Date of issue: 10/April/2019

Whenever we refer to “we”, “us” or “our” in this Privacy Policy we mean: Curandus sp. z o.o. (Polish limited liability company) with its seat at 6 Postępu str., 02‑676 Warsaw, Poland, registered in the District Court for the Capital City of Warsaw 13th Commercial Division of the National Court Register under the number KRS 0000746260, tax identification number (NIP): 521-383-81-78, share capital: 50,000.00 PLN.

We carefully safeguard the information we hold about our partners, clients and employees. We endeavor to comply with the General Data Protection Regulation and the local laws applicable in the countries in which we operate.

This Privacy Policy applies to personal data collected by us as a data controller of the personal information that you provide to us when you visit our website at: www.curandus.io or through the e-mail contact. If you are visiting our website as a prospective staff member, please look at the section that applies to our job applicants.

In this Privacy Policy we would like to provide you with information on how we use your personal data collected from you, why we process them and explain your rights regarding the use of your personal data.

Our website and services are not intended for children, and we do not collect personal data relating to children.

How to contact us

If you have any questions about this Privacy Policy or would like to contact us about any other matter related to the processing of your personal information, please use the following contact information:

Curandus sp. z o.o.
6 Postępu Street
02-676 Warsaw, Poland
E-mail: gdprcontact@curandus.io

How we collect your personal data

We collect personal data when you provide your contact details to us when requesting information about our products or services, either via e-mail, telephone or face-to-face.

What types of information we collect about you

"Personal data" is any information that relates to you and that identifies you either directly from that information or indirectly, by reference to other information that we have access to. The personal data that we collect, and how we collect it, depends upon how you interact with us. Categories of personal data that we routinely collect about you includes:

  • Full name and surname;
  • Email address;
  • Postal address;
  • Job title/position;
  • Company name;
  • Other contact details;
  • Data relating to our website/apps: IP address, cookies and other collected during your visit at our website (for more details, please see also our Cookies Policy).

If you are a job applicant, we may also process information included in your CV or cover letter, such as employment history, academic background, skills and competencies, languages spoken, if you provide such information to us.

If you are a patient, you may provide us your contact data (name and surname, e-mail and/or telephone number), your country of residence and your interests in specific indication or disease if you would like to learn more about it and get from us updates and/or marketing information connected with your interests, including the research projects in which we are involved in, to your e-mail or through your mobile.

We do not collect any special categories of personal data, as defined under the General Data Protection Regulation through our website.

Providing your personal data is voluntary, however if you do not provide us with the necessary information, we will not be allowed to perform the services, conclude an agreement or reply to your enquiry.

What we do with your personal data

Your personal data will be processed only for the purposes as described in this Privacy Policy:

Purpose Lawful basis for processing
To respond to your e-mail and to administer e-mail correspondence with you Article 6 paragraph 1 point f of the GDPR (our legitimate interests to process this information, so that we can contact you and send you tailored and relevant information) or Article 6 paragraph 1 point b of the GDPR (if we have or will enter into a contract with you)
To fulfil a query, to respond to your other online inquiries and fulfil your requests for services and/or to administer our services Article 6 paragraph 1 point f of the GDPR (our legitimate interests to process this information, so that we can contact you and send you tailored and relevant information) or Article 6 paragraph 1 point b of the GDPR (if we have or will enter into a contract with you)
To facilitate your attendance at one of our events / meetings Article 6 paragraph 1 point b of the GDPR
To maintain records of prospective, current and past clients and partners.

