We Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. are committed to ensuring and protecting the privacy of people whose personal data is processed by us as a result of running our business processes.

The website ziaja.com is primarily intended to provide information about our company Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. as well as the products and services offered and to enable contact by interested persons.

Information that We collect using our websites can be used by us in connection with our business, primarily in the presentation of our products and services to enable us to present the best offer and to support marketing and sales activities.

This Privacy Policy covers all data obtained through our website and provided to us directly or indirectly in connection with our business operations. Below We describe what information We collect, for what purpose and how and to what extent it is used. The Privacy Policy also contains information on data security and our rights to access and supervise the information provided to us.

Information about the Controller.

The Controller is Ziaja Ltd Zakład Produkcji Leków Sp. z o.o. with its registered office in Gdańsk, ul. Jesienna 9, 80‑298 Gdańsk, entered into the National Court Register (KRS) kept by the Gdańsk-Północ District Court in Gdańsk, VII Commercial Department of the National Court Register under KRS number 0000021573 (hereinafter: Controller).

You can contact us by sending a correspondence to the address of our headquarters:

Ziaja Ltd Zakład Produkcji Leków Sp. z o.o.; ul. Jesienna 9; 80-298; Gdańsk; Poland.

or by sending an email to privacy@ziaja.com or by sending an e-mail to other contact addresses published on the website at https://ziaja.com.

Information about Data Protection Officer.

Our Data Protection Inspector is Firstname Lastname. On the subject of personal data processing by the Ziaja Ltd Zakład Produkcji Leków Sp. z o.o., you can contact our Data Protection Officer by sending an email to dpo@ziaja.com or by sending correspondence to the address of our headquarters:

Ziaja Ltd Zakład Produkcji Leków Sp. z o.o.; Data Protection Officer; ul. Jesienna 9; 80-298; Gdańsk; Poland.

Information about compliance with the law.

The processing of personal data is carried out primarily in accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repeal of the Directive 95/46 / EC (RODO, Regulation 2016/679, general regulation on data protection), as well as other regulations of the European Union and the Republic of Poland.

Information about obtaining personal data.

The personal data of which We are the controller are obtained by us directly from people whom they concern or indirectly from other persons or entities.

These data are processed mainly using information systems in an automated way, and in the case of obtaining documents using paper documents also in a manual manner.

The personal data obtained by us may contain various categories of personal data necessary to perform a given process or the purpose of processing personal data.

Each time We collect your personal information, We will inform you in detail, through appropriate information clauses, on all aspects related to the processing of personal data collected for the purposes of the process, activity or purpose of personal data processing.

Personal data obtained directly.

We may collect personal data from you directly in connection with the implementation of processes related to our business.

Every time We start processing your personal data, obtained directly from you, We will carry out the information obligation.

This means that We will inform you of: (1) the Controller; (2) contact details of the Data Protection Officer; (3) the purposes of processing personal data; (4) reasons for the legality of personal data processing; (5) the legal basis for the processing of personal data; (6) intent to transfer personal data to a third country or an international organization; (7) appropriate or appropriate safeguards for personal data; (8) about the possibilities of obtaining a copy of the data or about the place where the data is made available; (9) the period during which personal data will be stored, and if this is not possible, the criteria for determining this period; (10) the right to request access to personal data, rectification, deletion or limitation of processing or the right to object to the processing, as well as the right to data transfer; (11) if the processing takes place on the basis of consent to the processing of personal data - information about the right to withdraw consent at any time; (12) the right to lodge a complaint with the supervisory authority; (13) whether the provision of personal data is a statutory or contractual requirement or a condition for the conclusion of a contract and whether you are obliged to provide it and what are the possible consequences of not providing the data; (14) automated decision-making, including profiling, including relevant information about the rules for taking them, and the significance and envisaged consequences of such processing for the data subject.

In the event that We plan to continue processing personal data for another purpose for which We have collected, We will inform you before such processing begins and We will provide all relevant information in this regard.

