Security Policy, i.e., the standards of the preparing of individual information by Bioton S.A. what’s more, Bioton Marketing Agency sp. z o.o. also, the treats strategy for the site of Bioton S.A.
Bioton Group regards Users’ entitlement to protection and we process the individual information of these Users as per the guidelines in power. Underneath we present the standards of individual information preparing by Bioton S.A. furthermore, Bioton Marketing Agency sp. z o.o.
Information Controller
The Personal Data Controller, i.e., the element which decides for what reason and how much close to home information is handled, is Bioton S.A. or on the other hand Bioton Marketing Agency sp. z o.o., contingent upon the substance you or your boss have business relations with.
Because of the business profile of Bioton S.A. also, Bioton Marketing Agency sp. z o.o., individual information may unveiled to outsiders, i.e.,:
Acquiring data on handling individual information
Bioton S.A. furthermore, Bioton Marketing Agency sp. z o.o. have alloted a Personal Data Protection Inspector, whom you can contact at iod@bioton.pl
You can likewise contact your Personal Data Controller straightforwardly:
Getting individual information and reason for individual information preparing
Bioton S.A. also, Bioton Marketing Agency sp. z o.o. continuously process your own information in a legitimate and safe way.
Objective of processing | Authorized grounds for acquiring private information and its retention interval | Lawful foundation for private information processing (if relevant) |
|---|---|---|
| Getting into into and performing a contract with a consumer or counterparty | Article 6 para. 1b and 1f GDPR All through the period of the contract and, after the contract interval, inside the statute of limitations for the claims ensuing thereof. | In justified instances, the Controller contacts the workers/collaborators of the consumer or counterparty in relation to actions previous to coming into into or performing a contract. |
| Dealing with complaints | Article 6 para. 1b and 1f GDPR 1 yr after the assure runs out or the criticism is settled. | In justified instances, the Controller contacts the workers/collaborators of the consumer or counterparty in relation to dealing with a criticism. |
| Pursuit of claims or protection towards authorized claims | Article 6 para. 1 lit. and 1f GDPR All through the declare pursuit course of, i.e., till the declare is legally concluded and, in case of enforcement proceedings, till the ultimate satisfaction of the pursued claims. | In justified instances, the Controller could course of the info of the workers/collaborators of the consumer or counterparty in relation to the pursuit of claims or protection towards authorized claims. |
| Archiving paperwork, i.e., contracts and settlements | Article 6 para. 1c GDPR As required by legislation or, if the retention interval of a selected doc shouldn’t be specified, in the course of the Controller’s lawful foundation ensuing from the interval for the potential satisfaction of claims. | |
| Statistical functions | Article 6 para. 1f GDPR A retention interval required by one other authorized foundation. We don’t retain information solely for statistical functions. | Accumulating statistical data on the Controller’s actions permits to optimize enterprise exercise. |
| Advertising and marketing personal services, with out promoting by digital means | Article 6 para. 1f GDPR Till the Consumer objects, i.e., till we’re knowledgeable in any method that the Consumer doesn’t need to obtain promoting supplies or be told of our actions. | Conducting advertising actions to advertise the corporate’s enterprise. |
| Advertising and marketing personal services by digital technique of promoting | Article 6 para. 1f of GDPR, whereas these actions require the consent of the Consumer as a result of different authorized rules, specifically the Telecommunications Regulation and the Act on offering providers by digital means. Till the Consumer objects or withdraws his/her consent, i.e., till we’re knowledgeable in any method that the Consumer doesn’t need to obtain promoting supplies or be told of our actions. | Conducting advertising actions to advertise the corporate’s enterprise by electronic mail and telephone. |
| Entry management to the Controller’s premises, together with CCTV | Article 6 para. 1f GDPR Till any objections are raised, however now not than 1 yr. | Retaining document of the individuals coming into the Controller’s premises is the Controller’s reliable curiosity. The Controller could request the essential private data of worker/collaborator (title and surname, place of employment or nature of collaboration) from the entity using/collaborating with that particular person earlier than his/her arrival on the Controller’s premises. |
| Recruitment | Article 6 para. 1a, 1c and 1f GDPR All through the recruitment course of and, if the applicant agrees for his/her private information to be retained for additional recruitment, for max 1 yr. | With out the consent of the particular person whose private information is anxious, the Controller can retain the info of candidates who haven’t been employed for as much as 6 months after the top of the recruitment course of and it’s the Controller’s reliable curiosity, for the reason that particular person employed could resign or be let go after the trial interval. |
| Administration of human sources – workers and collaborators | Article 6 para. 1a, 1b, 1c and 1f GDPR In accordance with the legislation in pressure that requires HR private paperwork to be retained for 50 years and in some instances, in view of the latest amendments, for 10 years. If the required retention interval of sure paperwork is shorter, the Controller will retain the paperwork for this shorter interval. Contracts below Civil Regulation will likely be retained till the top of the limitation interval of the potential claims ensuing thereof. | Inside the lawful foundation, the Controller can course of the worker information obtained on account of visible safety monitoring or issuing private entry playing cards. The Controller doesn’t use the picture of workers/collaborators with out their consent. |
| Dealing with ADR stories and drug security in being pregnant | Article 6 para. 1c GDPR 10 years from the date the drug is withdrawn from the market. | |
| Processing the non-public information of individuals on managerial positions on the firm of the Controller who’s the issuer of an insider checklist | Article 6 para. 1c GDPR 5 years from the date the checklist is drawn up or up to date. |
If the statute of limitations for potential claims is shorter than the retention interval of settlement paperwork for tax functions, we are going to retain these paperwork for the interval required by legislation for settlement and tax functions, i.e., for five (5) years from the top of the yr wherein the tax obligation is up to date.
