Information on the Processing of Personal Data of individuals who contact us by telephone, by email or by traditional mail for any matter

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”), we inform you about the rules for processing your personal data and your rights.

The following rules apply from 25 May 2018.

I. Indication of the Administrator

The administrator of personal data may be the following company from the USP Zdrowie Group, with which you contact by telephone, email, or traditional mail:

USP Zdrowie sp. z o.o. located in Warsaw at ul. Poleczki 35, postal code 02-822, registered in the business register maintained by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under the number KRS 0000347815, NIP: 7010219241.

US Pharmacia sp. z o.o. based in Wrocław, ul. Ziębicka 40, postal code 50-507, registered in the register of entrepreneurs maintained by the District Court for Wrocław-Fabryczna in Wrocław, VI Economic Department of the National Court Register under the KRS number 0000046646, NIP: 8991432896.

EU Pharmacia sp. z o.o. based in Warsaw at ul. Poleczki 35, postal code 02-822, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, under KRS number 146899, NIP: 951 20 68 112.

If you would like to contact us regarding matters related to the processing of personal data, please:

  1. sending an email to: [email protected],
  2. sending a letter to the address: USP Zdrowie sp. z o.o., ul. Poleczki 35, 02-822 Warszawa.

II. Purpose and legal basis for processing your personal data:

Companies from the USP Zdrowie Group process your personal data based on the following premises:

  1. it is necessary for the legitimate interest of the administrator (Art. 6(1)(f) GDPR) in order to enable contact necessary to respond to the question posed regarding, for example: complaints, invoices, settlements, availability or functionality of our products, advertisements of our products, contact with our employees, remaining activities of companies from the USP Zdrowie Group;
  2. processing is necessary to fulfill a legal obligation incumbent on the controller, e.g., providing medical information, handling complaints (Art. 6(1)(c) GDPR or, for specific categories of data such as health status, Art. 9(2)(i) GDPR).

If you have given us consent to process your personal data, we will process your data within the scope and purpose specified in the content of the consent.

III. Categories of Processed Personal Data

In the case where a company from the USP Zdrowie Group has not obtained personal data directly from you, it processes the following categories of data:

  1. identification data;
  2. address and contact details;
  3. data on the position held
  4. health data.

IV. Source of Acquisition of Personal Data

In the event that we have not obtained personal data directly from you, please be informed that the personal data has been obtained from a relative, caregiver providing medical or pharmaceutical care, or from another person who contacted us on your behalf.

V. Obligation to Provide Personal Data

Providing your personal data is voluntary, but necessary to answer the questions posed. In cases where we collect personal data based on consent, providing personal data is voluntary.

VI. Information about the recipients of your personal data

We transfer your personal data to:

  1. entities processing personal data on behalf of a company from the USP Zdrowie Group, including:
    1. external IT service providers who manage our IT systems and suppliers of goods or other service providers to companies within the USP Zdrowie Group (e.g., telephone service providers, postal and courier services);
    2. our partners responsible for providing physical security at our facilities and video monitoring;
  2. to entities affiliated within the USP Zdrowie Group for administrative and reporting purposes;
  3. state administration bodies within the limits resulting from the provisions of law.

VII. Periods of Personal Data Processing

The personal data processed by us are stored for the period deemed necessary for the purpose for which they were collected.

The above periods of personal data storage will apply most often. Due to the multitude of possible situations, your data may be stored for either longer or shorter periods than described above. Any questions regarding personal data storage periods should be directed to the address specified in point I of this Information.

VIII. Profiling and Automated Decision-Making

Your personal data will not be used for profiling, including automated decision-making.

IX. Rights of the data subject

You have a number of rights under the GDPR. You may submit a request to us for:

  1. access to personal data (in response, we will provide information on how we process your data and you will receive a copy of the data from us);
  2. rectification (i.e., correction) of personal data – in case the data is incorrect or incomplete;
  3. erasure of personal data (the so-called “right to be forgotten”). You can exercise this right, for example, when:
    1. we process personal data unlawfully,
    2. an objection was filed against the processing of data based on the legitimate interest of the company from USP Zdrowie and this objection will prove to be justified,
    3. data must be deleted in order for us to fulfill an obligation resulting from legal regulations;
  4. restriction of personal data processing (e.g., suspension of data operations or not deleting data due to certain circumstances);
  5. Transfer of personal data: to another controller, and when it is technically impossible, receive from us a copy of the data that has been provided to us.

From the right to data portability mentioned in point 5 above, you may only exercise this right when the processing is carried out by automated means, and additionally: (a) based on a contract that binds us, or (b) based on expressed consent.

To exercise the above rights, you can submit an application to the email address [email protected], or by sending a letter to our correspondence address: USP Zdrowie sp. z o.o., ul. Poleczki 35, 02-822 Warsaw.

X. Right to object

At any time, you may object to the processing of personal data if the basis for processing is our legitimate interest or when we act in the public interest. Upon receiving such a request, we will no longer be able to process the personal data covered by the request unless we demonstrate: a) the existence of valid legitimate grounds for processing that override your interests, rights, and freedoms, or b) grounds for establishing, pursuing, or defending claims.

XI. Right to withdraw consent for personal data processing

To the extent that you have given consent for the processing of personal data, you have the right to withdraw it. Withdrawal of consent does not affect the legality of processing carried out based on consent before its withdrawal.

XII. Right to lodge a complaint with a supervisory authority

In the event that the processing of personal data by USP Zdrowie violates the provisions of GDPR, you have the right to file a complaint with the supervisory authority.