Data protection
We inform you for what purpose we process your personal data and what are your rights in accordance with Regulation 2016/679 of the European Parliament and the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: “GDPR”).
Personal data controller
The controller of your personal data is SciencePharma spółka z ograniczoną odpowiedzialnością, Chelmska 30/34 St., 00-725 Warsaw, Poland, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under the KRS number: 0000957621, with the tax identification number NIP: 1132679319, REGON: 141028176 with a share capital of PLN 50,000.
Address to correspondence: ado@sciencepharma.pl
Purpose and basics of data processing
Your personal data is processed by controller for the following purposes:
– reporting an adverse reaction:
Your personal data is processed pursuant to art. 6 section 1 point c) and art. 9 section 2 point i) GDPR. The provided personal data are processed solely for the purpose of fulfilling the obligations to monitor the safety of the use of medicinal products in accordance with Commission Implementing Regulation (EU) No. 520/2012 of 19 June 2012. Providing the data of the reporting person is necessary for the acceptance of the notification. Your personal data will be stored for the entire period of marketing authorization of the drug and for a period of 10 years from the expiry of the above mentioned marketing authorization.
– submitting a medical inquiry:
Your personal data is processed pursuant to art. 6 section 1 point c) and art. 9 section 2 point i) GDPR. The personal data provided are processed solely for the purpose of fulfilling the obligations to provide information on medicinal products, in accordance with art. 60 section 2-4 of the Act of September 6, 2001, Pharmaceutical Law. Providing personal data is voluntary, but necessary so that the person responsible for providing information can contact you. Your personal data will be stored for the entire period of validity of the marketing authorization for the drug and for a period of 10 years from the expiry of this authorization.
– correspondence:
Your personal data is processed on the basis of art. 6 point 1 letter f) GDPR, in order to conduct correspondence. Personal information is voluntary. Your data will be processed for a period not longer than 15 years after termination of the business relationship with the controller.
– contact form:
Your personal data is processed on the basis of art. 6 point 1 letter f) GDPR, to receive and respond to incoming correspondence. Personal information is voluntary but necessary to send the form. Your data will be processed for a period not longer than 1 year after cessation of contact with the controller.
– “Newsletter”:
Your personal data (e-mail addresses) are processed on the basis of art. 6 point 1 letter f) GDPR, for the purpose of processing them for the implementation of the “Newsletter” service, i.e. periodic sending of e-mail messages with current information about the controller activity. Personal information is voluntary but necessary for Newsletter service. Your data will be processed during the period of using the “Newsletter” service.
– recruitment:
Your data will be processed pursuant to Art. 6 section 1 letter a) GDPR, in order to conduct the recruitment process and future recruitment (if consent is granted, also to the processing of your data in order to participate in future recruitment). Your data will be processed for the duration of the recruitment process, and in the event of consent to the processing of your data for future recruitment purposes, for a period of 2 years from the receipt of such consent by the controller, unless the purpose of processing does not change. Providing data is completely voluntary, but failure to provide it will result in the inability to participate in the recruitment process.
Personal data recipients
The recipients of your personal data will be only entities authorized to obtain personal data based on the law.
Rights of data subjects:
Pursuant to the provisions of the GDPR, you are entitled to:
- the right to access your data,
- the right to rectify them if they are inconsistent with the actual situation,
- the right to delete them, limit processing, and transfer data – in cases provided for by law,
- the right to object to data processing,
- the right to withdraw consent – in the case of data processing by the controller on this basis – and the withdrawal of such consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal,
- the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office, if you believe that the processing of your personal data violates the provisions on personal data protection.