Title Image

Privacy Policy

Privacy Policy

Last updated: 2024-02-01

Below you will find information on how Labofarm entities use personal data collected when you visit their websites, pages on social networks, use their services or purchase products offered, participate in contests, apply for jobs or contact Labofarm entities.

Personal data is information that identifies an individual, e.g. name, surname, email address, order and payment details, but also data related to your activity on websites and pages on social networks.

Who is the administrator of your personal data?

The administrator of your personal data is the Labofarm entity whose website you use, from which you purchase services or products, designated as the organizer of a contest, the entity seeking employees, or the entity you contact.

Labofarm entities:

  • Labofarm sp. z o.o. (formerly Innowacyjno-Wdrożeniowe Laboratorium Farmaceutyczne Labofarm, mgr farm. Tadeusz Pawełek), ul. Lubichowska 176 b, 83-200 Starogard Gdański
  • Labofarm Agro sp. z o.o., ul. Lubichowska 176 b, 83-200 Starogard Gdański
  • Laboratorium Farmaceutyczne Labofarm sp. z. o.o., ul. Lubichowska 176 b, 83-200 Starogard Gdański
  • Laboratorium Farmaceutyczne Labofarm spółka z ograniczoną odpowiedzialnością spółka komandytowa, ul. Lubichowska 176 b, 83-200 Starogard Gdański


How is your personal data being used?

Your personal information is used for the following purposes:


Use of the website

We process personal data in order to provide services via the website. The basis for the processing of personal data is the performance of the contract for the provision of services by electronic means in accordance with the terms and conditions (Article 6(1)(b) of the GDPR).


Accounts and services for logged-in users

We process personal data in order to provide services via the website for logged-in users, i.e. accounts, forum. The basis for the processing of personal data is the performance of the contract for the provision of services by electronic means in accordance with the terms and conditions (Article 6(1)(b) of the GDPR).


Orders

We process personal data for the purpose of accepting an order, entering into a contract and fulfilling the order, including handling payment and shipping products or preparing them for collection.

The basis for the processing is to take action prior to entering into a contract, to perform the contract (Article 6(1)(b) of the GDPR) and to fulfill obligations under tax and accounting regulations (Article 6(1)(c) of the GDPR).


Providing news about products, services and promotions

We process your data to deliver emails about our products, services and promotions and the activities of Labofarm entities.

Personal data is processed on the basis of voluntary consent (Article 6(1)(a) of the GDPR).

We will also process your personal data for marketing purposes, e.g., sending information about our products, services, promotions and activities of Labofarm entities via snail mail and analyzing the effectiveness of marketing activities on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Advertisement

We use your personal information to display advertisements on this site and other sites on the Internet, and to study the effectiveness of our marketing efforts. These ads may be unrelated to your preferences, tailored to the theme of the site, or tailored to your preferences and interests (e.g., based on your activity data). The basis for processing your personal data for these purposes is our legitimate interest (Article 6(1)(f) GDPR).

Social networks

When you visit our pages on social networks (i.e. Facebook, Instagram) we process your personal data. We do this in order to promote our business, communicate with users, as well as for statistical and analytical purposes. We process personal data of users of our pages on social networks in accordance with the rules and policies of the indicated portals. The personal data used for these purposes include, in particular: names, logins, profile pictures and other publicized photos, names of people liking or observing the pages and content, as well as data contained in posts, comments, reviews, user reactions and other activities and other data published by users on our pages on social networks. The basis for the processing is our legitimate interest (Article 6(1)(f) GDPR).

Contests and quizzes

When you participate in a contest or quiz organized by us, we will use your personal data to organize, adjudicate the contest and deliver prizes on the basis of our legitimate interest (Article 6(1)(f) GDPR). In the case of winning a contest with which there will be tax and accounting obligations, your personal data will also be used to fulfill those obligations on the basis of necessity to fulfill a legal obligation (Article 6(1)(c) GDPR).

Courses

When you decide to take part in a course organized by us, we will use your personal data for the purpose of organizing the course, verifying the course, issuing a certificate, and cooperating in the awarding of points to you by the District Pharmacy Chamber. The basis for the processing of your personal data is the performance of the contract for the provision of electronic services in accordance with the course regulations (Article 6(1)(b) of the GDPR).


Statistics, analytics, improving services, enhancing user experience and ensuring IT security of the site

For these purposes, we process your personal data including, in particular, your IP address, information regarding your operating system, device type, browser, language preferences, unique ID and device ID, as well as information regarding your activity on the website. The basis for the processing is our legitimate interest (Article 6(1)(f) GDPR).


Recruitment

For this purpose, we process your data contained in the recruitment application and collected as part of the recruitment process.

