This document governs the Privacy Policy of the website operated in the PTGP.PL domain (hereinafter referred to as the Website). The Polish Society of Plastic Gynecology Sp. Z o.o. (hereinafter referred to as the Administrator) exercises all due diligence to respect the privacy of Website Users.
1. Basic information
I. Personal data administrator
The controller of personal data (ADO) contained on the ptgp.pl website is the Polish Society of Plastic Gynecology, a limited liability company, with its registered office in Szczecin at ul. Mazurska 7/4, postal code: 70-424 Szczecin; entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court Szczecin Centrum in Szczecin, 13th Commercial Division of the National Court Register under the KRS number 0001068766, Tax Identification Number (NIP): 8513302526 and National Business Registry Number (REGON): 52692137100000
The duties of the Data Protection Officer (DPO) are performed by the company’s Management Board. Contact the DPO: office@ptgp.eu
II. Personal data
We process Users’ personal data in structured datasets, which we define based on the purpose of processing. We process this data to the extent necessary to achieve the established purpose.
The purpose and scope of specific data processed varies between services – detailed information is presented for each service during the registration process for a given service or in the service terms and conditions.
We process your data that you provide to us or make available in the browsing history of websites and web applications as part of using the services – PTGP websites or applications.
We also process data collected during your activity on the services – websites and applications, including the pages and locations you visit, the time of your visit to a given location, your clicks, how you use the services, information about your end device or browser, including its location.
We create and process data contained in event logs. These are internal event logs of the Website server, automatically recording page requests sent when Users visit its websites. System logs include the page request sent by the User, IP address, browser type, browser language, the date and time of the request, and at least one cookie that may uniquely identify the User’s browser.
In addition, possible purposes of processing personal data are:
• evaluation and analysis of activity, including profiling (automated processing of personal data for the purpose of presenting tailored advertisements or market and statistical analyses),
• fulfilling legal obligations resulting from the provisions of generally applicable law, e.g. accounting or tax law,
• pursuing claims and responding to them.
We always inform you about the purposes of processing your personal data before or at the time of collecting it.
III. Protection of personal data and its disclosure
The personal data controller exercises special and due diligence to protect the rights of Users whose data are subject to processing, and in particular ensures that these data are:
• processed lawfully, fairly and transparently,
• collected for lawful purposes, about which we inform you when collecting this data,
• not subject to further processing incompatible with the purposes stated in the information obligation,
• correct and updated as necessary,
• factually correct and adequate in relation to the purposes for which they are processed,
• appropriately protected against unauthorized access, destruction, disclosure and unlawful use,
• stored in a form which allows identification of data subjects, no longer than is necessary to achieve the purpose of processing, which we inform you about before collecting personal data or during this process.
The Personal Data Administrator reserves the right to entrust the processing of personal data of Users whose data it administers to other companies in order for these companies to properly perform activities related to the administration, maintenance and management of the Website, as well as to pursue claims and clarify the circumstances of unauthorized use of services provided electronically.
Your data is not transferred outside the European Economic Area.
IV. Basis and duration of personal data processing
When collecting personal data, we always inform you about the legal basis for processing it. When we inform you about:
• Article 6 point 1 letter a) of the GDPR – this means that we process personal data based on the consent received,
• Article 6 point 1 letter b) of the GDPR – this means that we process personal data because they are necessary to perform the contract or to take action before its conclusion, upon request,
• Article 6 point 1 letter c) of the GDPR – this means that we process personal data in order to fulfill a legal obligation,
• 6 point 1 letter f) GDPR – this means that we process personal data in order to pursue legitimate interests, about which we always inform you.
We may also process personal data on the basis of other specific provisions, such as the Act on the Provision of Electronic Services.
The duration of personal data processing depends on the basis and purpose of processing. We always inform you about this period before or during the collection of personal data. Examples of personal data storage periods:
• Personal data processed in connection with marketing activities will be processed until an objection to the processing of such data is received.
• Personal data processed on the basis of consent to the processing of such data will be processed until the consent is withdrawn.
• Personal data processed using cookies and similar technologies will be processed until you delete these files using your browser or device settings and object to their processing.
• Personal data processed in connection with the implementation of applicable legal provisions (e.g. for the purpose of issuing an invoice) will be processed within the time required by generally applicable accounting and tax law provisions.
• Personal data related to the provision of services, including sales, will be stored until claims can be asserted against us or by us, i.e. in accordance with the generally applicable limitation periods for claims.
V. User Rights
In connection with the processing of personal data, individuals whose personal data we process have rights related to such processing. The ability to exercise the following rights depends on the legal basis for personal data processing.
The right to access data
Data subjects are entitled to obtain confirmation from us as to whether their personal data is being processed. If so, they are entitled to access the data and additional information (including purposes, categories, recipients, retention, permissions, and source).
Upon receiving such a request, we are obligated to provide a copy of the personal data being processed. If such a request is received electronically, and unless we receive a different objection, we will also provide the information electronically.
VI. The right to rectify data
The data subject has the right to request immediate rectification of any inaccurate personal data concerning them. Taking into account the purposes of processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
VII. The right to be forgotten
A data subject has the right to request that we delete their personal data without undue delay. We are obligated to delete personal data without undue delay if one of the following circumstances applies:
• consent to the processing of personal data has been withdrawn and there is no other basis for processing,
• has effectively objected to the processing,
• personal data were processed unlawfully,
• personal data must be deleted in order to comply with a legal obligation,
• the data were collected in connection with the provision of information society services.