We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.

More detailed information on the processing of personal data can be found in the relevant information clause.

Personal data obtained indirectly.

We may collect personal data indirectly in connection with the implementation of processes related to our business operations.

In the event that We will obtain personal data from other people or entities, We will make sure that the information obligation has been or will be correctly fulfilled. Depending on the arrangements with a person or entity providing us with your personal data, you may receive from us or a person or entity providing us with personal information, including information about the source of your personal data.

More detailed information on the processing of personal data can be found in the relevant information clause.

Data obtained automatically.

While using our websites or communicating with electronic means of communication, We can also obtain data provided by your browser, your device you use or your telecommunications network operator.

These data primarily relate to the use of our websites and services and are used to monitor the interest in our offers, improve the solutions applied or match content and offers of products and services, as well as to ensure communication.

More detailed information on the processing of personal data obtained automatically can be found in the relevant information clause.

Information about the purposes of personal data processing.

We undertake to constantly monitor and regularly verify the purposes of processing personal data and to delete or anonymize personal data in a situation where the purpose for which personal data were collected will be realized.

Each time We start processing your personal data, We will inform you for what purpose the data will be processed.

You can find more detailed information on the purposes of processing personal data in the relevant information clause.

Information on the legal basis for the processing of personal data.

We undertake to constantly monitor and regularly verify the premises of legality about the legal basis for the processing of personal data and to delete or anonymize personal data if there are no further reasons or grounds for the processing of personal data.

Every time We start processing your personal data, We will inform you about the premises that legalize the processing of personal data and about the laws that oblige us or authorize us to process your personal data.

Your personal data may be processed by us if: (1) you agree to the processing of personal data; (2) the processing of these data is necessary to conclude the contract to which you are a party or results from the actions We undertake prior to the conclusion of the contract at your express request; (3) the processing of these data is necessary to fulfill our legal obligations; (4) the processing of these data is necessary to protect your vital interests or another natural person; (5) the processing of these data is necessary for the performance of a task carried out in the public interest; (6) the processing of these data is necessary to achieve the objectives arising from our legitimate interests or the interest of a third party - except when your legitimate interests or rights and freedoms will be override.

With regard to the legal basis for the processing of personal data, the provisions of European Union law and the provisions of the Republic of Poland shall apply.

You can find more detailed information on the grounds of legality and legal grounds for personal data processing in the relevant information clause.

Information about the period of personal data processing.

We are committed to constantly monitor and periodically verify the processing of personal data and to delete or anonymize personal data in accordance with the designated processing period.

Each time We start processing your personal data, We will inform you about the period in which We intend to process your personal data.

You can find more detailed information about the processing of personal data in the relevant information clause.

Information about recipients of personal data.

We are committed to constantly monitor and periodically verify recipients of personal data, i.e. entities to which personal data will be shared.

Every time We start processing your personal data, We will inform you about recipients or categories of recipients of your personal data.

The sharing of personal data will take place only in cases and to the extent it will be necessary.

Your personal data may be made available to our employees, co-workers, subcontractors and our Data Protection Officer in situations when it will be necessary to perform the tasks provided for in law, internal procedures or contracts.

You can find more detailed information about recipients of personal data in the relevant information clause.

Information on the rights of the data subject.

We are committed to developing, implementing continuous monitoring and periodic verification of procedures for the implementation of the rights of data subjects, i.e. persons whose data relate to.

Every time We start processing your personal data, We will inform you about the rules of exercising your rights, in connection with the processing of your personal data by us.

Below We present general information on the ways and scope of implementation of basic rights that you have in connection with the processing of your personal data.

Reporting requests to exercise the rights of the data subject.

We provide all possible and available technical and organizational measures so that persons whose personal data We process can exercise their rights without any problems.

Therefore, please send us any applications and requests regarding the implementation of rights to our email address office@ziaja.com.

In justified cases, due to the correct identification of a person, We may ask you for additional information or provide the necessary documents confirming your identity.

