Effective date: September 2025
Last updated: 29 September 2025
1. Introduction
Your privacy and the protection of your personal data are important to us. This Privacy Notice („Notice”) describes the data that may directly or indirectly identify you („Personal Data”), as well as how we collect, use, share, and protect such data. BioLife, as a healthcare provider, collects, tests, processes, and stores human plasma („Services”). By contacting BioLife through our centres, Website, Application, or any other channel, you accept the practices described in this Privacy Notice. BioLife Plazma Hungary Kft. is an affiliate owned by Takeda Pharmaceutical Company Limited (hereinafter: „BioLife”, „we”, or „us”).
Before registering as a donor, please read this Notice (together with the Terms of Use), which we may update from time to time. Any changes to the Privacy Notice take effect when we post the updated effective date on this page. We recommend that you review the Notice periodically for any changes.
BioLife processes your Personal Data in accordance with applicable data protection and other legislation, with particular regard to the following:
- Regulation (EU) 2016/679 (General Data Protection Regulation – „GDPR”)
- Act XLVII of 1997 on the Processing and Protection of Healthcare and Related Personal Data (hereinafter „Health Data Act”)
- Other legislation applicable to the collection, testing, processing, and storage of blood and blood components, including but not limited to Ministerial Decree 3/2005 (II. 10.) of the Minister of Health on quality and safety requirements for the collection, testing, processing, storage, and distribution of human blood and blood components, and certain technical requirements thereof (hereinafter „MoH Decree”), and Government Decree 439/2015 (XII. 28.) on the rules governing the management of the national blood supply (hereinafter „National Blood Supply Decree”).
2. Who We Are
BioLife Plazma Hungary Kft.
Registered office: 1138 Budapest, Népfürdő utca 22
Company registration number: 01-09-278783
Website:
Site addresses:
- BioLife Budapest Lurdy
Address: 1097 Budapest, Könyves Kálmán körút 12–14
Email: hu.biolife.budapestlurdy@takeda.com - BioLife Budapest KÖKI
Address: 1191 Budapest, Vak Bottyán utca 75 A–C
Email: hu.biolife.budapestkoki@takeda.com - BioLife Debrecen
Address: 4024 Debrecen, Csapó utca 28
Email: hu.biolife.debrecen@takeda.com - BioLife Eger
Address: 3300 Eger, Törvényház utca 4
Email: hu.biolife.eger@takeda.com - BioLife Kecskemét
Address: 6000 Kecskemét, Korona utca 2
Email: hu.biolife.kecskemet@takeda.com - BioLife Miskolc
Address: 3527 Miskolc, Bajcsy-Zsilinszky utca 2–4
Email: hu.biolife.miskolc@takeda.com - BioLife Nyíregyháza
Address: 4400 Nyíregyháza, Szegfű utca 75
Email: hu.biolife.nyiregyhaza@takeda.com - BioLife Pécs Bajcsy
Address: 7622 Pécs, Bajcsy-Zsilinszky utca 2/1
Email: hu.biolife.pecsbajcsy@takeda.com - BioLife Pécs Király
Address: 7626 Pécs, Király utca 66
Email: hu.biolife.pecskiraly@takeda.com - BioLife Szeged
Address: 6720 Szeged, Dóm tér 3–4
Email: hu.biolife.szeged@takeda.com
3. Personal Data We Process
a. Mandatory Personal Data
Certain Personal Data are required to provide our Services or are prescribed by law. If you choose not to provide these „mandatory personal data”, you may be unable to use all or part of our Services. The mandatory Personal Data collected and processed are as follows:
| Category | Examples | Purpose |
|---|---|---|
| Identification data | Name; date of birth; address; gender; social security number (TAJ); identity card number; tax identification number; place of birth; signature; mother’s maiden name; for non-Hungarian nationals: equivalent document proving health insurance coverage; donor number (an internal identification number created by BioLife and assigned to the individual donor) | Plasma collection and processing |
| Contact data | Permanent address (or place of residence if no permanent address); phone number; email address | Plasma collection and processing |
| Health data | Age; body weight; blood type; blood pressure, pulse, body temperature; haemoglobin or haematocrit level in blood; cell count and protein level in blood; platelet concentration in blood; information relating to illnesses, use of medication and sexual behaviour; date and detailed description of tattoos and piercings; data relating to infections, pregnancies, minor surgeries, dental treatments and use of medication connected with temporary exclusion criteria; dates and cumulative number of plasma donations; volume of plasma collected per donation and in total; the fact, reason and start date of permanent exclusion from donation; other health data required by applicable legislation or provided during interviews with our medical staff | Plasma collection and processing; eligibility for donation |
You provide BioLife with your health data through a personal interview conducted by a BioLife-trained professional who is subject to a confidentiality obligation in accordance with applicable legislation. BioLife processes your health data for the purpose of identifying and screening individuals for whom plasma donation may pose a health risk to themselves or others through the potential transmission of blood-borne diseases. Processing of such data is necessary to enable BioLife, as a healthcare provider, to comply with applicable statutory and medical obligations relating to plasma collection and related activities, including but not limited to the provisions of the MoH Decree.
