Privacy policy

Privacy policy regulations

Pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), please be informed as follows:



1. The Controller of your personal data is Zakłady Farmaceutyczne Polpharma S.A. with its registered seat in Starogard Gdański, Pelplińska 19 Str., 83-200 Starogard Gdański, registered into the Register of Entrepreneurs of the National Court Register (KRS)by District Court in Gdańsk, VII Division under number 127044, (“Controller”).
2. You can contact the Controller in writing – at the above address.
3. The Controller has appointed a Data Protection Officer, whom you can contact in all matters regarding personal data protection, by writing to: Data Protection Officer, ul. Bobrowiecka 6, 00-728 Warszawa, at the e-mail address:
iod@polpharma.com, or by telephone: + 48 22 364 63 11.
4. Your personal data, that you have provided directly to us, will be processed for the following purposes:
   1. communication with regard to message sent through contact form – pursuant to Article 6(1)(f) of GDPR, i.e. for the purpose of legitimate interest pursued by the Controller;
   2. arrangements, pursuance or defence of any legal claims between you and the Controller – pursuant to Article 6(1)(f) of GDPR, i.e. for the purpose of legitimate interest pursued by the Controller.
5. You will be subject to automated decision-making, including decisions based on profiling.
6. Providing personal data is voluntary, however necessary to make contact.
7. Your personal data may be disclosed to Polpharma Group members (including Polpharma Biuro Handlowe Sp. z o.o. with its registered seat in Warsawa, Medana Pharma S.A. with its registered seat in Sieradz, Warszawskie Zakłady Farmaceutyczne Polfa Warszawa S.A. with its registered seat in Warsaw) IT service providers, entities providing consulting and legal services.
8. Your personal data may be made available to entities and authorities entitled to process such data under applicable laws.
9. Controller does not intend to transfer Your personal data outside the European Economic Area or international organisation.
10. Your personal data will be processed until conclusion communication or until the relevant data subject objects to such processing.
11. After the lapse of the above period, personal data will be stored until claims (if any) become time-barred or until expiry of the data storage obligation arising from applicable laws.
12. You have the right to access to data regarding you, the right to clarify such data, delete, restrict the processing, the right to submit an objection in relation to data processing, the right to personal data portability, i.e. the right to receive from the Controller you personal data, in a structured, commonly used and machine-readable format. You may transmit the data to another controller;
13. In order to exercise the rights listed above, contact the Controller or Data Protection Officer (the contact details are listed above).
14. Furthermore, you are entitled to submit a claim to the supervisory authority in charge of personal data protection (President of the Office for Personal Data Protection), if you think that data processing violates GDPR.