Privacy Policy
Privacy Policy effective from May 25, 2018.
Maintaining data confidentiality is extremely important to Orimed, and we want every Customer to know how we process it. Therefore, we have prepared this Privacy Policy, which describes how your personal data is protected and processed.
Who is the Controller of your personal data?
The personal data you provide to us is controlled by Orimed Martyna Jakubiak-Świrska, hereinafter referred to as ORIMED, which is the Controller of your personal data.
ul. Króla Zygmunta Augusta 9
08-445 Osieck
NIP: 5322103530
REGON: 524582203
Where is your data stored?
We store the collected personal data within the European Economic Area (hereinafter "EEA"). Every operation involving the transfer of personal data is carried out in accordance with applicable laws. We will not transfer your personal data to Third Countries, i.e., countries located outside the European Economic Area.
Who has access to your data?
Your data is accessible within ORIMED and may also be shared with external entities providing support services to ORIMED, including IT, accounting, transport, legal, or auditing services. Based on your separate and explicit consent, your personal data may also be transferred to other entities operating under the ORIMED brand in Poland if you decide to use their services. We never pass on, sell, or swap your data for marketing purposes to third parties outside the ORIMED network. Data forwarded to external parties is used solely to provide you with our services.
In the event of an inspection by the President of the Personal Data Protection Office, your data may be made available to the Inspectorate's employees in accordance with the Personal Data Protection Act.
In the event of a breach of our Website Terms and Conditions, a violation of the law, or when required by legal regulations, we may disclose your data to judicial authorities.
What are the legal grounds for data processing?
Since May 25, 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR) has been applicable.
Your personal data is processed for purposes related to the performance of the service you have ordered or intend to order. The data provided will be processed based on Article 6(1)(b) and (c) of the GDPR, and in accordance with the provisions of the general regulation on personal data protection, which means that such processing is necessary for:
- a) the performance of a contract to which you and ORIMED are parties,
- b) taking steps at your request prior to entering into a contract referred to in point a), or
- c) compliance with a legal obligation to which ORIMED is subject.
How do we collect your personal data?
Your data is collected:
- a) automatically - data regarding your visit to our website is collected automatically, e.g., your IP address, domain name, browser type, operating system type, etc.,
- b) when you contact us - when you contact us via the website, telephone, email, etc., you provide us with your personal data, e.g., name, surname, email address, etc.
How do we use your data?
If you have subscribed to our Newsletter or otherwise consented to receive it, we will use your data to send it. The request for consent to receive the Newsletter takes place during registration. Data collected automatically can be used to analyze user behavior on our website, gather demographic data about our users, or to personalize the content of our web pages. This data is collected automatically for every user. Primarily, however, personal data is collected in order to perform the services we provide, which you order or intend to order.
What are your rights?
You have the right to request information about the personal data we hold on you at any time. To do so, please contact ORIMED.
Whenever ORIMED processes your personal data by automated means based on your consent or an agreement, you have the right to receive a copy of your data in a readable format. This only includes the personal data you have submitted to us.
You have the right to request the rectification of your personal data if the information is incorrect, as well as the right to have incomplete personal data completed by contacting ORIMED.
You have the right to erase any personal data processed by ORIMED at any time, except for the following situations:
- you have an ongoing matter with ORIMED,
- you have an open order which has not yet been shipped or has only been partially shipped,
- you have an unsettled debt with ORIMED, regardless of the payment method,
- your debt was sold to a third party within the last three years,
- if you have made any purchases of goods or services, we will retain your personal data in connection to your transaction for bookkeeping purposes.
You have the right to request that ORIMED restricts the processing of your personal data.
How can you exercise your rights?
We have appointed a person responsible for answering questions regarding the above matters. To reach them, please contact: iod@orimed.pl
Do you have to provide your data?
Providing us with your personal data is entirely voluntary, although it is necessary to use our services.
Automated processing, including profiling
Your personal data may be processed in an automated manner (including in the form of profiling); however, this will not produce any legal effects concerning you or similarly significantly affect your situation.
The profiling of personal data by ORIMED involves processing your data (also in an automated manner) by using it to evaluate certain information, in particular to analyze or predict personal preferences and interests.
Data processing time
We will process your data until the service is completed, and after its completion for a period allowing ORIMED to establish, exercise, or defend against legal claims arising from the use of our services, until they are time-barred, and until the obligations resulting from tax and accounting regulations are fulfilled.
How will we contact you?
If you have used our services, you may receive emails from us regarding our services. We may also contact you by phone if there is a need to clarify certain issues related to our services.
How do we protect your personal data?
Communication between your computer and the server (when we collect your personal data) is encrypted. All store employees have been properly trained in personal data processing.
Right to lodge a complaint with a supervisory authority
If you consider that ORIMED is processing your personal data incorrectly, please contact us. You also have the right to lodge a complaint with a supervisory authority, which is the President of the Personal Data Protection Office.
Updates to our Privacy Policy
In the future, it may be necessary to update this Privacy Policy. Its latest version will always be available on our website. We will inform you of any material changes to the Privacy Policy, for example, changes concerning the purpose for which we use your personal data, the identity of the Data Protection Officer, or your rights.