In addition to the general collection and processing of Personal Data as described above, BioLife is also required to maintain a register of donors in order to preserve and monitor their health status and to ensure the quality of the plasma collected, in accordance with Section 16/C of the Health Data Act (hereinafter „Donation Register”). This register contains the following Personal Data:
- date of birth;
- TAJ number;
- gender;
- date(s) of whole blood and plasma donations;
- volume of plasma collected, aggregated per collection;
- the fact, reason and start date of permanent exclusion from donation (where applicable).
Furthermore, BioLife, as a healthcare provider, is required pursuant to Section 25 of Ministerial Decree 18/1998 (VI. 3.) of the Minister of Health on the epidemiological measures necessary for the prevention of infectious diseases and epidemics, and in accordance with the Health Data Act, to maintain a register of certain notifiable infectious diseases and suspected cases thereof (hereinafter „Infectious Disease Register”). This registration obligation covers the following Personal Data:
- identification data;
- name of the infectious disease.
b. Optional Personal Data
Some Personal Data collected by BioLife are optional only, and may support the provision of our Services, enable communication, or provide other benefits to you. Examples of such optionally collected Personal Data include:
| Category | Examples | Purpose |
|---|---|---|
| Biometric data | Facial photograph taken on-site, with the donor’s express separate consent; fingerprint hash code, with the donor’s express separate consent | Plasma collection and processing |
| Customer support information | Demographic data; shared photographs; security footage from BioLife Plasma Centres; customer service call recordings | Customer service |
| Loyalty preferences | Reward-related choices/preferences | Loyalty programme administration |
| Survey-related information | Satisfaction surveys | Customer satisfaction |
Fingerprint-based identification is used to facilitate the completion of questionnaires within the BioLife donor register software, enabling a simple and convenient identification method for donors. This is, however, an entirely optional identification solution for donors. If you do not wish to consent to fingerprint-based identification, BioLife provides the option to complete the questionnaires in paper format.
c. Automatically Collected Data
Certain Personal Data may be collected automatically when you use our websites, provided you have given your consent. These may include:
| Category | Purpose |
|---|---|
| Device data | When you use our Website, we may automatically collect information about the device you are using, including your Internet Protocol (IP) address, browser type and version, device type and language/region settings, service provider, and usage and other data necessary for the proper functioning of the Website and Application. |
| Location information | Provision of location-based services such as navigation and distance calculation, creation of personalised content for marketing purposes, and enhancement of our security features to protect your Personal Data. |
| Marketing interactions | We may collect information about your interactions with content and advertisements on our Website for analytics and marketing purposes. |
4. Legal Basis for Processing
The table below sets out the purposes for which we process your Personal Data and the legal bases on which we do so. Where we rely on legitimate interests as the legal basis for processing your Personal Data, you have the right to object to such processing at any time (see Section 9, „Your Rights”).