Your personal data will be processed for recruitment purposes:

  • for the position to which your application relates, based on the provisions of labor law (Article 6(1)(c) of the GDPR), the necessity to take action at the candidate's request before entering into a contract (Article 6(1)(b), e.g., start date, salary), and voluntary consent for additional data (Article 6(1)(a) of the GDPR or 9(1)(a) of the GDPR, e.g., image, sensitive data) for the period necessary to carry out the recruitment process and select a candidate;
  • for other positions for a period of 1 year, if you consent (Article 6(1)(a) of the GDPR) to the processing of personal data in future recruitment processes.

In case of possible disagreements between us, your personal data will be processed for the purpose of claiming and defending against claims, based on our legitimate interest (Article 6(1)(f) of the GDPR) in principle for a period of 3 years after the end of recruitment, and longer if required by law.

Cooperation with contractors

We process personal data in order to conduct cooperation, provide communication, conclude and fulfill contracts.

  • we process the personal data of our contractors who run a sole proprietorship or enter into contracts with us as individuals on the basis of necessity to take action before entering into a contract and to perform the contract (Article 6(1)(b) of the GDPR)
  • personal data of representatives of contractors including, in particular, name and surname, contact data, other data indicated in the contract, power of attorney, KRS, we process on the basis of our legitimate reason consisting in conducting cooperation and concluding and executing contracts ( Article 6(1)(f) GDPR)
  • personal data of employees of contractors including, in particular, name, position, business contact data on the basis of our legitimate basis consisting in conducting cooperation and execution of contracts with contractors (Article 6(1)(f) GDPR).

We also process the aforementioned personal data in order to fulfill our obligations under the law, including tax and accounting regulations (Article 6(1)(c) GDPR) and for marketing purposes on the basis of our legitimate interest (Article 6(1)(f) GDPR) in promoting us and our products and services, improving our services and products, and building business relationships.

Personal data of representatives of contractors and their employees is most often provided to us by the respective contractor.

Events

If you participate in the events we organize, we will process your personal data, in particular your name, contact information, in order to organize the event, enable you to participate in it and ensure your safety on the basis of our legitimate interest (Article 6(1)(f) GDPR).

We may record the proceedings of events we organize. When we intend to record the course of an event we will inform you in the invitation or before you enter the event. If you decide to participate in an event organized by us, your personal data, in particular including the image recorded during the event, will be processed for the purpose of broadcasting, preparing photo reports, recording the course of the event, as well as using the recorded materials for promotional purposes and making them available to the public on the basis of our legitimate interest (Article 6(1)(f) of the GDPR).

We process personal data collected in the course of various business, industry and networking meetings, including personal data contained on the business card provided, in order to build business relationships on the basis of our legitimate interest (Article 6(1)(f) of the GDPR).

Adverse effects

We process your personal data contained in reports of adverse reactions to our drugs on the basis of necessity to fulfill a legal obligation (Article 6(1)(c) of the GDPR) for a period of time that allows us to fulfill our obligations under the law, not less than 10 years after the expiration of the authorization of the drug to which the report relates.


Contacs, answering inquiries

We use your personal data for the purpose of responding to your inquiry, conducting communications or taking other actions in connection with a message received from you. The legal basis for processing your personal data for this purpose is our legitimate interest (Article 6(1)(f) GDPR).


Claims, complaints

In the event of a complaint, we will process your personal data for the purpose of processing the complaint in accordance with the regulations or the law. The basis for the processing of your personal data is the performance of the contract for the provision of services by electronic means, in accordance with the regulations or any other contract concluded (Article 6(1)(b) of the GDPR). In the event of disagreements, violations of the terms and conditions or other agreements, we will also process your data to establish, assert or defend claims. The basis for processing is our legitimate interest (Article 6(1)(f) GDPR).


Implementation of requests related to the exercise of rights of data subjects

We will process your personal data contained in applications and inquiries regarding the protection of your personal data and the exercise of your rights, in order to process your requests on the basis of necessity to fulfill a legal obligation (Article 6(1)(c) of the GDPR). We will process your personal data for 5 years after exercising a right or responding, unless a longer retention period is provided for by law.

In most cases, when we ask you for personal data, the provision of such data is voluntary, however, failure to provide such data, depending on the specific situation, will result in the inability to provide services, order a product, send an inquiry via the contact form, take part in a contest. Provision of some data may be required by law, such as the requirement to provide certain data to meet tax obligations. In such situations, failure to provide data will, for example, prevent the conclusion of a contract.


How long do we keep your personal data?

