The Polish version of this document is binding. This translation is provided for information purposes only.
The controller of your personal data (hereinafter the Controller) is BadamySie.pl Sp. z o.o., with its registered office in Gdańsk, at ul. Żabi Kruk 10, NIP: 5833398489. The Controller has appointed a Data Protection Officer (hereinafter IODO), who can be contacted by telephone at: 22 3797997, and by email at: [email protected].
Your personal data will be processed on the basis of the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (hereinafter the GDPR), as well as the Act of 10 May 2018 on the Protection of Personal Data (Dz. U. 2018, Poz. 1000).
In fulfilment of the obligations imposed by the provisions of the GDPR, the Controller hereby provides the following information concerning the processing of your personal data.
- The following categories of personal data, namely email address, sex and year of birth, will be processed on the basis of your separately given consent (Article 6(1)(a) GDPR) for the following purposes: email marketing, including email.
- You have the right to withdraw any consent given to the Controller for the processing of personal data, without affecting the lawfulness of processing based on consent before its withdrawal. You may withdraw your consent by writing to the Controller’s correspondence address or the IODO’s email address, or by telephone (contact details above).
- The processing of the following categories of your personal data, namely: first name and surname, correspondence address, email address, year of birth, PESEL number, sex, telephone number and medical data, is necessary for the performance of the contract for the provision of a medical service concluded between you and the Controller (Article 6(1)(b) and Article 9(2)(h) GDPR).
- The processing of the following categories of your personal data, namely: first name and surname, correspondence address, email address, PESEL number and type of service, is necessary for compliance with the following legal obligations to which the Controller is subject (Article 6(1)(c) GDPR): tax obligations, statistical obligations and obligations arising from healthcare legislation.
- The following categories of your personal data, namely: first name and surname, correspondence address, email address, year of birth, PESEL number, sex, telephone number and medical data, will be transferred to other entities for purposes necessary for their processing in accordance with the processing purpose declared by the Controller or in accordance with your instructions. The recipients to whom we transfer your data are the Controller’s subcontractors providing medical services (including Sanepid) and administrative services for you.
- The Controller will process your personal data referred to in point 1 until consent is withdrawn, in point 3 until the contract has been performed, and in point 4 for a period of 6 years until the tax and statistical obligations have been fulfilled, and for the periods prescribed by law for the retention of medical records.
- You have the right to request from the Controller access to your personal data, their rectification, erasure or restriction of processing, as well as the right to data portability and the right to object to their processing.
- You also have the right to lodge a complaint against the Controller or concerning the processing of your personal data with the supervisory authority, which is the President of the Personal Data Protection Office (Poland).
- No personal data are used for automated decision-making.
- The provision of personal data is voluntary, but failure to provide them will result in the Controller being unable to provide you with medical services.
You can find more information about the protection of your personal data, including when using our portal, at: www.BadamySie.pl under the Privacy Policy including Cookies tab.
