Personal Data

As a responsible and ethical company, we respect the right of our collaborators, business partners, and counterparties to have their personal data protected. Below we have outlined the most important principles of data protection in place at Adamed.

Who is the Personal Data Controller?

As per Articles 13 and 14 of the General Data Protection Regulation of 27 April 2016 (GDPR), please be advised that the Controller of your personal data is Adamed Pharma S.A., Pieńków, ul. Mariana Adamkiewicza 6A, 05-152 Czosnów, Poland.

Before any data processing, the Personal Data Controller identifies the purpose and the legal basis of the processing and defines the data retention period. Your personal data are being processed:

• because the processing is necessary for the performance of the contract between you and the Controller or in order to take steps to enter into the contract (Article 6(1)(b));
• to comply with legal obligations to which the Controller is subject (Article 6(1)(c));
• for the purposes of the legitimate interests pursued by the Controller (Article 6(1)(f));
• on the basis of your consent (Article 6(1)(a)).

We make every effort to ensure that you have been made aware of the purpose of the data processing, the legal basis of the processing, the data retention period, and any other information that must be shared under the notification requirement as defined in the GDPR.

If you have any questions or concerns regarding the protection of your personal data, please contact us using the indicated email address. We will be happy to provide you with detailed information.

Who is the Data Protection Officer?

A Data Protection Officer has been designated as per Article 37 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Daniel Grudzień is the Data Protection Officer at Adamed Pharma S.A. 

In performing his duties, the Data Protection Officer ensures the protection of the rights and freedoms of individuals whose personal data are processed. Therefore, the Data Protection Officer may be contacted by these individuals in any matters regarding their personal data to the extent that such data are processed.

What does a Data Protection Officer do?

A Data Protection Officer verifies the accuracy of data processing at an organisation. His/her duties also include acting as a point of contact for any reports of potential inaccuracies in the data processing. You may contact the Data Protection Officer if you believe that your rights with regard to the protection of personal data have been violated by any Adamed company. The Data Protection Officer is also the person to contact if you wish to exercise any of your rights.

In particular, these include the right to:

1. Access your personal data,
2. Rectify your personal data,
3. Erase your personal data (“the right to be forgotten”),
4. Restrict the processing of your personal data,
5. Data portability,
6. Object to the further processing of your personal data,
7. Object to automated decision-making, including profiling,
8. Report a personal data breach.

How will your request be processed?

You can file a request either through a Personal Data Controller employee or directly to the Data Protection Officer. Your request will be promptly reviewed. If the processing of your request exceeds one month, you will be notified of the response date extension in a separate letter. The response date may be extended due to the complexity of the request or the number of requests filed.

If the request does not allow for you to be identified or is unclear, the Data Protection Officer will ask you to provide additional information within a month from submitting the request.

If the request is submitted by email, further correspondence will also be provided by email where possible. Otherwise, the manner of examination of your request will be communicated to you in writing by registered letter with acknowledgement of receipt.

Requests are reviewed free of charge. However, if the request is ungrounded or repeatedly filed, the Data Protection Officer may charge a fair fee, taking into account reasonable administrative costs of processing the request, communication and performance of the requested operations or refuse to process the request.

How to contact the Data Protection Officer?

You can contact the Data Protection Officer:

• by email to: iod@adamed.com,
• in writing by sending your message to the correct address of the Personal Data Controller’s office.