PRIVACY NOTE PURSUANT TO ART. 13 & 14 OF GDPR

Respecting the right to privacy of individuals, as well as ensuring the transparency of the processing carried out, Wörwag Pharma Operations Sp. z o.o. presents the data protection principles applicable to its structure, established on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter “GDPR”).

§ 1

Wörwag Pharma Operations Sp. z o.o. (formerly: Sensilab Polska Spółka z ograniczoną odpowiedzialnością S.K.A.) having the registered office in Konstantynów Łódzki (95-050), ul. Gen. M. Langiewicza 58, entered into the Register of Entrepreneurs of the National Court Register by the District Court for Łódź-Śródmieście in Łódź, 20th Commercial Division of the National Court Register, under number 0000940207, holder of Tax Identification Number NIP: 7261407230, share capital: PLN 5,552,300.00, Waste Database BDO No.: 000019794, shall be the Controller of your personal data, i.e. the entity that decides on the purposes and means of processing.

In any matters related to the processing of personal data, the Controller can be contacted by email at: rodo(at)top.woerwagpharma.pl

§ 2

In carrying out its business activities of manufacturing medicinal products and dietary supplements, Wörwag Pharma Operations Sp. z o.o. processes your personal data for the following purposes:

Purpose of processing

Legal basis and data retention period

Legitimate interest
(Art. 6(1)(F) of GDPR), if any

Data acquisition source, if obtained from a third party

Activities aimed at concluding and performing a contract with a client or contractor within the scope of the controller’s activities or using professional services

Art. 6(1)(b) of GDPR
(applicable to clients/contractors who are natural persons)

Art. 6(1)(f) of GDPR
(applicable to persons who cooperate with the Controller on behalf of the client/contractor)

Data will be stored until the expiry of the statute of limitations for contractual claims - in accordance with the applicable legislation.

Establishment and maintenance of business relations and conclusion and performance of contracts with an entity providing services or goods, within the structure of which the person whose data is processed or whom the person represents is employed.

The data acquisition source is the client/contractor within the structure of which the person whose data is processed or whom the person represents is employed.

Establishment, exercise and defence of claims

Art. 6(1)(f) of GDPR 
Data will be stored until the expiry of the statute of limitations for contractual claims - in accordance with the applicable legislation.

Processing of data of clients or contractors and their employees/co-workers in connection with the establishment, exercise and defence of claims.

The data acquisition source is the client/contractor within the structure of which the person whose data is processed or whom the person represents is employed.

Keeping of accounts, bookkeeping and financial reporting

Art. 6(1)(c) of GDPR 
Data will be processed until the expiry of data retention obligations under the law, in particular the law regarding the retention of accounting documents (as a general rule - for 5 years following the year in which the legal event obliging one to issue an accounting document occurred).

  
Recruitment

Art. 6(1)(b) of GDPR

(applicable to recruitment for which recruitment documents have been submitted)

 

Art. 6(1)(a) of GDPR

(applicable to cases where personal data is used for further recruitment based on voluntary consent)

  
Conduct of activities within the Wörwag Group

Art. 6(1)(f) of GDPR
(applicable to persons employed by or representing other entities within the Wörwag Group)

Data will be stored for 10 years from the date of termination of cooperation within the Wörwag Group.

Establishment and maintenance of business relations within the Wörwag Group with group entities within the structure of which the person whose data is processed or whom the person represents is employed.

The data acquisition source is the Wörwag Group entity within the structure of which the person whose data is processed or whom the person represents is employed.

 

§3

The data recipients may be:

  • the Controller’s employees, persons employed under civil law contracts (contract of mandate, cooperation contract, contract for specific work, b2b),
  • entities providing specialist services to the Controller, in particular IT services, HR and payroll services, legal services, etc.,
  • the Controller’s subcontractors,
  • state authorities or other entities authorised by law.

§ 4

Every person whose data is processed by Wörwag Pharma Operations Sp. z o.o. has the right to:

  • access their data and to receive a copy of it,
  • rectify (correct) their data,
  • have their data deleted,
  • limit the processing of their data,
  • transfer their data - if the legal basis for the processing is consent (Art. 6(1)(a) or Art. 9(2)(a) of GDPR) or contract (Art. 6(1)(b) of GDPR),
  • object to the processing of their personal data - where the legal basis for the processing is the legitimate interest (Article 6(1)(f) of GDPR),
  • withdraw the consent at any time, without affecting the lawfulness of processing carried out on the basis of the consent before the withdrawal,
  • lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office. More information at: https://uodo.gov.pl/pl/p/skargi.

§ 5

The provision of data is necessary for the conclusion of contracts and the settlement of business activities and for Wörwag Pharma Operations Sp. z o.o. to comply with the legal requirements.  This means that if you wish to use the services offered by Wörwag Pharma Operations Sp. z o.o. or to become its contractor, supplier or co-worker, you must provide your personal data.

§ 6

As a general rule, the personal data will not be transferred outside the European Economic Area.

§ 7

Your personal data will not be used for automated decision-making (including profiling).