| Purpose | Legal basis |
|---|---|
| Plasma collection and processing | Contractual necessity [GDPR Article 6(1)(b)] Contract [GDPR Article 9(2)(h)] |
| Marketing activities and loyalty programme | Consent [GDPR Article 6(1)(a)] |
| Location-based centre recommendations | Consent [GDPR Article 6(1)(a)] |
| Account management, scheduling of donations | Contractual necessity [GDPR Article 6(1)(b)] Contract [GDPR Article 9(2)(h)] |
| Compliance with legal and security requirements | Legal obligation [GDPR Articles 6(1)(c) and 9(2)(i)] |
| Sending reminders and service notifications | Legitimate interest [GDPR Article 6(1)(f)] Contractual necessity [GDPR Article 6(1)(b)] Consent [GDPR Article 6(1)(a)] |
| Analytics | Legitimate interest [GDPR Article 6(1)(f)] |
Personal Data collected in the course of plasma donation may also be used in anonymous (non-identifiable), aggregated form for the purpose of improving our internal processes and conducting general analysis of donor activity and donation patterns.
Please note that we do not make decisions based solely on automated processing that would have legal or similarly significant effects on you.
5. Disclosure of Personal Data to Third Parties
BioLife does not sell or share Personal Data with third parties, except for legitimate business purposes as detailed below. The use and disclosure of Personal Data by third parties is governed by agreements that require appropriate protection of Personal Data.
| Recipients | Purpose |
|---|---|
| Affiliated companies | We may share your Personal Data with our affiliated companies for the purposes described in this Privacy Notice. |
| Service providers | Third parties may only use your Personal Data in accordance with instructions provided by us and in line with this Notice, and are prohibited from using or disclosing them for any other purpose. We may engage third parties and individuals to provide services on our behalf, including: · Data storage and analytics; · Customer service; · Laboratory services; · Marketing services; · Technology services and support (including email and web hosting providers, marketing and advertising technology providers, email and text messaging service providers, and mobile application developers) |
| Analytics and advertising partners | When we use third-party cookies and other tracking technologies, we may transfer your Personal Data to these third-party companies to help us analyse the use of our Website. |
BioLife currently engages the following service providers as data processors in relation to donor data:
- Takeda Manufacturing Austria AG (Industriestrasse 67, A-1220 Vienna, Austria) – laboratory services;
- Project Partner Team Kft. (2151 Fót, Szent Benedek utca 14.) – operation of IT systems;
- Megoldás Most! Kft. (1119 Budapest, Fehérvári út 45–53, Building B, 6th floor, door 602) – marketing services;
- CALLFACTORY Kft. (1044 Budapest, Pici utca 6, 2nd floor, door 5) – customer service operations;
- Vascular IT Kft. (1095 Budapest, Lechner Ödön fasor 3, Building C, 3rd floor, door 1) – support for the operation of the donor registration software.
BioLife reserves the right to modify or expand the above list of data processors as necessary; you may request further information from BioLife at any time regarding the data processors currently engaged.
In accordance with Section 16/C(3) of the Health Data Act, BioLife is required to transfer data from its Donation Register to the National Cross-Donation and Donor Exclusion Register operated by the National Blood Transfusion Service.
In accordance with Section 15(1) of the Health Data Act, BioLife is required to transfer data from the Infectious Disease Register to the competent public health authority.
In addition, your Personal Data may also be transferred for the following purposes:
- Compliance with legal obligations and security: We may transfer your Personal Data in order to comply with a court order, law or legal proceeding; to enforce this Privacy Notice, our Terms of Use or other agreements; based on your consent to disclosure; or where we believe it is necessary or appropriate to protect the integrity, security or rights of BioLife or any other person. Furthermore, where required by applicable law, certain personal and health data processed for the purposes described herein may be disclosed to the competent authorities.
- Business transfer: BioLife may in the future sell or otherwise transfer some or all of its assets, including your Personal Data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganisation, sale of assets or bankruptcy, whether to an affiliated company or a third party. We will make reasonable efforts to ensure that the recipient complies with the provisions of this Privacy Notice.
6. Cross-Border Data Transfers
In the course of our operations, we may engage service providers or other third parties located outside Hungary in order to fulfil the purposes described in this Notice. Your Personal Data will be processed and transferred in accordance with this Notice and applicable legislation, including the use of Standard Contractual Clauses approved by the European Commission where appropriate. Our third-party service providers contractually undertake to process and protect Personal Data in accordance with this Notice and applicable data protection legislation.
