if the report concerns a situation in which personal data are not required, you will not have to provide it

Information about the Personal Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR), we inform that:

 

[Personal Data Controller and Data Protection Officer, Contact Details]

1. The Controller of your personal data is the company of the Polpharma Group covered by the notification of suspected violation of the law, the Code of Ethics or the Global Compliance Policy of the Polpharma Group, i.e:
   • 1.1. Warszawskie Zakłady Farmaceutyczne Polfa S.A. with its registered office in Warsaw (01-207), Karolkowa Street 22/24, inscribed in the Register of Entrepreneurs of the National Court Register under number 0000147193, District Court for the Capital City of Warsaw, XII Commercial Division of the National Court Register, NIP 5250000481, REGON 000043937, share capital: PLN 230,000,000, fully paid up; and
   • 1.2. Zakłady Farmaceutyczne "Polpharma" S.A. with its registered office in Starogard Gdański (83-200), Pelplińska Street 19, entered into the Register of Entrepreneurs of the National Court Register under number 0000127044, District Court for GdańskPółnoc in Gdańsk, 7th Commercial Division of the National Court Register, NIP 5920202822, REGON 190929369, share capital: PLN 100,207, fully paid up;
     
   (each individually hereinafter referred to as the "Controller").
2. Contact with the Controller is possible in writing - at the address indicated in points: 1. (above) and 2. (below).
3. The Controller has appointed a Data Protection Officer whom you may contact in all matters concerning personal data protection by writing to the address: Data Protection Officer Zakłady Farmaceutyczne POLPHARMA S.A. (contact details) Bobrowiecka 6 Street, 00-728 Warsaw or at the e-mail address iod@polpharma.com or by phone at + 48 22 364 63 11.

 

[Purpose and legal basis for personal data processing]

4. Your personal data will be processed for the purposes of:
   • 4.1 fulfilling the Controller's legal obligations in the form of collecting Notifications in order to prevent a crime from being committed and to respond to unlawful activities - on the basis of Article 6(1)(c) of the GDPR in connection with Article 304§1 of the Act of 6 June 1997. Criminal Procedure Code, Articles 201§1 and 368§1 of the Act of 15 September 2000. Commercial Companies Code and Article 3 of the Act of 28 October 2002. Act on liability of collective entities for acts prohibited under penalty;
   • 4.2 communication with you in relation to your message sent via the contact form - on the basis of Article 6(1)(f) of the GDPR, i.e. on the basis of a legitimate interest pursued by the Controller, which is communication with the person who initiated the contact with the Controller;
   • 4.3 possible determination, investigation or defence of claims between you and the Controller - on the basis of Article 6(1)(f) GDPR, i.e. on the basis of a legitimate interest pursued by the Controller, which is the possibility to assert claims.
5. Your personal data will not be processed in automated mode, including in the form of profiling.
6. Providing personal data is voluntary, but necessary to make contact with the Controller (failure to provide data results in the Controller's inability to respond).

 

[Categories of recipients of personal data]

7. Your personal data may be disclosed to the following entities: Polpharma Group entities, including Zakłady Farmaceutyczne Polpharma S.A. with its registered office in Starogard Gdański, and Warszawskie Zakłady Farmaceutyczne Polfa S.A. with its registered office in Warsaw, for the purpose of responding to requests sent via the form), IT service providers, entities providing advisory, legal services.
8. Your personal data may be disclosed to a lawyer or legal adviser who, on the basis of a contract with an entity from Polpharma Group, is entitled to process such data and gives a guarantee of lawful processing of personal data and who is bound by statutory secrecy.
9. Your personal data may be disclosed to entities and authorities authorized by law to process such data.
10. The Controller does not intend to transfer your personal data to countries outside the European Economic Area or to an international organisation.

 

[Data retention period]

11. Personal data processed on the basis of Article 6(1)(c) and (f) of the GDPR will be processed until the end of the Verification Proceedings, and in the case of establishing the existence of an Incident contrary to the law, the provisions of the Code of Ethics or the principles of the Global Compliance Policy of Polpharma Group until the expiration of the statute of limitations for employee or contractual liability or until the end of criminal proceedings or other administrative or judicial proceedings related to this liability.
12. After the expiry of the above period, personal data will be kept until the expiration of the statute of limitations for possible claims.

 

[Rights]

13. You have the following rights: the right of access to data concerning you, the right to rectification, erasure, restriction of processing, the right to object to processing, the right to data portability.
14. In order to exercise the rights mentioned above, please contact the Controller or the Data Protection Officer (contact details indicated above).
15. Furthermore, you have the right to lodge a complaint to the data protection supervisory body (President of the Office for Personal Data Protection), if you believe that the processing of your data violates the GDPR.