Objective of processing | Authorized grounds for acquiring private information and its retention interval | Lawful foundation for private information processing (if relevant) |
|---|---|---|
| Getting into into and performing a contract with a health care provider and pharmacist and/or nurse in addition to a counterparty | Article 6 para. 1b and 1f GDPR All through the period of the contract and, after the contract interval, inside the statute of limitations for the claims ensuing thereof. | In justified instances, the Controller contacts the workers/collaborators of the counterparty in relation to actions geared toward coming into into or performing a contract. |
| Advertising and marketing Bioton S.A. merchandise with out promoting by digital means | Article 6 para. 1f GDPR Till the Consumer objects, i.e., till we’re knowledgeable in any method that the Consumer doesn’t need to obtain promoting supplies or be told of our actions. | Conducting advertising actions to advertise the corporate’s enterprise. |
| Advertising and marketing Bioton S.A. merchandise by digital technique of promoting | Article 6 para. 1f GDPR, whereas these actions require the consent of the Consumer as a result of different authorized rules, specifically the Telecommunications Regulation and the Act on offering providers by digital means. Till the Consumer objects or withdraws his/her consent, i.e., till we’re knowledgeable in any method that the Consumer doesn’t need to obtain promoting supplies or be told of our actions. | Conducting advertising actions to advertise the corporate’s enterprise by electronic mail and telephone |
| Ordering and confirming the supply of medicinal product / medical machine samples | Article 6 para. 1c GDPR 6 years from the date the samples are delivered | |
| Buying the consent for medical doctors’ visits | Article 6 para. 1a and 1c GDPR 6 years from the date the consent is withdrawn | |
| Pursuit of claims or protection towards authorized claims | Article 6 para. 1 lit. and 1f GDPR All through the declare pursuit course of, i.e., till the declare is legally concluded and, in case of enforcement proceedings, till the ultimate satisfaction of the pursued claims. | In justified instances, the Controller could course of the info of the workers/collaborators of the consumer or counterparty in relation to the pursuit of claims or protection towards authorized claims. |
| Archiving paperwork, i.e., contracts and settlements | Article 6 para. 1c GDPR As required by legislation or, if the retention interval of a selected doc shouldn’t be specified, in the course of the Controller’s lawful foundation ensuing from the interval for the potential satisfaction of claims. | |
| Statistical functions | Article 6 para. 1f GDPR A retention interval required by one other authorized foundation. We don’t retain information solely for statistical functions. | Accumulating statistical data on the Controller’s actions permits to optimize enterprise exercise. |
| Recruitment | Article 6 para. 1a,1c and 1f GDPR All through the recruitment course of and, if the applicant agrees for his private information to be retained for additional recruitment, for max 1 yr. | With out the consent of the particular person whose private information is anxious, the Controller can retain the info of candidates who haven’t been employed for as much as 6 months after the top of the recruitment course of and it’s the Controller’s reliable curiosity, for the reason that particular person employed could resign or be let go after the trial interval. |
| Administration of human sources – workers and collaborators | Article 6 para. 1a, 1b, 1c and 1f GDPR In accordance with the legislation in pressure that requires HR private paperwork to be retained for 50 years and in some instances, in view of the latest amendments, for 10 years. If the required retention interval of sure paperwork is shorter, the Controller will retain the paperwork for this shorter interval. Contracts below Civil Regulation will likely be retained till the top of the limitation interval of the potential claims ensuing thereof. | Inside the lawful foundation, the Controller can course of the worker information obtained on account of visible safety monitoring or issuing private entry playing cards. The Controller doesn’t use the picture of workers/collaborators with out their consent. |
the statute of limitations for potential claims is shorter than the retention interval of settlement paperwork for tax functions, we’ll retain these paperwork for the interval required by legislation for settlement and tax functions, i.e., for five (5) years from the top of the 12 months wherein the tax obligation is up to date.
If we course of private information for advertising and marketing functions utilizing digital means, the authorized foundation for this are specifically:
Entitlements within the scope of knowledge processing and freedom to offer private information
Furthermore, you may have the correct to submit a grievance to the supervisory authority, i.e., the President of the Private Information Safety Workplace. Extra info is out there at https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679, in Articles 12-23 of the Normal Information Safety Regulation (GDPR).
As well as, the particular person shall have the correct to lodge a grievance with the supervisory physique, i.e. the President of the Private Information Safety Workplace; extra info at: https://uodo.gov.pl/pl/p/skargi
Offering your private information is obligatory to enter into contracts and carry out settlements, in addition to in instances required by legislation. Apart from the above instances, offering your private information is voluntary.
Switch of knowledge to 3rd international locations
As a rule, we don’t switch private information to 3rd international locations, i.e., your private information can be processed throughout the European Financial Space. There could also be conditions when the fundamental private information of a Bioton S.A. worker/collaborator (e.g. identify and surname, place, work telephone quantity and e mail tackle) is transferred to a 3rd nation, nonetheless this requirement can be mandatory for the efficiency of the contract between Bioton S.A. and the worker/collaborator whose information is transferred. The switch of knowledge to 3rd international locations will solely concern workers/collaborators who carry out actions for Bioton’s consumer or potential consumer from a 3rd nation.
Automated private information processing
Your private information just isn’t topic to automated processing (together with profiling) in a way that might enable decision-making, and that will have a authorized or equally important impact on our shoppers and counterparties or their workers, docs and nurses.
We use cookies to watch and analyze visitors on our web sites.
Company
Patient
R&D
Production
Careers
Investor
Copyright 2020. All rights reserved