The right to freely express or withdraw consent to the processing of data.

You have the right to express or withdraw your consent to the processing of personal data. In the event that your personal data is processed on the basis of your consent, We will provide you with the option of withdrawing it at any time. Your personal data may also be processed by us on a legally justified purpose, which is, among others, marketing of products and services of our own. In this case, We also allow you to withdraw consent to such action or to object to such action.

The withdrawal of consent will have an immediate effect from the moment of doing so and will not affect the processing of data that took place before its withdrawal. Withdrawal of consent does not entail any negative consequences for you, but it may prevent you from continuing to use the services or our websites in a specific manner.

The right to access personal data.

You have the right to access personal data provided to us. We implement this right primarily through electronic means of communication, providing you with up-to-date information you have provided to us - which We currently have.

You can also get copies of information We have from us. In this case, We will provide you with a copy of the personal information you provide in a structured, commonly used, readable machine format. We do not charge a fee for preparing, developing and publishing the first copy of the data.

In the case of subsequent requests, We may charge you a fee resulting from the costs of preparing, developing and delivering this data. In this case, you will be informed about the amount of the fee before another copy of the data is prepared.

The right to correct personal data.

You have the right to correct your personal data. We implement this right primarily through electronic means of communication, allowing you to provide information about the change of your personal data.

In the event that it is impossible, you have the right to demand that We immediately correct the data or delete it.

The right to delete personal data.

You have the right to request removal of your personal data. We implement this right on the basis of a clear request to delete data. A request to delete personal data may result in discontinuance of the service or use of the tools and services of our trusted partners that We have provided.

You may exercise the right to delete data if:

personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
you withdraw your consent to the processing of the data on which the processing is based and there is no other legal ground for further processing;
personal data have been processed unlawfully;
personal data must be erased in order to comply with the legal obligation provided for in European Union or European Union member country law.

Implementation of the right to request the deletion of personal data may, however, be limited if such processing is necessary to fulfill our legal obligation or to determine, assert or defend claims.

The right to limit the processing of personal data.

You have the right to request a restriction to the processing of personal data. We implement this right on the basis of a clear request to limit processing with reasons.

You can exercise the right to limit the processing of your personal data:

if you dispute the correctness of the personal data provided - for a period allowing to verify the correctness of the data in question;
the processing of personal data is unlawful, but you oppose the removal of your personal data;
the personal data We process is no longer necessary to achieve the purpose for which We have processed it, but you need it to establish, assert or defend against claims;
you object to the processing of personal data due to the special situation that has been indicated in the regulations on the protection of personal data.

The right to object to the processing of personal data.

You have the right to object to the processing of your personal data. We implement this right on the basis of a clear objection to the processing of your data.

You may exercise the right to object to the processing of your personal data in a situation where this processing takes place in connection with the implementation of our legitimate interest - for example, marketing of products and own services.

The right to personal data portability.

You have the right to make a request to transfer your personal data to another service provider.

However, due to security reasons and in the absence of standards related to data portability, We are unable to meet such a request.

In accordance with our policies, you can receive a copy of the personal information you provide us with.

The right to submit a complaint to the supervisory body.

You have the right to submit a complaint related to the processing of your personal data to the supervisory authority at any time, i.e. to the President of the Personal Data Protection Office, ul. Stawki 2; 00-193 Warszawa; Polska.

We respect your privacy and We guarantee you the opportunity to exercise rights under the law regarding the processing of personal data.

In order to avoid unnecessary disputes, before submitting such a complaint, We encourage you to contact our Data Protection Officer dpo@ziaja.com or directly with our team office@ziaja.com.

Limitations related to the implementation of the rights of the personal data subject.

The aforementioned rights and the manner of their implementation may be subject to restrictions in justified cases. Such a situation will take place in the event that this limitation will result from the obligations indicated in the legal provisions to which We are obliged. In this case, We will provide you with relevant information along with the reasons for our decision.

