Annex to the USPZDROWIE.PL Website Terms & Conditions

Privacy Policy of the USPZDROWIE.PL Website

Who is the Controller of your personal data?

In its activity, USP Zdrowie respects the privacy of those who visit its websites and protects their personal data.

USP Zdrowie Sp. z o.o with its registered office in Warsaw (02-822), ul. Poleczki 35, is the controller of the personal data of those who visit the web pages of the USP Zdrowie website (www.uspzdrowie.pl and the product pages linked from that site, as well as other websites, e.g. www.akademianiechorowania.pl), hereinafter the Website.

USP Zdrowie Sp. z o.o. is entered in the Register of Enterprises kept by the District Court for Warsaw the Capital City in Warsaw, 13th Commercial Division of the National Court Register, at KRS number 0000347815, and uses the following identification numbers: NIP 7010219241, REGON 142269887.

US Pharmacia Sp. z o.o. in Wrocław, 50-507 Wrocław, ul. Ziębicka 40, is the controller of your personal data for the purpose of reporting adverse effects of medicinal products.

USP Pharmacia sp. z o.o. is entered in the Register of Enterprises kept by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, at KRS number 0000046646, and uses the following identification numbers: NIP 8991432896, REGON 011213010.

If you wish to contact USP Zdrowie Sp. z o.o or US Pharmacia Sp. z o.o. in matters connected with personal data processing, please:

Application

In the Website Privacy Policy, we want to inform you about the actions we take in connection with the processing of the personal data gathered through our Website. The document also presents information about the rules of using your data within the services available through our Website. Additionally, we want to inform you about your rights connected with personal data processing.

Our privacy Policy takes into account the requirements of Regulation 2016/679 of the European Parliament and of the Council (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). The Regulation shall be hereinafter referred to as the “GDPR”.

Before starting to use the Website, every User should become familiar with this Privacy Policy.

Within the Website, we may obtain your personal data to allow you to report adverse effects of medicinal products, to provide answers to questions regarding the activity of our products or complaints, to deliver tips, useful information and news about USP Zdrowie products and services to the Users.

Reporting adverse effects through the contact form or on the phone

The forms for reporting adverse effects of medicinal products available on the Website pages allow healthcare professionals and patients as well as their legal guardians and statutory representatives to report adverse effects. You can also report an adverse effect by calling the phone numbers specified on the Website or by contacting the Polish Office for Registration of Medicinal Products, Medical Devices and Biocidal Products.

The marketing authorization holder, i.e. US Pharmacia Sp. z o.o., is the controller of the data communicated through the form or on the phone, including in particular the patient’s identification data (initials, age/date of birth, sex), identification data of the reporting person (first name, last name, address, phone number, e-mail address, specialty), description of the adverse effect.

The individuals obligated to make the reports are required to give their personal data under applicable provisions of the Polish Pharmaceutical Law of 6 September 2001 and other legislation.

Other individuals give their data voluntarily but they must do this for their report to be accepted. You can also report an adverse reaction directly to the Polish Office for Registration of Medicinal Products, Medical Devices and Biocidal Products.

US Pharmacia processes your personal data for purposes connected with the obligation of monitoring the safety of medicinal products (Article 6(1)(c) of the GDPR). For special categories of personal data, e.g. health-related data, US Pharmacia processes your data on the grounds of necessity for reasons connected with public interest in the area of public health, such grounds including assurance of high quality and security standards of medicinal products (Article 9(2)(i) of the GDPR). We process the personal data referred to above based on the Polish Pharmaceutical Law of 6 September 2001.

USP Zdrowie contact forms or phone contact with USP Zdrowie

The contact forms on the Website permit sending messages to USP Zdrowie regarding various issues (e.g. complaints, invoices, settlements, product availability, advertisements of our products, communications with our employees). You can also contact us by calling the phone numbers specified on the Website.

You give your contact details, such as first name an e-mail address, on a completely voluntary basis but such details are required for us to be able to contact you.

We process personal data to be able to contact you in connection with a query we have received. We process such personal data based on the legal ground of them being required for us to perform services by electronic means (Article 6(1)(b) of the GDPR).

Contact forms with USP Zdrowie experts

The contact forms on the Website make it possible to ask USP Zdrowie’s internal experts medical questions about USP Zdrowie’s products or about health issues. You can also ask these questions by calling the phone numbers specified on the Website.

You give us your contact details on a voluntary basis but such details are required for our experts to be able to answer your question.

Your personal data are processed for the purpose of us answering the questions you have asked the experts. We process such personal data based on the legal ground of them being required for us to perform services by electronic means (Article 6(1)(b) of the GDPR).

Statistical activities, security ensured by USP Zdrowie

Within the Website, we may gather personal data about your activities, such as behaviour on the site, actions taken, IP address, the location of logging in. Such personal data will be used for internal statistical purposes and to develop our services. The information will also be used to ensure IT security.

We process such personal data on the legal grounds of the controller’s legitimate interests (Article 6(1)(f) of the GDPR), which is improvement of the Website in order to provide top-quality services to the User.

USP Zdrowie’s marketing (proposals, special offers, newsletter)

We also use your personal data for marketing purposes, that is to promote our goods and services. Within the marketing we may also encourage you to check what our business partners have to offer.