7. Data Security
We apply reasonable technical and organisational measures to ensure the appropriate security and confidentiality of the Personal Data we process. These measures are regularly reviewed and updated in accordance with legal developments and technological advances. Data are recorded, stored and processed in both electronic and manual form in accordance with our internal policies, which also contain detailed rules regarding access to data.
8. Retention Period
We take steps to delete your Personal Data when they are no longer necessary for the purpose for which they were collected, unless legislation requires or permits us to retain such data for a longer period. In determining the specific retention period, we take into account various factors such as the type of Service provided to you, statutory mandatory retention periods, and any applicable limitation periods. Specific retention periods include, among others:
| Data | Duration |
|---|---|
| Donation records and health data | 30 years from the date of the last plasma donation |
| Paper-based questionnaires | 4–6 months at the centre, then archived |
9. Your Rights
You may request access to, deletion of, or restriction of the processing of your Personal Data, object to the processing of your Personal Data, and exercise your right to data portability.
In order to fulfil your request, we may need additional Personal Data to verify your identity, including by requesting that you present a government-issued identity document. If you submit your request through an authorised representative, we may need additional information to verify the representative’s authorisation. Applicable law may require or permit us to refuse your request. If we refuse your request, we will inform you of the reason for the refusal within the limits of legal restrictions.
a. Right to Information and Access
You have the right to know what Personal Data we hold about you and to access those data. You may obtain information on the following:
- The purposes of the processing
- The categories of Personal Data processed
- The recipients or categories of recipients to whom the data have been or will be disclosed
We will provide the first copy of your Personal Data free of charge. For additional copies, we may charge a reasonable fee based on administrative costs.
b. Right to Rectification
You have the right to request the rectification of inaccurate Personal Data or the completion of incomplete data.
c. Right to Restriction of Processing
You may request in writing that the processing of your data be restricted if:
- You contest the accuracy of the data (the restriction applies for the duration of verification);
- The processing is unlawful but you request restriction rather than erasure;
- We no longer need the data but you require them for the establishment, exercise or defence of legal claims;
- You have objected to the processing, in which case the restriction applies until it is determined whether our legitimate interests override your rights.
d. Right to Erasure
You may request the erasure of your Personal Data under the conditions set out by the GDPR, for example:
- Consent has been withdrawn;
- The data are no longer necessary for the original purpose.
This right may be limited in certain cases, including but not limited to:
- On grounds of public interest in the area of public health;
- For archiving, scientific or historical research, or statistical purposes;
- For the establishment, exercise or defence of legal claims.
e. Right to Data Portability
You may request that your Personal Data be provided to you in a commonly used, machine-readable format, or that they be transferred to another controller.
Exercising this right does not automatically result in the deletion of the data from our systems, unless you expressly request this and it is legally permissible.
f. Right to Object
You may object to the processing of your Personal Data where the processing is based on our legitimate interests or is carried out for direct marketing purposes.
g. Right to Withdraw Consent
Where the processing of your Personal Data is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In addition, you may unsubscribe from receiving informational materials and direct communications free of charge at any time by sending an email to privacyoffice@takeda.com, or by visiting any BioLife site in person. You may also send a letter by post to the following address:
BioLife Plazma Hungary Kft.
1138 Budapest
Népfürdő utca 22.
10. Remedies
If you believe that your rights as described in this Notice have been violated, you may lodge a complaint with us using the contact details provided at the end of this Notice. You shall not be subject to any discriminatory treatment for exercising your data protection rights.
You may also lodge a complaint with any data protection authority, including in Hungary with the National Authority for Data Protection and Freedom of Information (NAIH):
- Website:
- Address: 1055 Budapest, Falk Miksa utca 9–11
- Postal address: 1363 Budapest, Pf. 9
- Phone: +36-1-391-1400
- Fax: +36-1-391-1410
- Email: ugyfelszolgalat@naih.hu
In the event of a breach of the rules governing the processing of Personal Data, you may take legal action. However, we recommend that you contact BioLife directly first in order to resolve the matter as promptly as possible.
Please note that we are only able to provide general information by telephone. For specific requests, please submit them in writing or by email so that we can verify your identity.
11. Contact
If you have any questions regarding this Privacy Notice, please contact our data protection officer through the Takeda Privacy Office at the email address below.
Email address: privacyoffice@takeda.com