Date of issue: 10/April/2019
We carefully safeguard the information we hold about our partners, clients and employees. We endeavor to comply with the General Data Protection Regulation and the local laws applicable in the countries in which we operate.
Our website and services are not intended for children, and we do not collect personal data relating to children.
How to contact us
Curandus sp. z o.o.
6 Postępu Street
02-676 Warsaw, Poland
How we collect your personal data
We collect personal data when you provide your contact details to us when requesting information about our products or services, either via e-mail, telephone or face-to-face.
What types of information we collect about you
"Personal data" is any information that relates to you and that identifies you either directly from that information or indirectly, by reference to other information that we have access to. The personal data that we collect, and how we collect it, depends upon how you interact with us. Categories of personal data that we routinely collect about you includes:
- Full name and surname;
- Email address;
- Postal address;
- Job title/position;
- Company name;
- Other contact details;
- Data relating to our website/apps: IP address, cookies and other collected during your visit at our website (for more details, please see also our Cookies Policy).
If you are a job applicant, we may also process information included in your CV or cover letter, such as employment history, academic background, skills and competencies, languages spoken, if you provide such information to us.
If you are a patient, you may provide us your contact data (name and surname, e-mail and/or telephone number), your country of residence and your interests in specific indication or disease if you would like to learn more about it and get from us updates and/or marketing information connected with your interests, including the research projects in which we are involved in, to your e-mail or through your mobile.
We do not collect any special categories of personal data, as defined under the General Data Protection Regulation through our website.
Providing your personal data is voluntary, however if you do not provide us with the necessary information, we will not be allowed to perform the services, conclude an agreement or reply to your enquiry.
What we do with your personal data
|Purpose||Lawful basis for processing|
|To respond to your e-mail and to administer e-mail correspondence with you||Article 6 paragraph 1 point f of the GDPR (our legitimate interests to process this information, so that we can contact you and send you tailored and relevant information) or Article 6 paragraph 1 point b of the GDPR (if we have or will enter into a contract with you)|
|To fulfil a query, to respond to your other online inquiries and fulfil your requests for services and/or to administer our services||Article 6 paragraph 1 point f of the GDPR (our legitimate interests to process this information, so that we can contact you and send you tailored and relevant information) or Article 6 paragraph 1 point b of the GDPR (if we have or will enter into a contract with you)|
|To facilitate your attendance at one of our events / meetings||Article 6 paragraph 1 point b of the GDPR|
To maintain records of prospective, current and past clients and partners.
If you agree, we’ll add your contact details to our client database and we may occasionally reach out to you and send you e-mail invitations to Curandus events, marketing updates and other related materials concerning the projects in which we are involved in.
|Article 6 paragraph 1 point f of the GDPR - our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest|
If you are a job applicant, your personal data provided in the application documents will be processed for the following purposes:
|Purpose||Lawful basis for processing|
|To conduct the ongoing recruitment and take action before concluding an employment agreement with you (if applicable)||Article 6 paragraph 1 point c of the GDPR in connection with relevant local labour laws|
|To carry out future recruitment, if you grant us such consent||Article 6 paragraph 1 point a of the GDPR – your consent that you can provide us with voluntarily|
|To establish or pursue claims that may arise in connection with recruitment process, until the end of the period of limitation in the event you are not employed in the position for which you applied.||Article 6 paragraph 1 point f of the GDPR (legitimate interest of the data controller - the right to defense against the claims of a person who has not been employed)|
We take appropriate steps to ensure your personal data is stored in a secure environment to prevent any unauthorized access. We will not share your personal information with any third parties for them to use for their own marketing purposes. We may disclose your personal data if required to do so by law.
If this is compliant with applicable law, we may transfer your personal data to other entities, including our service providers, subcontractors and companies from our company’s capital group, provided that you give us your consent or there is another legal basis to provide these data to those entities. In case of data transfer to the companies from our capital group, we may have a legitimate interest in sending personal data for internal administrative purposes.
We may process your personal information abroad, including outside the European Economic Area (EEA), provided we comply with the applicable laws and regulations. In cases where we are sharing your personal data with organizations outside the EEA, we will ensure they agree to apply equivalent levels of protection as we do, and the transfer of your personal data is compliant with applicable law.
What rights and obligations you have
You have a number of rights under data protection law, which have been strengthened under the General Data Protection Regulation (GDPR):
You have the right to request access to and rectification or erasure of your personal data, as well as restriction of processing, data portability, the right not to be subject to a decision based solely on automated processing, including profiling, and the right to object to your personal data processing.
You have the right to object the personal data processing where the processing is carried out based on legitimate interests and/or for statistical purposes and your objection is justified by your particular situation.
You have the right to withdraw your consent to personal data processing at any time to the extent to which your consent applies. Withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.
If you are unhappy with the way in which we have handled your personal data you have the right to file a complaint with the supervisory body dealing with the protection of personal data in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes provisions of the General Data Protection Regulation.
We encourage you to contact us in the first place as we aim to promptly, efficiently and satisfactorily resolve any concerns or complaints you may have in relation to the processing of your personal data.
To fulfill your request, we will require you to provide satisfactory proof of your identity in order to ensure that your rights are respected and protected. This is to ensure that your personal data is disclosed only to you.
How long we store your personal data for
We will only retain personal data for as long as is necessary for the purposes we are using it for – the retention period will vary depending on the purposes it is used for.
If you contact us through our contact forms or e-mail address either as a patient or a business partner, we will process your data only for the time necessary to reach out to you, leave you our feedback and/or provide you with relevant information that you asked for or send you our marketing content, unless there is a legal obligation to store the data for longer.
If you no longer want to receive information and/or marketing content from us, you can email us at firstname.lastname@example.org and withdraw your consent without affecting the processing carried out prior to the withdrawal.
For the recruitment process purposes, we may process your personal data in the scope covered by the labor law until the recruitment process is completed, and the data provided by you voluntarily in a wider scope than required by the law, until your consent to the processing of personal data is revoked.
Upon completion of the recruitment process, we may process your personal data in order to defend against potential claims that may occur in connection with recruitment until the end of the period of limitation of these claims.
If you give us consent to use your personal data for the purpose of future recruitment, your data will be used for up to 2 years.