Our marketing activities involve sending our Users messages with information about new products or services (newsletter).

We emphasise that you only receive commercial information such as proposals, special offers or newsletters if you have given separate consent to marketing communications, with a possibility of withdrawing that consent at any time. You can withdraw the consent through the link available in every e-mail with marketing communications or by sending an e-mail to: daneosoboweusp@usp.pl

We may use the personal data we collect to create User profiles based on their interests and activity on the Website. Based on such profiles, we send more personalised marketing communications about our goods.

We process such personal data on the legal grounds of the controller’s legitimate interests (Article 6(1)(f) of the GDPR), which is marketing activities.

USP Zdrowie enforcing the observance of the Terms & Conditions and counteracting fraud and abuse

In the best interest of our Users, the personal data collected within the Website are also used to monitor the compliance of particular actions with the provisions of the Terms & Conditions and to counteract fraud.

We process such personal data on the legal grounds of the controller’s legitimate interests (Article 6(1)(f) of the GDPR), which is counteraction of undesired phenomena and fraud prevention.

USP Zdrowie asserting and pursuing claims

In certain cases, we may collect personal data to assert and pursue claims regarding your use of our services within the use of our Website.

In such an event, we process such personal data on the legal grounds of the controller’s legitimate interests (Article 6(1)(f) of the GDPR), which is the need to assert, pursue, enforce or defend claims.

IP address and cookies

USP Zdrowie collects data within the Website using cookies. Cookies are small text files that store data locally on a computer or another device.

Through cookies, the site server is able to store information e.g. about preferences and settings of a computer or another device, which information is retrieved during the next visit. In other words, cookies allow friendly use of the Website, where you can use it without the need to log in repeatedly. There are persistent cookies and session cookies. Persistent cookies are stored on the User’s computer for a longer time, while session cookies are deleted automatically after you close the browser window.

Data in the form of cookies are processed based on the consent given through the web browser settings (Article 6(1)(a) of the GDPR) for statistical purposes, service development and for marketing purposes (display of advertisements on websites).

PRO Website

Some sites of our Website have pages addressed to professionals. For more information about personal data protection within the PRO Website see the PRO Website Privacy Policy available here.

Personal data recipients

In connection with the processing of the personal data specified above, your personal data can be shared with the following recipients or recipient categories:

Personal data retention period

Your personal data are retained for a period required to complete the processing purposes (e.g. for the period of keeping the account, the period required to handle reports and complaints) and arising from applicable laws (e.g. the period required to handle and retain reports regarding adverse effects of medicinal products).

In the assessment of the period required for the performance of our processing purposes, we take into account the nature of the data (including the nature of special categories), their scope and the context of the processing. We also take into account applicable laws which obligate us to further process the personal data. We have also addressed the potential risk of unlawful use or unauthorised disclosure of your personal data.

The personal data connected with cookies are retained for a time corresponding to a cookie life cycle of 14 months or until they are deleted by the User.

Rights connected with personal data processing

You may exercise your rights related to personal data processing within the Website.

In connection with our processing of your personal data, you have the following rights:

Right of access (Article 15 of the GDPR) You can receive a confirmation of whether or not we process you personal data from us at any time. If we do, you have the right to:

Right to rectification (Article 16 of the GDPR)

You can require us to rectify or supplement your personal data at any time. In respect of some of our services, you may exercise this right by changing the data on your own within your account management activities. You can also require us to rectify or supplement any other data by contacting us via e-mail, in writing or on the phone.

Right to erasure (Article 17 of the GDPR)

You have the right to request that we erase all or some personal data. If our services are connected with a possibility of creating an account, we will treat a request to erase all personal data as a request to delete the account.

You have the right to request that we erase your personal data if:

The right to personal data erasure is not an absolute right. Controllers may keep certain personal data categories insofar as required under applicable laws or as required to assert, pursue or defend claims.

Right to restriction of processing (Article 18 of the GDPR)

In connection with our processing of your personal data, you have the right to restriction if:

Right to data portability (Article 20 GDPR)

You have the right to receive the personal data you have provided and to have them sent to another personal data controller of your choice. You have the right to data portability whenever we process personal data based on a consent or based on contract performance and the processing is automated, i.e. it takes place in IT systems. To that end, we will provide you with a copy of the data in a machine readable form (CSV, Excel).

You can also request that we send the personal data directly to such a controller. Please note that if this is the case, we will only satisfy the request where technically possible.

Right to object (Article 21 of the GDPR)

You may object to the use of your personal data at any time if we process the data on the grounds of legitimate interests (Article 6(1)(f) of the GDPR).

In your personal data are processed for marketing purposes, an objection will exclude you from any marketing operations, including profiling and transmission of marketing communications. Please remember that advertisements are displayed within the Website based on your consent to the use of cookies. If you do not want to receive cookie-based advertisements, you must change browser settings.

Right to withdraw consent (Article 7 of the GDPR)

You have the right to withdraw any consent given in the use of the Website and in the use of any other services we provide. Please remember that consent withdrawal does not affect any processing done under such consent before its withdrawal.

Right to lodge a complaint with a supervisory authority

You may complain about personal data processing to a competent supervisory authority (President of the Personal Data Protection Office).