Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (‘GDPR’), we hereby provide the following information.

§ 1. Identification of the controller

The controller of your personal data is Bartosz Waliś, conducting business activity under the name Bartosz Waliś dermostica institute, ul. Królowej Jadwigi 43, 61-872 Poznań (hereinafter ‘DERMOSTICA’). In matters relating to the processing of personal data, please contact us at the following email address: office@dermostica.com.

§ 2. Purposes and legal basis for the processing of your personal data:

DERMOSTICA processes your personal data primarily to enable you to go through the procedure of determining, at your request, whether you can take on the role of a volunteer and to take steps to conclude a contract between DERMOSTICA and you (Article 6(1)(a) and (b) of the GDPR). 1 lit (a) and (b) of the GDPR).

§ 3. Obligation to provide personal data

The provision of your personal data is a prerequisite for the verification procedure, which will determine whether it is possible to conclude and perform a contract between you as a volunteer and DERMOSTICA.

§ 4. Information about the recipients of your personal data

In connection with the processing of your personal data for the purposes indicated in point II, your personal data may be made available to the following recipients or categories of recipients:

1. entities supporting DERMOSTICA in its business processes and activities, including entities processing personal data on behalf of DERMOSTICA, on the basis of agreements concluded by DERMOSTICA, in accordance with applicable law. In particular, personal data may be disclosed to entities providing accounting, legal or IT services to DERMOSTICA (so-called data processors);

2. public authorities and entities performing public tasks or acting on behalf of public authorities, to the extent and for the purposes resulting from legal provisions.

§ 5. Periods of personal data processing

Your personal data will be processed for the period necessary to achieve the above-mentioned purposes, i.e. in the scope of concluding a contract between you and DERMOSTICA, for the period until the conclusion of the contract. If the contract is not concluded, your data will be deleted from our database after 10 years. If a contract is concluded, we will present separate arrangements for the further processing of personal data.

§ 6. Profiling and automated decision-making

Your personal data will not be used for profiling or automated decision-making regarding you.

§ 7. Rights of the data subject

DERMOSTICA wishes to assure you that all persons whose personal data is processed by DERMOSTICA are entitled to the relevant rights under the GDPR. In this regard, you are entitled in particular to the following rights

1. the right to access your personal data, including the right to obtain a copy of such data;

2. the right to request rectification (correction) of personal data – if the data is incorrect or incomplete;

3. the right to request the erasure of personal data (the so-called ‘right to be forgotten’) – if (i) the data is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the data subject has objected to the processing of personal data, (iii) the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing, (iv) the data is processed unlawfully, (v) the data must be deleted in order to comply with a legal obligation;

4. the right to request restriction of personal data processing – where: (i) the data subject contests the accuracy of the personal data, (ii) the processing is unlawful and the data subject opposes the erasure of the data, requesting restriction instead, (iii) the controller no longer needs the data for its purposes, but the data subject needs them for the establishment, exercise or defence of legal claims, (iv) the data subject has objected to the processing – pending verification whether the legitimate grounds of the controller override those of the data subject.

§ 8. Right to withdraw consent to the processing of personal data

To the extent that you have given your consent to the processing of personal data, you have the right to withdraw your consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of consent before its withdrawal.

§ 9. Right to lodge a complaint with a supervisory authority

If you believe that DERMOSTICA's processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.

§ 10. Transfer of personal data to entities outside the European Economic Area (‘EEA’) or international organisations

DERMOSTICA will not disclose your personal data to entities based outside the EEA.