This appendix regulates the policy adopted by Surgery in Poland Sp. z o.o. with its registered office at 8 Jordanowska Street, entered in the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna IV Commercial Department under the number KRS 0000804549, Tax Identification Number (NIP): 8943145785, hereinafter referred to as the Administrator and related entities, with regard to protection of personal data of the Users and information that may constitute a business secret and Users.
There is no requirement to provide any personal data when using the website www.coramed.uk, which is administered by Surgery In Poland Sp. z o.o.
Personal data – protection and processing
Data is processed in connection with:
• use of the coramed.uk website,
• using the online store, both to make an order and a complaint,
• to respond to a message sent through a mailbox,
Personal data is also used when sending information through the contact form and when registering on the website.
Data sent in this way include: name, surname, user address, e-mail address, telephone number, town, postal code, street, house number, NIP (taxpayer identification number).
Data processing is carried out only to the extent and for the purpose related to the answer to your question, the sale of the products you have purchased and in connection with complaints and warranty actions, and in particular for the purposes related to:
• the conclusion and implementation of the contract – in accordance with Article 6(1)(b) of the GDPR
• fulfilment of the Administrator’s obligations to store documents related to the implementation of contracts – the legal basis for data processing is the necessity to fulfil a legal obligation imposed on the Administrator – Article 6(1)(c) of the GDPR,
• possible determination, investigation of or defence against claims related to the concluded contract – the legal basis for data processing is the necessity of processing them to fulfil the legitimate interest of the administrator; the legitimate interest of the administrator is the possibility to determine and investigate claims as well as defend against claims – Article 6(1)(f) of the GDPR,
• marketing, offering products and services provided by the Administrator – the legal basis for data processing is the necessity of processing them to fulfil the legally justified interest of the Administrator; the legally justified interest of the Administrator is to provide customers with information about the products and services provided by the Administrator – Article 6(1)(f) of the GDPR.
In some cases, e.g. for the purpose of concluding a contract, providing the data referred to above is necessary, in other cases it is voluntary, but necessary for the above mentioned purposes.
In order to process your order as well as s complaint it is not necessary to give your consent to the processing of your data for marketing purposes.
With the explicit, separately given consent, Surgery in Poland Sp. z o.o. may process your personal data for the purposes of direct marketing of its own products and services and sending commercial information by electronic means of communication, to the e-mail address and telephone number provided by the Customer.
Please note that you have the right to withdraw your consent to the processing of personal data at any time. Revocation of consent has effect from the moment of withdrawal. Withdrawal of consent does not affect the lawfulness of the processing which has been effected on the basis of consent prior to its withdrawal. Revocation of consent does not entail any negative consequences. However, it may prevent the further use of services or functionalities that we may lawfully provide only with consent. Revocation of consent is possible by sending a request to the following e-mail address: email@example.com
Your personal data will be stored for a period of time in accordance with the applicable law, in order to fulfil the legal obligation imposed on the Administrator of personal data, in connection with the provision of services, sale of products and consideration of complaints.
We will store data such as your name and email address, which we process for the purposes of direct marketing of our products and services until you object to their processing. You should withdraw your consent for this purpose. Otherwise, we may decide to terminate the processing of this data, if we establish that your consent has become obsolete.
We will provide access to your personal data if we are requested to do so by authorised state authorities, in particular prosecuting authorities, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office for Electronic Communications. Furthermore, we may pass on your data to third parties only if having your explicit consent.
In some situations, the Administrator has the right to pass on your personal data if it is necessary to carry out the sale or to handle a complaint. The Administrator shall transfer the data only to three groups: persons authorised by Surgery in Poland Sp. z o.o., i.e. employees and co-workers who must have access to the data in order to perform their duties, processing entities which Surgery in Poland Sp. z o.o. shall commission the execution of tasks, other recipients of the data, i.e. the courier company to which it commissions the delivery, banks, institutions performing online payments.
Our suppliers are based mainly in Poland and other countries of the European Economic Area (EEA) and the USA, therefore your data will not be transferred outside this area.
