities.

Protection of vital interests

In exceptional circumstances, we may process personal data where necessary to protect the life or physical safety of a person.

7. Whether you must provide personal data

Providing personal data through the Website is generally voluntary.

However, fields marked as required must be completed for us to receive and respond to your request. If you do not provide the required information, we may be unable to contact you or process your enquiry.

You are not required to provide detailed health information through the Website.

8. Cookies and similar technologies

The Website may use cookies, local storage, pixels and similar technologies.

Cookies are small files stored on your device when you visit a website.

Strictly necessary technologies

These technologies may be required to:

operate the Website;
maintain its security;
remember privacy preferences;
prevent abuse;
enable forms and essential functionality.

Where permitted by law, strictly necessary technologies may be used without consent because the Website cannot function properly without them.

Analytics technologies

Analytics technologies may help us understand Website traffic, visitor behaviour and technical performance.

Where consent is legally required, analytics technologies will not be activated until you provide consent through the Website’s cookie settings.

Marketing and third-party technologies

If BAT.FLY uses advertising, remarketing, embedded media or social media tracking technologies, they will be described in the Website’s cookie settings or Cookie Policy.

Where required, these technologies will be activated only after you provide consent.

You may accept, reject or adjust non-essential cookie categories through the Website’s cookie banner or privacy settings. You may also delete or block cookies through your browser settings.

Refusing non-essential cookies should not prevent access to the main content of the Website, although some optional features may work differently.

9. Third-party services

Depending on the technical configuration of the Website, BAT.FLY may use third-party providers for:

website hosting;
domain and infrastructure services;
email delivery;
form processing;
customer relationship management;
cloud storage;
cybersecurity;
analytics;
embedded video or media;
recruitment and professional communication.

10. How we share personal data

We may disclose personal data to the following categories of recipients where necessary:

authorised BAT.FLY employees and contractors;
IT, hosting and cybersecurity providers;
email and communication service providers;
analytics and Website support providers;
professional advisers, including lawyers, accountants and auditors;
recruitment service providers;
rehabilitation, medical, research or business partners where necessary to handle your request and where an appropriate legal basis exists;
public authorities, regulators, courts or law enforcement bodies where required by law;
a purchaser, investor or successor in connection with a merger, investment, restructuring or transfer of business assets.

Service providers may process personal data only to provide agreed services and must apply appropriate confidentiality and security measures.

We do not disclose personal data to unrelated third parties for their independent marketing purposes without an appropriate legal basis.

11. International data transfers

Some service providers may process or store personal data outside your country or outside the European Economic Area.

Where personal data protected by the GDPR is transferred outside the European Economic Area, we will use an appropriate transfer mechanism where required, such as:

a European Commission adequacy decision;
approved Standard Contractual Clauses;
another legally recognised transfer mechanism;
a permitted exception applicable to the specific transfer.

Where appropriate, we may also implement additional contractual, organisational or technical safeguards.

You may contact us to request further information about the safeguards used for relevant international transfers.

12. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Unless a longer period is required by law or an existing contractual relationship, the following periods may apply:

consultation and general contact requests: up to [24 months] after the last meaningful communication;
business and partnership correspondence: for the duration of the relationship and up to [5 years] after it ends;
unsuccessful job applications: up to [12 months] after the recruitment process ends;
applications retained for future opportunities: for the period covered by the candidate’s consent, but no longer than [24 months];
Website security and server logs: up to [12 months];
cookie consent records: for as long as necessary to demonstrate compliance;
contractual, accounting and legal records: for the period required by applicable law.

These periods should be confirmed before publication and adjusted to reflect BAT.FLY’s actual internal retention practices.

We may retain information for longer where necessary to establish, exercise or defend legal claims, comply with legal obligations, investigate security incidents or resolve disputes.

When personal data is no longer required, it will be deleted, anonymised or securely archived where retention is legally required.

13. Data security

We use reasonable technical and organisational measures designed to protect personal data against:

unauthorised access;
unlawful use or disclosure;
accidental loss;
destruction or damage;
alteration;
unauthorised copying.

These measures may include access controls, secure hosting, encrypted connections, authentication procedures, software updates, backups, confidentiality obligations and restricted access to personal data.

However, no method of transmitting or storing information is completely secure. We cannot guarantee absolute security of information transmitted through the internet.

Please do not send passwords, financial information, copies of identity documents, detailed medical records or other highly sensitive information through the general contact form.

14. Your data protection rights

Depending on your location and applicable law, you may have the following rights:

Right of access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to erasure

You may ask us to delete your personal data where there is no longer a lawful reason to retain it.

Right to restriction of processing

You may ask us to temporarily restrict the use of your personal data in certain circumstances.

Right to data portability

Where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, commonly used and machine-readable format.

Right to object

You may object to processing based on our legitimate interests where your particular circumstances justify the objection.

You may object to direct marketing at any time.

Right to withdraw consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to complain

You may lodge a complaint with the data protection authority in the country where you live or work, or where you believe a violation has occurred.

Rights relating to automated decision-making

You may have the right not to be subject to a decision based solely on automated processing where that decision produces legal or similarly significant effects.

These rights may be subject to limitations and exceptions under applicable law.

15. How to exercise your rights

To exercise your rights, contact us at:

Email: info@batfly.co

Please include enough information for us to identify your request and the personal data concerned.

We may request additional information to verify your identity. This is intended to prevent personal data from being disclosed to an unauthorised person.

We will respond within the period required by applicable law. Under the GDPR, this is generally within one month, although the period may be extended for complex or multiple requests where permitted.

Exercising your rights is generally free of charge. However, where a request is manifestly unfounded, excessive or repetitive, we may charge a reasonable fee or refuse the request where permitted by law.

16. Automated decision-making

The Website does not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on users.

Website analytics may automatically classify technical or usage information, but this is not used to make legally significant decisions about individual visitors.

17. Children’s privacy

The Website is intended primarily for adults, professionals, organisations, rehabilitation specialists and people seeking information about BAT.FLY technologies.

We do not knowingly collect personal data directly from children through the Website without appropriate authorisation.

If you are under the minimum age at which you may legally provide consent in your country, please ask a parent or legal guardian to contact us on your behalf.

A parent or guardian who believes that a child has provided personal data without appropriate authorisation may contact us and request its deletion.

18. Third-party links

The Website may contain links to third-party websites, social media pages or external services.

BAT.FLY does not control those services and is not responsible for their data processing practices.

Before providing personal data to a third party, you should review its privacy policy and terms.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

changes to the Website or BAT.FLY services;
the introduction of new technologies or service providers;
changes to our data processing activities;
legal or regulatory developments;
security or organisational changes.

The current version will be published on this page with an updated “Last updated” date.

Where changes materially affect how we process personal data, we may provide an additional notice or request renewed consent where required by law.

20. Contact us

For questions about this Privacy Policy or the processing of your personal data, contact:

BAT.FLY
Legal entity: BAT.FLY POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Registered address: Aleja Stanów Zjednoczonych 59, 04-028 Warszawa, Poland
Email: info@batfly.co