If you agree, we’ll add your contact details to our client database and we may occasionally reach out to you and send you e-mail invitations to Curandus events, marketing updates and other related materials concerning the projects in which we are involved in.
Article 6 paragraph 1 point f of the GDPR - our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest
To track your use of our websites and interaction with our services. For example, to understand which website content is most popular with our visitors. Article 6 paragraph 1 point f of the GDPR - our legitimate interest in enhancing, facilitating and improving our website content and our services that you may use or are using – for more details please see our Cookie Policy

If you are a job applicant, your personal data provided in the application documents will be processed for the following purposes:

Purpose Lawful basis for processing
To conduct the ongoing recruitment and take action before concluding an employment agreement with you (if applicable) Article 6 paragraph 1 point c of the GDPR in connection with relevant local labour laws
To carry out future recruitment, if you grant us such consent Article 6 paragraph 1 point a of the GDPR – your consent that you can provide us with voluntarily
To establish or pursue claims that may arise in connection with recruitment process, until the end of the period of limitation in the event you are not employed in the position for which you applied. Article 6 paragraph 1 point f of the GDPR (legitimate interest of the data controller - the right to defense against the claims of a person who has not been employed)

We take appropriate steps to ensure your personal data is stored in a secure environment to prevent any unauthorized access. We will not share your personal information with any third parties for them to use for their own marketing purposes. We may disclose your personal data if required to do so by law.

If this is compliant with applicable law, we may transfer your personal data to other entities, including our service providers, subcontractors and companies from our company’s capital group, provided that you give us your consent or there is another legal basis to provide these data to those entities. In case of data transfer to the companies from our capital group, we may have a legitimate interest in sending personal data for internal administrative purposes.

We may process your personal information abroad, including outside the European Economic Area (EEA), provided we comply with the applicable laws and regulations. In cases where we are sharing your personal data with organizations outside the EEA, we will ensure they agree to apply equivalent levels of protection as we do, and the transfer of your personal data is compliant with applicable law.

What rights and obligations you have

You have a number of rights under data protection law, which have been strengthened under the General Data Protection Regulation (GDPR):

You have the right to request access to and rectification or erasure of your personal data, as well as restriction of processing, data portability, the right not to be subject to a decision based solely on automated processing, including profiling, and the right to object to your personal data processing.

You have the right to object the personal data processing where the processing is carried out based on legitimate interests and/or for statistical purposes and your objection is justified by your particular situation.

You have the right to withdraw your consent to personal data processing at any time to the extent to which your consent applies. Withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal.

If you are unhappy with the way in which we have handled your personal data you have the right to file a complaint with the supervisory body dealing with the protection of personal data in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes provisions of the General Data Protection Regulation.

We encourage you to contact us in the first place as we aim to promptly, efficiently and satisfactorily resolve any concerns or complaints you may have in relation to the processing of your personal data.

To fulfill your request, we will require you to provide satisfactory proof of your identity in order to ensure that your rights are respected and protected. This is to ensure that your personal data is disclosed only to you.

How long we store your personal data for

We will only retain personal data for as long as is necessary for the purposes we are using it for – the retention period will vary depending on the purposes it is used for.

If you contact us through our contact forms or e-mail address either as a patient or a business partner, we will process your data only for the time necessary to reach out to you, leave you our feedback and/or provide you with relevant information that you asked for or send you our marketing content, unless there is a legal obligation to store the data for longer.

If you no longer want to receive information and/or marketing content from us, you can email us at gdprcontact@curandus.io and withdraw your consent without affecting the processing carried out prior to the withdrawal.

For the recruitment process purposes, we may process your personal data in the scope covered by the labor law until the recruitment process is completed, and the data provided by you voluntarily in a wider scope than required by the law, until your consent to the processing of personal data is revoked.

Upon completion of the recruitment process, we may process your personal data in order to defend against potential claims that may occur in connection with recruitment until the end of the period of limitation of these claims.

If you give us consent to use your personal data for the purpose of future recruitment, your data will be used for up to 2 years.

Privacy Policy updates

This Privacy Policy may be amended or updated from time to time, so please check it regularly for updates. If we make any significant changes to its content, we will communicate this to you where possible through available means.

Please contact us on the details above if you have any questions about our Privacy Policy or processing of your personal data at: gdprcontact@curandus.io.

We use cookies to run our website and improve our visitors’ experience. For more information see our Privacy Policy & Cookies Policy.

I agree. Do not show this message anymore.