VIII. The right to restrict processing
The data subject has the right to request that we restrict processing in the following cases:
• the data subject contests the accuracy of the personal data – for a period enabling us to verify the accuracy of such data;
• the processing is unlawful and the data subject opposes the deletion of personal data, requesting instead the restriction of their use;
• we no longer need the personal data for the purposes of processing, but the data subject requires them to establish, pursue or defend legal claims;
• the data subject has objected to the processing under Article 21(1) of the GDPR – pending the determination of whether the legitimate grounds on our part as controller override the grounds for objection of the data subject.
IX. Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them based on Article 6(1)(f) (legitimate interest of the controller), including profiling. We may then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
Even if the data subject objects to processing for direct marketing purposes (including profiling for marketing purposes), the personal data may no longer be processed for such purposes.
Automated decisions, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar manner.
The law does not apply if this decision:
• is necessary for the conclusion or performance of a contract between the data subject and us;
• is permitted by EU law or the law of the Republic of Poland and which provides appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; or
• is based on the explicit consent of the data subject.
The desire to exercise any of the rights should be reported in writing to the contact address of the Controller or by e-mail to the address of the IOD, which are indicated in the first point of this Policy.
In case of justified doubts as to your identity when submitting the above-mentioned requests, the Administrator reserves the right to request additional information necessary to confirm it.
If you believe that your data is being processed in breach of the regulations, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
2. Purchase in store.
We process the necessary data needed to process the order via the website, including payment processing.
How long do we process data?
Your data will be processed until the basis for their processing exists, i.e.:
• in the case of consent granted until its withdrawal, restriction or other actions on your part limiting this consent,
• if the data is necessary for the performance of the contract, for the duration of its performance and until the expiry of the limitation period for claims arising from this contract (3 or 6 years); in the case of a 6-year period, it is extended, in accordance with Article 118 of the Civil Code, until the end of the calendar year in which the 6-year period expires – e.g. if the 6-year period expires on May 1 of a given year, the limitation period is extended until December 31 of that year). The beginning of the period is counted from the date the claim becomes due,
• if the basis for data processing is the legitimate interest of the controller, until you submit an effective objection, for tax and accounting purposes to the extent and for the period consistent with applicable regulations.
What rights do Users have as personal data subjects?
In accordance with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – (GDPR), you have the following rights:
• the right to access data, including obtaining a copy of the data,
• the right to request rectification of data
• the right to delete data (the right to be forgotten),
• the right to lodge a complaint with the personal data protection supervisory authority, which in Poland is the President of the Personal Data Protection Office,
• the right to limit data processing.
• the right to object (objection to processing, objection to direct marketing, including profiling, justified objection to the processing of your data in the legitimate interest of the Controller).
3. Cookie Policy
e-stom.pl uses cookies. These are small text files placed on end-user devices (e.g., computers) via web browsers. These files allow for the storage of certain information on the end-user device and then read by the website that created them. Cookies typically contain, in addition to the domain name of the website from which they originate, the duration of their storage on the end-user device and a unique number. We use cookies to:
a) adapting the content of the online store websites to the individual preferences of the user and optimizing the use of the websites (cookies allow, in particular, to recognize the website user’s device and display it appropriately, so that it is best suited to the user’s individual needs),
b) maintaining the user’s session of the online store after logging in – this is extremely useful for the user, as it prevents the need to log in again (enter the login and password) on each subsequent subpage of the online store,
c) creating statistics (so that we can better understand how users use websites and consequently improve the structure and content of these pages),
d) providing users with advertising content that meets their individual preferences and interests.
Typically, a user’s web browser allows cookies to be stored on the user’s end device by default. However, online store users have the ability and right to change their cookie settings at any time. To change cookie settings, users should review detailed information about the possibilities and methods of managing cookies, which are available in their web browser settings. If a user does not consent to the placement of cookies on their device, they can block them by configuring their web browser accordingly. Information on how to do this can be found in the help files of their web browser. Unfortunately, if cookies from our websites are blocked, we cannot guarantee their proper operation. If the user does not change their cookie settings, these files will be placed on the user’s end device. This means that we will store information on the user’s end device and access this information.
4. Google Analytics, Google AdWords
Websites operated by SPS Media also use technologies that are functionally identical or similar to cookies, such as Google Analytics and Google AdWords. The information regarding cookies contained in the privacy policy also applies to other similar technologies used within our online store.
Entrusting and sharing users’ personal data
1. As the Administrator of users’ personal data, pursuant to Article 31 of the Act of 29 August 1997 on the Protection of Personal Data (Journal of Laws of 2016, item 922, as amended), we may, by way of an agreement, entrust the processing of such data to other entities.
2. Sharing the user’s personal data with other persons or institutions is possible only with the user’s express consent or at his request, as well as in other cases provided for by law.
4. Contact
1. For matters related to order fulfillment, we contact the user using the email address provided by the user. Only in special circumstances do we use the phone number provided by the user.
2. If you have any questions or concerns regarding the privacy policy and security of users’ personal data, please contact us by phone at +48 692 425 515 or by e-mail at office@ptgp.eu.
If you wish to update or delete your personal data, if you are unable or unwilling to do so yourself, please contact us by phone at +48 692 425 515 or by e-mail at office@ptgp.eu.
In the above matters, you can also correspond with us at: PTPG sp z o. o. ul. Mazurska 7/4, 70-424 Szczecin