You can find more detailed information about the implementation of the rights of personal data subjects in the relevant information clause.

Information about the obligation to disclose data.

We are committed to continuous monitoring and regular verification of the obligation to disclose personal data.

Every time We start processing your personal data, We will inform you about the voluntary or obligation to disclose your personal data and the consequences of failing to do so.

You can find more detailed information about the obligation or voluntary submission of personal data in the relevant information clause.

Information about automated data processing.

We are committed to continuous monitoring and regular verification of the rules and techniques used for the automated processing of personal data.

Every time We start processing your personal data, We will inform you about the automated processing of personal data, in particular about automatic decision making, as well as about the importance and anticipated consequences of automated processing of personal data.

You can find more detailed information on the automated processing of personal data and on automated decision-making in the relevant information clause.

Information about profiling.

We are committed to continuous monitoring and regular verification of the rules and techniques used for the profiling based on personal data.

Each time We initiate the processing of your personal data, We will inform you about profiling based on personal data, in particular regarding the analysis or forecast of aspects relating to the effects of your work, economic situation, health, personal preferences, interests, credibility, behavior, location or information on the movement and the importance and anticipated consequences of such profiling.

You can find more detailed information on profiling based on personal data in the relevant information clause.

Information about Cookies.

Cookies are a type of technology that saves and collects data from the devices you use when visiting our websites, using our solutions, tools and services available via a web browser or reading e-mails referring to websites (containing elements graphic).

In addition to Cookies, We and the providers of tools and services We use other available technologies that allow to save information in your system or web browser in the appropriate data storages (Session Storage, Local Storage, IndexedDB).

We may place fragments of analytical tools software code provided by other providers on our website, which enable Cookies to be saved in the domains of these services. These solutions are used to monitor the quality of our websites and our services, their operation and to monitor Users' behavior.

Type of Cookies and other similar technologies used on our websites.

Below is a description of the types of Cookies and similar technologies We can use.

TYPE	DESCRIPTION OF USE
Session Cookies	Session Cookies are created in the system-user browser each time a user session is created, i.e. after the browser connects with the site. Session Cookies expire after the user session expires – e.g, after the web browser window is closed. The information contained in session Cookies are then automatically deleted.
Persistent Cookies	Persistent Cookies are created in the system – in the user’s browser after the first visit on the site or after completing a certain action. Unlike session Cookies, persistent Cookies are not deleted upon the end of the user’s session. Persistent Cookies are deleted by the user’s browser automatically after a specific period. They can also be deleted manually by the user.
Session Storage	Data storage with the same function as Cookies but with much larger data capacity (Cookies have limitations connected with their quantity and the quantity of the data they can contain). Information from Session Storage is recorded and read only if clearly requested by the server, and sent to the website user’s browser. The data gathered in Session Storage are deleted just like session Cookies – after the browser window is closed.
Local Storage	Data storage for information that are kept permanently in the system/web browser of the user until deleted. Data saved in Local Storage are not automatically available through the web server presenting a particular site but by relevant scripts (java script, flash) placed on the website or sent to the user’s browser from other servers (e.g. through placement of a partial code coming from another web server – Facebook, Twitter, Google social media icons).
IndexedDB	Data storage representing an internal database of a web browser that is used to store large data quantities. The storage makes it possible to store data in a structured form and as files. Data stored as objects to which access is limited only for specific data sources – the domains or subdomains from which they were saved.

We use Cookies and similar technologies to improve the efficiency of our websites and information services offered, and offer our Clients a more refined product offer tailored to expectations and preferences.

The analysis of data that is saved in the analytical systems We use, based on the use of Cookies and similar technologies, shows us which content is most interesting for visitors to our websites.

At the same time, the use of anonymous Cookies and similar technologies allows us to provide better content without having to send surveys and conduct trial and error or selection tests.

By use of Cookies and similar technologies, We are able to determine what We should improve and what elements on our websites should be avoided, making our websites more friendly.