What rights you have:
• to access your data and receive their copy
You have the right to obtain confirmation from us whether we are processing your personal data and, if so, you have the right:
– to access your personal data,
– obtain information on the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients of the data, the intended period of storage of your data or the criteria for determining that period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making, including profiling, and the safeguards applicable to the transfer of the data outside the European Union,
– get a copy of your personal data.
• to revise (correct) your data
You have the right to correct and complete the personal data provided by you. You have the right to ask us to correct (if incorrect) and complete (if incomplete) the data;
• to delete the data (right to be forgotten)
If in your opinion there are no grounds for us to process your data, you can request that we delete it. You have the right to request that your personal data is deleted if:
– specific consent has been withdrawn, to the extent that your personal data was processed based on your consent;
– personal data is no longer necessary for the purposes for which it was collected or processed;
– there are objections to the use of your data for marketing purposes;
– you have objected to the use of your data for the purposes of statistics regarding the use of the Website and satisfaction surveys, and your objection is considered legitimate;
– your personal data is processed illegally.
Despite the request to delete personal data, in connection with raising an objection or withdrawing consent, we may retain certain personal data which is necessary to establish, assert or defend a claim. This applies in particular to personal data including: name, surname, email address and application history, which we retain for the purpose of investigating complaints and claims related to the use of our services.
• to restrict data processing
You may request that we restrict processing of your personal data to the storage or performance of agreed actions only if you believe that we have incorrect data or are processing it unjustifiably, or you do not want us to delete it because it is necessary to establish, assert or defend a claim, or for the duration of the objection to data processing. You have the right to demand a restriction on the use of your personal data in the following cases:
– if you dispute the correctness of your personal data – then we will limit the use of your data for the time we need to verify its correctness, but for no longer than 14 days;
– if the processing of your data is unlawful and instead of deleting the data, you request a restriction on its use;
– when your personal data is no longer necessary for the purposes for which we have collected or used it, but is needed by you to establish, assert or defend a claim;
– if you object to the use of your data, then the restriction is for the time necessary to consider whether, due to your particular situation, the protection of your interests, rights and freedoms outweighs the interests we pursue by processing your personal data.
• to object to the processing of your data for the purpose of direct marketing
If you exercise this right, we will cease processing your data for this purpose. If your objection proves to be justified and we have no other legal basis for processing your personal data, we will delete the data against which you have objected;
• to transfer data
You have the right to receive from us, in a commonly used, readable format, personal data concerning the person who provided it, based on his or her consent. You may also request that we send this data directly to another party;
• to lodge a complaint with a supervisory authority
You can submit to us any complaints, enquiries and requests regarding processing of your personal data and exercising your rights. If you believe that we are processing your data unlawfully, you may submit a complaint to the President of the Office for Personal Data Protection at 2 Stawki Street in Warsaw or another supervisory authority.
How you can demand that we exercise your rights
To exercise your rights, please send your request to firstname.lastname@example.org. Please note that before exercising your rights, we will have to make sure that it is exactly the person who provided us with all the data, i.e. we will identify you accordingly.
If, in exercising the aforementioned rights, you make a request to us, we will comply with the request or refuse to comply with it immediately, but no later than one month after receiving it. If, however, due to the complexity of the request or the number of requests, we are unable to comply with the request within one month, we will do so within a further two months, by notifying in advance about the intended extension of the deadline.
For technical reasons, we always need 14 days to update the settings you have selected in our systems. Therefore, it may happen that during the system update you will receive an e-mail from us you have opted out of receiving.
Any marketing permissions can be revoked at any time. This is possible by sending information about the withdrawal of consent to email@example.com or by using the link which is at the end of each information we send in the Newsletter.
We have appointed a Data Protection Inspector who can be contacted in matters related to personal data protection and exercising one’s rights. The contact is possible at firstname.lastname@example.org or in writing to the address of our Company.
There is a video surveillance system on the premises of Surgery in Poland Sp. z o.o., which is used for the purpose of ensuring the safety of life, health and property protection of employees and customers and all persons staying on the premises. The monitoring does not record the performance of procedures and does not register the intimate area of customers staying at the facility. Recordings are deleted after 30 days from the date of recording, with the exception of situations in which they are protected in accordance with separate legal regulations.