This document is a part of the Information Security Management System in force at Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company), and is applicable in respect of adopted security policies.
The information presented in this document is the fulfilment of the obligation of the Personal Data Controller in accordance with Article 13 of the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (Regulation 2016/679, GDPR).
INFORMATION ON THE PERSONAL DATA CONTROLLER.
The Personal Data Controller is Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company), with its registered office in Gdańsk at Jesienna 9, 80-298 Gdańsk, NIP: 5840201186, REGON: 008102970, KRS number: 0000021573.
In all matters related to personal data processing, please contact the Personal Data Controller as follows:
- by post to the address: Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company), Jesienna 9, 80-298 Gdańsk;
- via the contact form and contact details given on the Contact page: https://ziaja.com/kontakt;
- by e-mail: ziaja@ziaja.com.
INFORMATION ON THE PURPOSES, LEGAL BASIS AND THE PERIOD OF PERSONAL DATA PROCESSING
|
THE PURPOSE OF PERSONAL DATA PROCESSING |
THE LEGAL BASIS OF PERSONAL DATA PROCESSING |
THE PERIOD OF PERSONAL DATA PROCESSING |
|
Execution of the terms of the promotion |
Personal data processing is necessary for the purpose of actions taken before the conclusion and implementation of the contract (Article 6 (1) (b) of the GDPR) in connection with the execution of the terms of the promotion. |
30 days from the end date of the promotion. |
|
Maintaining accounting and tax records |
Personal data processing is necessary for performing legal obligations (Article 6 (1) (c) of the GDPR) in connection with the provisions of the Accounting Act and other tax regulations. |
5 years calculated from the end of the calendar year following the year in which the contract was terminated. |
|
Formulating and responding to a request or other query |
Personal data processing is necessary for the purpose of a legitimate interest pursued by the Personal Data Controller (Article 6 (1) (f) of the GDPR), which consists in the ability of providing an answer to a question or query concerning the activities carried out. |
The period of maintaining current relations, e.g. answering questions, presenting offers, exchange of correspondence. |
|
Support, investigation and defence in the event of mutual claims |
Personal data processing is necessary for the purpose of a legitimate interest pursued by the Personal Data Controller (Article 6 (1) (f) of the GDPR), which consists in the right of defence or investigation in the event of mutual claims. |
For the period during which the parties are entitled to raise civil law claims (the statute of limitations period). |
|
Consideration of claims, complaints and queries |
Personal data processing is necessary for the purpose of a legitimate interest pursued by the Personal Data Controller (Article 6 (1) (f) of the GDPR), which consists in ensuring high quality products and services, and a good image of the company. |
Until the statute of limitations for any mutual claims expires, no longer than 10 years calculated from the end of the calendar year following the year when the event which might give rise to a claim occurred. |
|
Direct marketing |
Personal data processing is necessary for the purpose of a legitimate interest pursued by the Personal Data Controller (Article 6 (1) (f) of the GDPR), which consists in promoting the company, as well as its services and products. |
Until an objection is raised. |
INFORMATION ON THE RECIPIENTS OF PERSONAL DATA
Your personal data may be disclosed to the following categories of recipients:
- authorized employees and associates of Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company);
- entities providing selected services for Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company), including legal, financial, IT, physical security and communication services;
- to authorized state government bodies, including internal revenue offices and tax audit authorities.
The data will be disclosed only to trusted recipients and processed only to the extent that it is necessary to provide services for the benefit of Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company).
INFORMATION ON THE RIGHTS OF THE DATA SUBJECT
In connection with the processing of your personal data, you have the following rights:
- to access the data and receive its copy, provided that the right to obtain the copy does not adversely affect the rights and freedoms of others;
- to rectify (correct) your data if it is incorrect;
- to delete the personal data provided that the processing of the data is not carried out in order to comply with a legal obligation and is not necessary for the establishment, exercise or defence of claims;
- to object to the processing of the data, in view of your special circumstances, in the event of processing the data in connection with the implementation of the legitimate interest of Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. (limited liability company), In the case of direct marketing purposes, the data will not be processed for this purpose after the objection has been raised.
- the right to restrict the data processing;
- the right to lodge a complaint to the supervisory authority, ie. to the President of the Office of Personal Data Protection, Stawki 2; 00-193 Warszawa;
INFORMATION ON THE OBLIGATION TO PROVIDE DATA
The provision of data is not mandatory but necessary for the execution of the terms of the promotion.
INFORMATION ON AUTOMATED DECISION-MAKING, INCLUDING PROFILING
Your personal data will not be used for automated decision-making, including profiling.
INFORMATION ON THE TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
Your personal data will not be transferred to third countries, i.e. outside the European Economic Area.