Purposes of using Cookies and other technologies.

Below We describe in detail the objectives of using individual technologies.

PURPOSE	SCOPE OF USE
Analytics and statistics	The information processed in such storage is used for analysing, developing statistics, monitoring the behaviour of Users and Customers on the Website and in the Services, and presenting our advertisement (on our Website and on other sites managed by the marketing platforms We use), which ultimately helps us improve the Website and the Services.
User authorisation	The information processed in such storage is used for User authorisation in the IT System of the Service. With the information contained in such storage, We are able to properly recognise a Service User.
Service configuration	The information processed in such storage is used to store the preferred settings you have chosen within the Website and the Services. With the information contained in such storage We can memorise the settings and configuration of the Website and the Services and of selected elements, page views.
Interface language settings	The information processed in such storage is used to store the Website or Service language settings you have chosen. With the information contained in such storage We can always display the right language version for you.
Advertising	The information processed in such storage is used to deliver general advertising to the Users and the Customers as well as advertising matching their preferences.

Most web browsers allow blocking and deleting all or selected Cookies from the browser settings or setting an appropriate warning before saving this information in the User's system or browser.

However, it should be noted that changes to these settings consisting in limiting the use of Cookies may affect some of the functions available on our websites, e.g. by preventing authorization and authentication (logging into the Service User's account). If you do not change these settings, you accept the use of Cookies.

In the event that the user of our website visits them the first time from a given device or web browser, We present an appropriate message about the collection and processing of information based on Cookies and other similar technologies.

Changing cookie settings.

In the event that the user of our website is not interested in processing information by us on an automated basis based on cookies or other similar technologies, We encourage you to change the default browser settings.

Changing cookie settings in the most popular search engines:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en-US

Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox

Opera: https://help.opera.com/pl/latest/web-preferences/#manageCookies

Safari: https://support.apple.com/kb/ph21411?locale=en_US

Microsoft Edge: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Internet Explorer: https://support.microsoft.com/en-us/help/278835/how-to-delete-cookie-files-in-internet-explorer

List of trusted partners services

A current list of services of our trusted Partners and Service Providers, the scripts of which are placed on our websites to save information in cookies and in information stores using other technologies, and to which We can transfer your personal data in connection with the provision of information society services.

USŁUGA	ADRES WWW	POLITYKA PRYWATNOŚCI
Facebook	https://www.facebook.com	https://www.facebook.com/privacy/explanation
Font Awesome	https://fontawesome.com	https://fontawesome.com/privacy
Fresh Mail	https://freshmail.pl	https://freshmail.pl/polityka-prywatnosci/
FullStory	https://www.fullstory.com	https://www.fullstory.com/legal/privacy
Google Analytics	https://analytics.google.com	https://policies.google.com/privacy
Google Marketing Platform	https://marketingplatform.google.com	https://policies.google.com/privacy
Heap Analytics	https://heapanalytics.com	https://heapanalytics.com/privacy
Instagram	https://www.instagram.com	https://www.instagram.com/legal/privacy
JS Foundation (The jQuery Foundation)	https://js.foundation	https://js.foundation/about/governance/privacy-policy
Twitter	https://twitter.com	https://twitter.com/privacy

Information clauses

Information clause. Contact.

Information clause. Contractors.

Information clause. Participants of the promotion.

Information clause. Website Users.

Policy update rules.

Depending on the needs, the rules of the conducted activity and changes in the law, We will update the Privacy Policy with appropriate records as soon as possible.

We will inform the people who visiting our websites about any changes by posting relevant information on this Privacy Policy webpage.

In addition, in the event of significant changes related to the protection of privacy and the protection of personal data, We may send additional information to the e-mail address provided or require you to re-accept the rules for the processing of personal data and the protection of privacy in relation to the processing of information based on Cookies and other similar technologies .

Final provisions.

This Privacy Policy applies from the date of publication, that is from Month Day, Year.

Privacy Policy.