GDPR clause

Pursuant to Art. 13 para. 1 and para. 2 of the Ordinance of the European Parliament and Council (EU) No. 2016/679 of April 27, 2016 on protection of individuals with regard to the processing of their personal data and on the free movement of such data, repealing the directive 95/46/WE (general regulation on data protection) (UE Official Journal.L.2016.119.1 of 04.05.2016), hereinafter: GDPR, we hereby inform that:

The personal data controller is Medicofarma Biotech S.A. Sokołowska 9/lok.U19, 01-142 Warszawa,  phone/fax 032 268 64 05,  biuro@medicofarmabiotech.pl

(“Controller”),

Your personal information can be made available to the employees and partners of the Controller who are authorized for their processing as ordered explicitly by the Controller, as well as other entities entrusted with the processing of personal information by the Controller, including providers of technical services, IT services, marketing and administration, enabling the Controller to prepare and handle the emission of shares as well as enable the competent authorities (Police, Public Prosecutor, Courts, etc.) to carry out their statutory tasks, as ordered by such authorities and ensuring the security of transferred data.

Your personal information obtained by the Controller shall be processed in the extent required to answer your enquiry to the email address provided in the contact form, i.e. to carry out actions ordered by the person they apply, before entering into an agreement (Art. 6 para. 1 let. a and b of GDPR).

The Controller hereby informs you about your right to access and rectify your personal data as well as to demand that my personal data is removed and no longer processed, or that the processing of such data is limited, or that your data is moved to another entity.

The recipients of the personal information provided in the contents of your enquiry submitted via the contact form shall be the employees of the Controller’s Office, authorized by the Controller to carry out activities in relation to the processing of personal information.

Your personal information may be transmitted outside the European Economic Area. If it is deemed necessary that in the course of operations your information shall be transmitted outside the EEA, we will do our utmost to ensure that all receiving entities maintain the terms provided in the GDPR, e.g. ensuring that the conditions of the Privacy Shield programme are met.

Personal information processed for the purpose of handling the inquiry will be stored for the duration of the communication and for the time in which the Controller shall operate their business, or until the consent for the processing of such data is withdrawn. Depending on the further proceedings in regards to the enquiry, the data will be processed for the purpose of executing an agreement, which shall be communicated separately to the person whose data are being used, and if no partnership is established, the data will be deleted.

The data subject may access and rectify their data, remove and limit the processing thereof, has the right to transfer the data, submit a protest against the processing of data and if the processing is based on voluntary consent, such consent can be withdrawn at any time without prejudice to the right to process information prior to such withdrawal.

Should the data subject regard the processing of their personal data as violating the personal data protection regulation, they may submit a complaint to the supervisory authority for personal data protection, i.e. the Head of the Personal Data Security Office.

The submission of personal data is voluntary.