We will process your personal data for the period necessary to fulfill the purposes of the processing. If your personal data are no longer needed for the purposes of the processing described in this Privacy Policy, we will delete them immediately. In particular:

  • when we process data for the purpose of performing a contract and providing services, we will keep the data until the performance of the contract and then for the period of the statute of limitations for claims under the contract, which is usually 3 or 6 years, but may be longer in specific cases provided by law
  • when we are under legal obligations, including tax and accounting obligations, we will keep personal data for the period required by specific laws
  • when the processing is based on your consent, we will process your data no longer than until you revoke it
  • when the processing is carried out on the basis of a legitimate interest, we will process the data for no longer than until we consider a raised objection to the processing of your data to be effective
  • in the case of contests, we will process the data for the duration of the contest, for the period necessary to issue prizes and handle complaints
  • in the case of sent inquiries, we will process your data for the time necessary to answer your question or to take other actions in connection with the message received from you, but no longer than 2 years
  • to establish, assert or defend against claims, we will process your data for the period of the statute of limitations for claims, which is usually 3 or 6 years, but may be longer in specific cases provided by law.


Who may access your personal data?

To make our sites work properly we need the support of external providers. We can divide them into two groups.

Service providers to whom we transfer personal data and who are subject to our instructions as to the purposes and means of processing such data (so-called processors):
- website hosting and maintenance providers
- IT service and application providers
- providers of tools for analyzing traffic and activity on websites, marketing agencies, accounting and bookkeeping firms, and providers of tools for individualized marketing campaigns.

Service providers who independently determine the purposes and means of processing personal data (controllers):
advertising network operators, law firms, auditors, consultants, postal operators, courier companies, contractors, telecommunications operators.

In addition, we provide personal data when such an obligation arises from the provisions of applicable law, in particular at the request of the Prosecutor's Office, the Police and other state authorities.

If you participate in the course we organize and provide your license number, your personal information including name, email address, specialty, license number, score will be shared with the District Pharmacy Chambers for course credit.

Data contained in reports of adverse drug reactions are submitted to the Office for Registration of Medicinal Products, Medical Devices and Biocidal Products.

As a general rule, we do not transfer your data outside the European Economic Area (EEA). However, if we happen to transfer data to an entity located in a country outside the EEA, we make reasonable efforts to ensure that the transfer is lawful and appropriate safeguards are implemented. This includes, in particular, the use of so-called standard contractual clauses approved by the European Commission. To obtain a copy of the standard contractual clauses, please contact us.

What are your rights?

You have the right to demand:

  • access to your personal data
  • its removal
  • its amendment
  • restriction of personal data processing
  • transfer of your personal data to another entity.

You also have the right to:

  • object on grounds related to your particular situation to the use of your personal data on the basis of our legitimate interests (if such an objection proves to be valid, and there is no other legal basis for processing the data, we will delete the data against the use of which the objection is made), and object to the processing of your personal data for direct marketing purposes, including profiling
  • withdraw the consent you have given for the use of your personal data at any time; withdrawal of consent shall not affect the lawfulness of its use on the basis of consent before its withdrawal
  • lodge a complaint with a data protection authority. In Poland, such an authority is the President of the Office for Personal Data Protection.


How to contact us?

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us by e-mail
rodo@labofarm.com.pl or in writing to the administrator's address: 176 b Lubichowska St., 83-200 Starogard Gdański.


Cookies

Cookies are small text files that are installed on your device when you browse websites. Cookies usually contain the name of the website they come from, the time they are stored on your end device and a special number. We, as well as our advertising partners, save cookies on your devices if you give us permission to do so. This does not apply only to cookies necessary for the provision of services.

By changing your browser settings accordingly, you can delete cookies already stored (e.g., including browsing history and cache files) or block the storage of new cookies. Depending on the settings used, you can block or delete all or only some cookies. In addition, you can choose to browse our site in “private” mode, which will limit the scope of data transferred.

To find information pertaining to a particular browser, visit the website of the browser's provider.

We use cookies for the following purposes:

  • provision of services by electronic means. These files are necessary to ensure the proper functioning of the site and its functionality, i.e. making purchases, taking care of security and preventing fraud.
  • performance testing, site usage statistics and analytics. We need the data collected through these files to conduct analysis on the functioning of our sites, as well as to improve them
  • potentially conducting marketing activities. This data allows us to select and deliver advertisements to you and to evaluate the delivery and effectiveness of those advertisements both on our sites and on other sites on the Internet and apps. In addition, we may share information such as encrypted email address or device details and customer ID with third parties such as Facebook or Google in order to present tailored and relevant advertisements on other sites on the Internet and in apps. We also collect data on interactions with an ad, such as whether the displayed ad was clicked on and whether the click led to a purchase. When conducting marketing activities, we work with external partners to manage marketing campaigns and reach users on other sites on the Internet and apps.
  • providing personalization. We collect information about how you use the Sites so that we can personalize advertising or content for you over time.

We use Google Analytics technology to study the performance, statistics and analytics of the use of our sites. You can use your browser settings to block data collection by Google Analytics. You can also block Google Analytics from sharing information about your activity on our site using the solution available at:https://tools.google.com/dlpage/gaoptout


Privacy Policy Updates

This Privacy Policy may be updated from time to time. We will post notice of any material changes to our Privacy Policy on our website, and we will indicate the date of the most recent update at the top of this document.

pl_PLPL
pl_PLPL