Privacy Policy

This Privacy Policy defines the principles adopted by InformatykaMEDYCZNA.pl with its registered office in Warsaw (postal code 00-105) at 18 Twarda Street, NIP:7742409337, REGON:369612473, for the processing of personal data collected from users of the website www.informatykamedyczna.pl hereinafter referred to as the Website.

The Privacy Policy document is an expression of concern for the rights of visitors to the Website located in the company’s domains and using the services offered through it.

It also fulfills the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free flow of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L119 of 4.05.2016, page 1) (hereinafter RODO).

Personal information

Personal data – according to the disposition of Article 4(l) RODO means information about an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

Personal data controller

The administrator of the personal data of the Users of the Website is InformatykaMEDYCZNA.pl with its registered office in Warsaw (postal code 00-105) at 18 Twarda Street, NIP:7742409337, REGON:369612473, e-mail: info@informatykamedyczna.pl

Basis, purpose and scope of processing

The Data Controller declares that it processes the personal data of users in accordance with the Service in accordance with Article 6(l)(b) – i.e. the processing is necessary for the performance of a contract (use of the Service) to which the data subject is a party or to take action at the request of the data subject prior to entering into a contract, or in accordance with Article 6(1)(a), i.e. on the basis of the consent of the data subject.

The Data Controller processes personal data in order to fulfill the contract (use of the Service) or the purpose indicated in the consent. The Data Controller processes data only to the extent necessary for these purposes and for the period necessary to fulfill the contract or until the Service user withdraws consent.

The Administrator’s Service located at www.informatykamedyczna.pl may collect the following personal data:

• name, surname;
• email address;
• phone number;
• IP address.

Recipients (processors of entrustment) of personal data will be: the entity providing maintenance of the website, entities providing IT and accounting services for the Administrator. The exchange of personal data with these entities is governed by a data entrustment agreement.

The personal data of Service Users are not shared with third parties, except when such sharing results from applicable laws obliging the Administrator to transfer the personal data to authorized entities.

The administrator collects service logs, however, does not associate them in any way with personal data. Based on the log files, statistics may be generated to assist in administration. Aggregate summaries in the form of such statistics do not contain any identifying characteristics of visitors to the Site.

The Administrator declares that the collected personal data are not subject to profiling or transferred to a third country, i.e. outside the EEA.
Users’ rights. Right of Access According to Articles 15 – 22 of RODO, each user has the following rights:

• Right of access to data (Article 15 RODO)
  • The data subject is entitled to obtain confirmation from the controller as to whether personal data concerning him or her is being processed, and if it is, he or she is entitled to access it. Pursuant to Article 15, the controller shall provide the data subject with a copy of the personal data being processed.
• Right to rectification of data (Article 16 of the RODO)
  • The data subject has the right to request from the Administrator the immediate rectification of personal data concerning him/her that is incorrect.
• Right to erasure of data (“right to be forgotten”) (Article 17 RODO)
  • The data subject has the right to request from the Administrator the immediate erasure of personal data concerning him/her, and the Administrator is obliged to erase the personal data without undue delay if one of the following circumstances occurs:
    • personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
    • the data subject has withdrawn the consent on which the processing is based;
    • the data subject objects under Article 21(1) to the processing and there are no overriding legitimate grounds for the processing.
• The right to restrict processing (Article 18 RODO)
  • The data subject has the right to request the controller to restrict processing in the following cases:
  • When data is incorrect – in time to correct it
  • The data subject has objected under Article 21(1) to the processing – until it is determined whether the legitimate grounds on the part of the controller override the grounds for the data subject’s objection.
  • The processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead that the use of the data be restricted.
• Right to data portability (Article 19 RODO)
• Right to object
  • At any time, the Administrator may accept a request to object to the processing of personal data.

The user can exercise his/her rights by sending an appropriate request to info@informatykamedyczna.pl The request, in order to be correctly identified, should be sent from the e-mail address from which the registration was made. This is the implementation of 12(6) of the RODO.

In accordance with the law, the Administrator will give the person who made the request up to one month to respond to the action taken. If the Administrator does not take such action, it will inform the person who made the request.

You have the right to lodge a complaint against the actions of the Administrator to the Supervisory Authority, i.e. the President of the Office for Personal Data Protection in Warsaw.
Security

The Service is provided with security measures to protect personal data under the Administrator’s control from loss, misuse and modification.

The Administrator shall ensure that it protects all disclosed information in accordance with the applicable regulations and security protection standards and, in particular:

1. Only authorized employees or associates of the Data Controller, as well as authorized persons involved in the operation of the Service, who have been granted appropriate authorizations, have direct access to the personal data collected by the Data Controller in accordance with 29 RODO.
2. The Administrator declares that when contracting other entities to provide services, it requires partners, in accordance with the disposition of 28 RODO, to ensure appropriately high standards for the protection of entrusted personal data, to sign appropriate entrustment agreements in which partners confirm the application of standards and , the right to control the compliance of these entities with these standards.
3. In order to ensure adequate protection of the services it provides electronically, the Administrator of the Website applies a high level of security including cryptographic protection of personal data transmission (SSL protocol).
4. Due to the public nature of the Internet, the use of electronically provided services may involve risks, regardless of the Data Controller’s due diligence.

Cookies

The Site uses “session” cookies (saved until you leave the site, close your browser) and permanent cookies (saved on your computer for a specified period of time). Some areas and functions of the Site may use cookies, i.e. text files stored on the user’s computer, identifying the user in a way necessary to enable certain operations. Cookies are used, among other things, to remember data necessary for user login. The condition for cookies to work is their acceptance by the browser and not deleting them from the disk.

Users of the sites can change their settings in this regard. The web browser allows you to delete and block files Detailed information on this subject is contained in the help or documentation of your web browser. Disabling cookies will most often result in limiting or blocking some of the site’s functionality.

Third-party cookies:

• www.informatykamedyczna.pl uses third party cookies – Google Analytics – for more information visit: google.com/analytics/learn/privacy.html
• Cookies used on the homepage and subpages of the Website do not store personal data.

Changes to the Privacy Policy

The Administrator of the Website reserves the right to change the above privacy policy at any time and place, while undertaking to promptly publish the new privacy policy on the Website.

The Data Controller reserves the right to make changes, withdraw or modify the functions or features of the Website’s pages, as well as to discontinue operations, transfer rights to the Website and perform any legal actions permitted by applicable laws.

Date of publication of the Privacy Policy: 2022.06.06